Microsoft CVE-2026-26153

Organizations should immediately deploy Microsoft's April 2025 Patch Tuesday updates to remediate this vulnerability across all affected Windows systems. Specific patched versions include Windows 10 1809 build 10.0.17763.8644 or later, Windows 10 21H2 build 10.0.19044.7184 or later, Windows 10 22H2 build 10.0.19045.7184 or later, Windows 11 22H3/23H2 build 10.0.22631.6936 or later, Windows 11 24H2 build 10.0.26100.32690 or later, Windows 11 25H2 build 10.0.26200.8246 or later, Windows 11 26H1 build 10.0.28000.1836 or later, Windows Server 2019 build 10.0.17763.8644 or later, Windows Server 2022 build 10.0.20348.5020 or later, Windows Server 2022 23H2 Edition build 10.0.25398.2274 or later, and Windows Server 2025 build 10.0.26100.32690 or later. Patches should be obtained through Windows Update, WSUS, Microsoft Update Catalog, or enterprise patch management solutions. Prioritize patching systems in multi-user environments, terminal servers, and any Windows hosts accessible to lower-privileged accounts. No effective workaround exists short of disabling EFS entirely, which would break encrypted file access for users relying on this feature. Verify patch deployment using the fixed build numbers listed above