CybersecurityVulnerability Management

Windows Server 2022 Approaches End of Mainstream Support

Analyst 207||Source: BleepingComputer
Rows of computer servers and racks with technicians in the background.

"On October 13, 2026, Windows Server 2022 will reach end of mainstream support. The October 2026 security update will be the last mainstream support update available for this version," Microsoft said in a message center update.

Microsoft's timeline for Windows Server 2022

Microsoft has set a clear cutoff: Windows Server 2022 will leave mainstream support on October 13, 2026. After that date the product will move into extended support, which Microsoft says "includes security updates at no additional cost," and will continue to receive monthly security updates through October 14, 2031. Windows Server 2022 was first announced in March 2021 and became generally available in September 2021 as the Long-Term Servicing Channel (LTSC) release, with an initial 10 years of support.

Windows Server 2025: the recommended upgrade path

Microsoft is urging customers to upgrade to Windows Server 2025 for ongoing mainstream support. The company notes that "Windows Server 2025 is now the latest Long-Term Servicing Channel (LTSC) release for Windows Server. To help keep your environment protected and supported, plan to upgrade to Windows Server 2025 for full mainstream support."

Windows Server 2025 became generally available in November 2024 after first rolling out to Windows Insiders in January 2024. Its mainstream support is scheduled to end on November 13, 2029, with extended support ending five years later on November 14, 2034. Microsoft also points customers to a free 180-day trial of Windows Server 2025 available through the Microsoft Evaluation Center for those who want to test before deployment.

Hotpatching for Datacenter: Azure Edition and consumer ESU changes

Microsoft recently extended a pair of overlapping support programs. Hotpatching for Windows Server 2022 on systems running the Datacenter: Azure Edition has been extended until October 2027 — one year after the mainstream end date. In parallel, Microsoft quietly extended the free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year.

Microsoft also reminded customers that Windows 10 Enterprise LTSB 2016 and the Home and Pro editions of Windows 11 24H2 "will stop receiving updates 3 months after reaching end of support." Separately, the company has shared a list of products that will reach end of support or be retired in 2025.

What this means for technologists, procurement leaders, and consumers

  • Technologists and security teams: With the last mainstream security update for Windows Server 2022 scheduled for October 2026 and monthly security updates continuing through October 14, 2031 under extended support, teams must decide whether to plan upgrades now or rely on extended support and the limited hotpatch window for Datacenter: Azure Edition.
  • Procurement and deployment leaders: Microsoft’s explicit recommendation to "evaluate upgrade options and begin deployment testing early to help ensure a smooth transition" points procurement toward testing Windows Server 2025 — including using the 180-day trial — and scheduling migrations ahead of the November 2029 end of mainstream support for Server 2025.
  • Consumers and endpoint managers: The additional year of free Windows 10 ESU and the notice about Windows 10 Enterprise LTSB 2016 and Windows 11 24H2 stopping updates three months after end of support are concrete timing signals for consumer-facing update policies and support contracts.

Where to find lifecycle dates and next steps

Microsoft directs customers to its Lifecycle Policy search tool and the Windows Lifecycle FAQ page for detailed servicing dates. For teams evaluating the move to Windows Server 2025, Microsoft offers a free 180-day Evaluation Center trial. The company's explicit calendar — October 13, 2026 for Windows Server 2022 mainstream end; October 14, 2031 for its extended security updates; November 13, 2029 and November 14, 2034 for Windows Server 2025 mainstream and extended end dates respectively — creates concrete decision points for testing, procurement, and risk planning.

For the original announcement and full details, see Microsoft’s message as reported by Bleeping Computer: https://www.bleepingcomputer.com/news/microsoft/windows-server-2022-reach-end-of-mainstream-support-in-90-days/

Emerging ThreatsMicrosoftWindows Server 2022Extended SupportEnd Of Mainstream Support
Related Intelligence

Continue Reading

Laptop on a minimalist desk with a potted plant and stack of paper in soft natural light.

WordPress Discloses Core Flaw Enabling Unauthenticated Code Execution

WordPress has patched a critical flaw that allowed hackers to execute code remotely without authentication, releasing versions 6.9.5 and 7.0.2 to fix the vulnerability. The update addresses a REST API batch-route confusion and SQL injection issue that could be triggered by a simple HTTP request.

Analyst 207
Rows of computer servers and networking equipment in a dimly lit data center with one server highlighted.

OpenSSL Flaw Exposes Servers to Memory Exhaustion Attacks

A newly discovered OpenSSL flaw, dubbed HollowByte, leaves unpatched servers vulnerable to memory exhaustion attacks, where a mere 11 bytes can trigger the allocation of up to 131 KB of memory for a message that never arrives. This tiny trigger can bring a server to its knees, freezing memory and blocking critical connections.

Analyst 207
Dimly lit server room with one server showing high memory usage.

OpenSSL Servers Vulnerable to Memory-Bloating DDoS Attacks

Beware: a simple 11-byte malicious input can cripple OpenSSL servers with a devastating DDoS attack, leaving them permanently bloated and vulnerable. This sneaky exploit, dubbed HollowByte, takes advantage of a weakness in OpenSSL's TLS handshake to drain server resources.

Analyst 207
Stack of vintage papers with handwritten notes and diagrams on a formal archive room table.

Turing's Voice Encryption System Uncovered in Wartime Papers

A treasure trove of wartime papers, known as the "Bayley papers," has surfaced in London, selling for nearly $500,000 and revealing groundbreaking details about Alan Turing's pioneering voice encryption system. This long-hidden collection has finally been transferred into the public sphere, offering historians and technologists a fascinating glimpse into Turing's secret work.

Analyst 207