The Curious Engineer

All blogs / Security

0patch Blog

0patch.com/blog

Tiny reboot-less security patches for critical vulnerabilities in Windows, Microsoft Office, and other Windows products

SecurityWindows internals

’23’24’25’26
Posts
216 from 31 Jan 2023 to 21 Oct 2026
Posting
weekly (34 in the last year)
Kind
company blog
Feed
https://0patch.com/rss.xml

2026 32

  1. Micropatches released for Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVE-2026-49179)
  2. Micropatches released for Windows Power Dependency Coordinator Elevation of Privilege (CVE-2026-69459)
  3. Micropatches released for Windows DNS Server Remote Code Execution Vulnerability (CVE-2026-62878)
  4. Micropatches released for Windows WalletService Elevation of Privilege (CVE-2026-49176)
  5. Welcome to Your New Home, Windows Server 2012!
  6. Micropatches released for Microsoft Message Queuing Queue Manager Remote Code Execution (CVE-2026-54992)
  7. Micropatches released for Microsoft Excel Remote Code Execution Vulnerability (CVE-2026-40362)
  8. Micropatches released for "ResetNightmare" Windows Kerberos Elevation of Privilege (CVE-2026-27912)
  9. Keeping Microsoft Office 2021 Secure For 3 More Years
  10. Micropatches released for "Certighost" Active Directory Certificate Services Elevation of Privilege (CVE-2026-54121)
  11. Micropatches released for "KerberLoss" Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2026-25177)
  12. Micropatches released for "GreenPlasma" Windows Collaborative Translation Framework Elevation of Privilege (CVE-2026-45586)
  13. Free micropatches available for "LegacyHive" (was 0day, now CVE-2026-62832)
  14. Micropatches released for Remote Desktop Client Remote Code Execution Vulnerability (CVE-2026-47289)
  15. Micropatches released for Windows Kerberos Elevation of Privilege Vulnerability (CVE-2025-60704)
  16. Micropatches released for Desktop Window Manager Elevation of Privilege Vulnerability (CVE-2026-20871)
  17. Broken official patches for Windows Shell Spoofing Vulnerability (CVE-2026-32202)
  18. Dropping a 0day? Consider having it 0patched first.
  19. Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)
  20. Micropatches released for Windows Shell Link Processing Spoofing Vulnerability (CVE-2026-25185)
  21. Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187)
  22. Micropatches released for Windows Telephony Service Elevation of Privilege Vulnerability (CVE-2026-20931)
  23. Micropatches released for Windows Error Reporting Service Elevation of Privilege Vulnerability (CVE-2026-20817)
  24. Micropatches released for Windows Shell Security Feature Bypass Vulnerability (CVE-2026-21510)
  25. Micropatches released for Windows Storage Elevation of Privilege Vulnerability (CVE-2026-21508)
  26. Micropatches released for Arbitrary Registry Key Delete As Local System With Consolidator Scheduled Task (CVE-2025-59512)
  27. Micropatches released for Desktop Windows Manager Elevation of Privilege Vulnerability (CVE-2025-55681)
  28. Micropatches released for Microsoft Access Remote Code Execution Vulnerability (CVE-2025-62552)
  29. Micropatches released for Windows Telephony Service Elevation of Privilege Vulnerability (CVE-2024-43626)
  30. Micropatches released for Microsoft Excel Remote Code Execution Vulnerability (CVE-2025-62203)
  31. Micropatches Released for Microsoft Office Security Feature Bypass Vulnerability (CVE-2026-21509)
  32. Micropatches Released for Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability (CVE-2025-47987)

