# Microsoft update removes seven compromised certificates from Windows trust lists

- URL: https://talkfuse.com/story/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates/
- Published: 2026-10-27T12:30:00+00:00
- Updated: 2026-10-27T12:50:38+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/27/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates/5305637
- Topics: Business, Entertainment, Markets, Music, Software, Technology

## Key points

- Microsoft issued an optional Windows certificate update.
- It removes seven certificates linked to affected trust hierarchies.
- Known issues from the 13 October update remain.

## Summary

Microsoft has released a non-security out-of-band Windows update to refresh certificate trust lists on supported devices that cannot reach Microsoft’s certificate-update service or have automatic updates disabled. The change matters because it removes certificates linked to compromised eMudhra keys, reducing the risk that forged certificates could appear to come from a trusted authority.

Released on 26 October, the update removes seven certificates: six eMudhra G3 roots and an AAA Certificate Services cross-sign. Most devices receive trust-list updates automatically and may not need this patch. It also includes the 13 October update, but does not fix its reported VPN, on-premises Exchange, Smart App Control, audio and Remote Desktop issues.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.