2025 137

  1. Free Micropatches for Windows Remote Access Connection Manager DoS (0day)
  2. Microsoft Silently Patched CVE-2025-9491 - We Think Our Patch Provides More Security
  3. Micropatches Released for Windows Installer Elevation of Privilege Vulnerability (CVE-2025-50173)
  4. Welcome to your new family, Windows 10!
  5. Micropatches Released for Windows Storage Spoofing Vulnerability (CVE-2025-49760)
  6. Micropatches for Windows IKE Extension Remote Code Execution (CVE-2022-34721)
  7. End Of Security For Microsoft Office 2016 and 2019? Not With 0patch!
  8. 42 Days After Our Micropatch, The Office DDE Vulnerability Gets An Official Fix
  9. How We Micropatched a Publicly Dropped 0day in Task Scheduler (CVE-2018-8440)
  10. Micropatching Incompletely Patched Local Privilege Escalation in User Profile Service (CVE-2021-34484)
  11. One Step Closer To Crowdpatching and Patch Bounties
  12. 0patch Security-Adopts Microsoft Edge on Windows 7, Server 2008 and Server 2012
  13. Micropatching Keeps Windows 7 and Windows Server 2008 R2 Secure After Their End-Of-Support
  14. Micropatching "ms-officecmd" Remote Code Execution (CVE-2021-43905)
  15. 0patch Keeps Office 2010 Secured After End-Of-Support
  16. Microsoft Diagnostic Tool "DogWalk" Package Path Traversal Gets Free Micropatches (CVE-2022-34713)
  17. Micropatch for Zerologon, the "perfect" Windows vulnerability (CVE-2020-1472)
  18. Micropatch is Available for WSUS Spoofing Local Privilege Escalation Vulnerability (CVE-2020-1013)
  19. Changes in 0patch Pricing For New Subscriptions Coming in August
  20. 0patching the "Worst Windows Remote Code Execution Bug in Recent Memory" CVE-2017-0290
  21. Micropatch is Available for Windows LNK Remote Code Execution Vulnerability (CVE-2020-1299)
  22. 0patch Agent 21.05.05.10500 released
  23. Free Micropatches for "RemotePotato0", a "WON'T FIX" Local Privilege Escalation Affecting all Windows Systems
  24. Exploit Kit Rendezvous and CVE-2017-0022
  25. Patch to Self
  26. 0patch Security-Adopts Windows 10 v2004 and v1909 to Keep them Running Securely
  27. Micropatching Unpatched Local Privilege Escalation in Mobile Device Management Service (CVE-2021-24084 / 0day)
  28. A New 0patch Experience
  29. A Bug That Doesn't Want To Die (CVE-2021-34484, CVE-2022-21919, CVE-2022-26904)
  30. Another Task Scheduler 0day, Another Task Scheduler Micropatch (The SandboxEscaper Saga)
  31. Micropatches for Windows Kerberos Elevation of Privilege (CVE-2022-35756)
  32. Free Micropatches For Bypassing "Mark of the Web" on Unzipped Files ("ZippyReads" / CVE-2022-41049)
  33. PRESS RELEASE: ACROS Security Announces the Launch of 0patch PRO
  34. Windows Updates Broke Your Networking? Free Micropatches To The Rescue (CVE-2018-8174)
  35. Free Micropatches for the "InstallerFileTakeOver" 0day (CVE-2021-43883)
  36. Micropatching PrintDemon Vulnerability (CVE-2020-1048)
  37. Micropatching a Workaround for CVE-2020-0674
  38. Remotely Exploitable 0day in Internet Explorer Gets a Free Micropatch
  39. Remote Code Execution Vulnerability in Zoom Client for Windows (0day)
  40. 0patching the Quick Brown Fox of CVE-2017-0283
  41. Micropatches for two Windows Print Spooler Elevation of Privilege issues (CVE-2022-30206, CVE-2022-21997)
  42. Micropatching Brings The Abandoned Equation Editor Back To Life
  43. Micropatches For "KrbRelay" Local Privilege Escalation Vulnerability (Wontfix/0day)
  44. 0patching a Pretty Nasty Microsoft Word Type Confusion Vulnerability (CVE-2017-11826)
  45. Micropatches for Remote Procedure Call Runtime Integer Overflows (CVE-2022-26809 and CVE-2022-22019)
  46. Micropatches for CVE-2021-24074, CVE-2021-24086, and CVE-2021-24094?
  47. 0patching a 0-day: Windows gdi32.dll memory disclosure (CVE-2017-0038)
  48. Did Microsoft Just Manually Patch Their Equation Editor Executable? Why Yes, Yes They Did. (CVE-2017-11882)
  49. Micropatching the "PrinterBug/SpoolSample" - Another Forced Authentication Issue in Windows
  50. Micropatches for Kerberos Elevation of Privilege (CVE-2022-33647, CVE-2022-33679)
  51. New 0patch Agent is Released - Version 20.06.18.10800
  52. 0patch Security-Adopts Windows 10 v1803 and v1809 to Keep them Running Securely
  53. New Release: 0patch Agent 2016.06.14.850
  54. Crowdpatching
  55. Microsoft Edge Uses a Secret Trick And Breaks Internet Explorer's Security
  56. Free Micropatches for PrintNightmare Vulnerability (CVE-2021-34527)
  57. Micropatching Remote Code Execution in WebEx Browser Extension (CVE-2017-3823)
  58. One... Two... Three Micropatches For Three Windows 0days
  59. Micropatches for "SpoolFool" Print Spooler Elevation of Privilege (CVE-2022-21999)
  60. 0patching Foxit Reader's saveAs "0day" (CVE-2017-10952)
  61. Micropatches for Remote Desktop Client RCE (CVE-2022-21990)
  62. Micropatching Unknown 0days in Windows Type 1 Font Parsing
  63. Another Windows Installer Local Privilege Escalation Bug Gets a Micropatch (CVE-2021-26415)
  64. Micropatches for Local Privilege Escalation in LSASS (CVE-2022-30166)
  65. 0patching Foxit Reader Buffer... Oops... Integer Overflow (CVE-2017-17557)
  66. Microsoft's Manual Binary Patch For CVE-2017-11882 Meets 0patch
  67. 2021 New Year's Resolution: "We Will Spend Less Time and Money on Security Patches"
  68. 0patch Agent on Linux - Micropatching CVE-2016-9445
  69. 0day in Windows 7 and Server 2008 R2 Gets a Micropatch
  70. Our First Weeks of Securing Windows 7 and Windows Server 2008 R2
  71. Two More Years of Critical Security Patches for Windows 7 and Windows Server 2008 R2
  72. Micropatches for Two Similar Remote Code Execution Issues (CVE-2022-21971, CVE-2022-21974)
  73. Windows Print Spooler Keeps Delivering Vulnerabilities, And We Keep Patching Them (CVE-2020-1030)
  74. Local Privilege Escalation 0day in PsExec Gets a Micropatch
  75. Bridging the "Security Update Gap" With 0patch
  76. Free Micropatches For "Follina" Microsoft Diagnostic Tool Remote Code Execution 0day (CVE-2022-30190)
  77. Micropatches for Type Confusion in Internet Explorer's JScript9 Engine (0day, now CVE-2022-41128)
  78. Two Interesting Micropatches For 7-Zip (CVE-2017-17969 and CVE-2018-5996)
  79. Significant 0patch Server Update on October 20, 2021
  80. Micropatch is Available for MS Windows OLE Remote Code Execution Vulnerability (CVE-2020-1281)
  81. Micropatching a Hypervisor With Running Virtual Machines (CVE-2017-4924)
  82. 0patching Foxit Reader's Heap Buffer Overflow Vulnerability CVE-2016-3740
  83. 0patch Open Beta is Launched
  84. Free Micropatches for "PetitPotam" (CVE-2021-36942)
  85. 0patching another 0-day: Internet Explorer 11 Type Confusion (CVE-2017-0037)
  86. Free Micropatches For Bypassing MotW Security Warning with Invalid Signature (0day, now CVE-2022-44698 and CVE-2023-24880)
  87. Micropatch for Remote Code Execution Issue in Internet Explorer (CVE-2021-26419)
  88. Free Micropatches for Malicious Printer Driver Issue (CVE-2021-36958)
  89. Patching, Re-Patching and Meta-Patching the Jet Database Engine RCE (CVE-2018-8423)
  90. 0patch Security-Adopts Windows 10 v21H1 to Keep it Running Securely
  91. Micropatch for Another Remote Code Execution Issue in Internet Explorer (CVE-2021-31959)
  92. Micropatch For Remote Code Execution by DNS Administrators (CVE-2021-40469)
  93. Analyzing And Micropatching With Tetrane REVEN (Part 1, CVE-2021-26897)
  94. Windows Installer Local Privilege Escalation 0day Gets a Micropatch
  95. The Bug That Killed Equation Editor - How We Found, Exploited And Micropatched It (CVE-2018-0802)
  96. Micropatch Available for "SIGRed", the Wormable Remote Code Execution in Windows DNS Server (CVE-2020-1350)
  97. Micropatch is Available for Windows Task Scheduler Security Feature Bypass (CVE-2020-1113)
  98. Words "Patching" and "Instantly" Now in the Same Phrase
  99. Micropatching the "DFSCoerce" Forced Authentication Issue (No CVE)
  100. 0patching the RSRC Arbitrary NULL Write Vulnerability in LabVIEW (CVE-2017-2779)
  101. 0patch: Fixing The Fixing
  102. Comparing Our Micropatch With Microsoft's Official Patch For CVE-2018-8440
  103. Office DDE Exploits and Attack Surface Reduction
  104. Writing a 0patch for Acrobat Reader's Use-After-Free Vulnerability CVE-2016-1077
  105. Micropatch Available for User-Mode Power Service Memory Corruption (CVE-2020-1015)
  106. 0patching the Office DDE / DDEAUTO Vulnerability... ehm... Feature
  107. Letter To 0patch Users (February 10, 2020)
  108. Security Patching is Hard - Survey Results 2017
  109. Micropatches for Remote Code Execution in Windows Enterprise App Management Service (CVE-2022-35841)
  110. A Quick Analysis of Microsoft's ESTEEMAUDIT Patch
  111. No Source Code For a 14-Year Old Vulnerable DLL? No Problem. (CVE-2018-20250)
  112. Micropatch is Available for Memory Corruption in DHCP Message Processing (CVE-2020-0662)
  113. Micropatches for the "File Extension" URL Scheme (CVE-2021-40444)
  114. Comparing 0patching with virtual patching on CVE-2017-7269 [placeholder]
  115. Sorry, Adobe Reader, We're Not Letting You Phone Home Without User's Consent (CVE-2019-7089)
  116. 0patching the "Immortal" CVE-2017-7269
  117. 0patch Central: We are Now Ready to Micropatch Your Enterprise
  118. Micropatch For Memory Corruption in Microsoft Outlook (CVE-2022-35742)
  119. Outrunning Attackers On The Jet Database Engine 0day (CVE-2018-8423)
  120. Micropatching MSHTML Remote Code Execution Issue (CVE-2021-33742)
  121. Micropatches for Windows IKE Extension Remote Code Execution (CVE-2022-21849)
  122. Micropatches Released for Windows Update Service Elevation of Privilege Vulnerability (CVE-2025-48799)
  123. Micropatches Released for Windows Disk Cleanup Tool Elevation of Privilege Vulnerability (CVE-2025-21420)
  124. Micropatches Released for "WSPCoerce" Coerced Authentication via Windows Search Protocol (NO CVE/WONTFIX)
  125. Micropatches Released for WEBDAV Remote Code Execution Vulnerability (CVE-2025-33053)
  126. Micropatches Released for Preauth DoS on Windows Deployment Service (CVE-2025-29957)
  127. Micropatches Released for Microsoft Management Console Security Feature Bypass Vulnerability (CVE-2025-26633)
  128. How MSPs Can Handle Windows 10 End of Support with 0patch
  129. Micropatches released for SCF File NTLM Hash Disclosure Vulnerability (0day) - and Free Micropatches for it
  130. Micropatches Released for SCF File NTLM Hash Disclosure Vulnerability (No CVE)
  131. Analysis of a Flaw in Microsoft's Patch for "copy2pwn" (CVE-2024-38213)
  132. Micropatches Released for Microsoft Outlook Remote Code Execution Vulnerability (CVE-2025-21357)
  133. Micropatches Released for Active Directory Certificate Services Elevation of Privilege Vulnerability (CVE-2024-49019)
  134. Micropatches Released for Windows OLE Remote Code Execution (CVE-2025-21298)
  135. Micropatches Released for NTLM Hash Disclosure Spoofing Vulnerability (CVE-2024-43451)
  136. Micropatches Released for Windows Task Scheduler Elevation of Privilege Vulnerability (CVE-2024-49039)
  137. Micropatches Released for Windows "LDAPNightmare" Denial of Service Vulnerability (CVE-2024-49113)

2024 23

  1. URL File NTLM Hash Disclosure Vulnerability (initially 0day, now CVE-2025-21377) - and Free Micropatches for it
  2. Windows Server 2012 Mark of the Web Vulnerability (0day, now CVE-2025-27472) - and Free Micropatches for it
  3. Micropatches for "LNK Stomping" Windows Mark of the Web Security Feature Bypass (CVE-2024-38217)
  4. Fixing a Bunch of Scripting Engine Vulnerabilities by Disabling Just-In-Time Compiler (CVE-2024-38178)
  5. Micropatches Released for Remote Registry Service Elevation of Privilege Vulnerability (CVE-2024-43532)
  6. We Patched CVE-2024-38030, Found Another Windows Themes Spoofing Vulnerability (initially 0day, now CVE-2025-21308)
  7. Micropatches for Windows Installer Elevation of Privilege Vulnerability (CVE-2024-38014)
  8. Micropatches for "MadLicense" Windows Remote Desktop Licensing Service Remote Code Execution (CVE-2024-38077)
  9. Patches for two Windows Bluetooth Vulnerabilities (CVE-2023-23388, CVE-2023-24871)
  10. Micropatches Released for Windows MSHTML Platform Spoofing (CVE-2024-38112)
  11. Long Live Windows 10... With 0patch
  12. Micropatches For Microsoft Outlook Remote Code Execution Vulnerability (CVE-2024-21378)
  13. Micropatch Released for Windows Authentication Elevation of Privilege Vulnerability (CVE-2023-36047)
  14. Micropatches Released for Windows MSHTML Platform Remote Code Execution Vulnerability (CVE-2023-35628)
  15. Micropatches Released for Windows Workstation and Server Service Elevation of Privilege Vulnerability (CVE-2022-38034, CVE-2022-38045, No CVE)
  16. Micropatches for Windows Local Session Manager Elevation of Privilege (CVE-2023-21771)
  17. Micropatches for Leaking NTLM Credentials Through Windows Themes (CVE-2024-21320)
  18. Micropatches Released for Microsoft Outlook "MonikerLink" Remote Code Execution Vulnerability (CVE-2024-21413, CVE-2024-38021)
  19. Micropatches Released for Microsoft Outlook Information Disclosure Vulnerability (CVE-2023-35636)
  20. Micropacthes For "OverLog", Remote Denial of Service Vulnerability in Windows Event Log Service (CVE-2022-37981)
  21. Micropatches For Another Remote Windows Event Log Denial Of Service ("LogCrusher", no CVE)
  22. Micropatches Released For Microsoft Windows XAML diagnostics API Elevation of Privilege (CVE-2023-36003)
  23. The "EventLogCrasher" 0day For Remotely Disabling Windows Event Log, And a Free Micropatch For It

2023 24

  1. Free Micropatches For Microsoft Access Forced Authentication Through Firewall (0day)
  2. We Patched CVE-2023-28244 Before It Was Cool
  3. Micropatches Released For Microsoft WordPad Information Disclosure (CVE-2023-36563)
  4. Micropatches Released For Microsoft Office Security Feature Bypass (CVE-2023-33150) - Plus a Small 0day
  5. 0patch Security-Adopts Windows 11 v21H2 Home and Pro to Keep it Running Securely
  6. Micropatches Released For Two Windows CNG Key Isolation Service Vulnerabilities (CVE-2023-28229, CVE-2023-36906)
  7. Micropatches Released For Windows Error Reporting Service Elevation of Privilege (CVE-2023-36874)
  8. Micropatches Released For Windows Search Remote Code Execution (CVE-2023-36884)
  9. Three More Years of Critical Security Patches for Windows Server 2012 and Windows Server 2012 R2
  10. Micropatches Released For Denial of Service in Microsoft Message Queuing (CVE-2023-28302, CVE-2023-21769)
  11. Micropatches Released For DHCP Server Service Remote Code Execution (CVE-2023-28231)
  12. Micropatches Released For Windows Task Scheduler Elevation of Privilege (CVE-2023-21541)
  13. New 0patch Central, New Security Features
  14. 0patch Security-Adopts Windows 10 v20H2 to Keep it Running Securely
  15. Micropatches Released For Remote Code Execution in Windows OLE (CVE-2023-29325)
  16. Micropatches Released For "QueueJumper" Remote Code Execution in Microsoft Message Queuing (CVE-2023-21554)
  17. Micropatch for Microsoft Outlook Notification File NTLM Hash Theft (CVE-2023-23397, CVE-2023-29324, CVE-2023-35384, CVE-2024-20652)
  18. Micropatches for Microsoft Word Remote Code Execution (CVE-2023-21716)
  19. Goodbye, Pesky Edge Notification, You're Not Needed Anymore!
  20. Micropatches For Windows CryptoAPI Spoofing (CVE-2022-34689)
  21. Micropatches for Windows COM+ Event System Service Elevation of Privilege Vulnerability (CVE-2022-41033)
  22. 0patch Agent 22.11.11.10550 Released
  23. Micropatching the "LocalPotato" NTLM Elevation of Privilege (CVE-2023-21746)
  24. Micropatching Arbitrary File Delete Vulnerability in Windows Backup Service (CVE-2023-21752)