{"family":"windowsserver","family_label":"Windows Server","build":"20348.5020","base":"20348","tag":"2022","kb":"KB5082142","kb_url":"https://support.microsoft.com/help/5082142","kb_title":"April 14, 2026—KB5082142 (OS Build 20348.5020)","release_date":"2026-04-14","update_type":"2026-04 B","update_type_label":"Security update (Patch Tuesday)","servicing":"LTSC","ms_known_issues":[{"title":null,"symptom":"After installing this update, domain controllers in environments with multiple domains in the forest that use Privileged Access Management (PAM), might experience LSASS crashes during startup. As a result, affected domain controllers might restart repeatedly, preventing authentication and directory services from functioning, and potentially rendering the domain unavailable. Some devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key on the first restart after installing this update. This issue only affects a limited number of systems in which ALL of the following conditions are true. These conditions are unlikely to be found","workaround":"This issue is addressed in out-of-band update KB5091575 . Note If your Windows Server 2022 device is enrolled in hotpatching, you should instead install the OOB hotpatch update KB5091576 . This hotpatch OOB update is released through Windows Update and does not require the device to restart. Remove the Group Policy configuration before installing the update (Recommended) Open Group Policy Editor ( gpedit.msc ) or your Group Policy Management Console. Navigate to: Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives . Set \" Configure TPM platform validation profile for native UEFI firmware configurations \" to \" Not Confi","applies_to":"","status":""}],"ms_none_known":false,"ms_highlights":null,"title":"April 14, 2026—KB5082142 (OS Build 20348.5020)","build_type":"release","channel_label":"Release","branch":null,"kind":"cumulative","kind_label":"Cumulative update","is_dotnet":false,"status":null,"line":{"status":"supported","note":"Supported LTSC release"},"created":1776168000,"created_iso":"2026-04-14T12:00:00Z","uuid":null,"permalink":"/builds/windowsserver/20348.5020/","tag_url":"/builds/windowsserver/2022/","index_url":"/builds/windowsserver/","api_url":"https://search.windowsforum.com/api/builds/build/windowsserver/20348.5020","records":[],"summary":null,"known_issues":[{"thread_id":413891,"node_id":4,"title":"April 2026 Patch Tuesday: LSASS crash/reboot risk on PAM non-Global Catalog DCs","replies":0,"views":1940,"post_date":1776447882,"last_post_date":1776447882,"url":"https://windowsforum.com/news/april-2026-patch-tuesday-lsass-crash-reboot-risk-on-pam-non-global-catalog-dcs.413891/","kind":"issue","match":"exact","pinned":true,"score":2.0}],"linked":{"news":[{"thread_id":414371,"node_id":4,"title":"KB5091157 April 2026 Out-of-Band Fix for Windows Server 2025 Reboot Loops","replies":2,"views":9140,"post_date":1776660063,"last_post_date":1776699696,"url":"https://windowsforum.com/news/kb5091157-april-2026-out-of-band-fix-for-windows-server-2025-reboot-loops.414371/","kind":"fix","match":"exact","pinned":true,"score":2.0},{"thread_id":413891,"node_id":4,"title":"April 2026 Patch Tuesday: LSASS crash/reboot risk on PAM non-Global Catalog DCs","replies":0,"views":1940,"post_date":1776447882,"last_post_date":1776447882,"url":"https://windowsforum.com/news/april-2026-patch-tuesday-lsass-crash-reboot-risk-on-pam-non-global-catalog-dcs.413891/","kind":"issue","match":"exact","pinned":true,"score":2.0},{"thread_id":413539,"node_id":4,"title":"Microsoft Fixes Windows Server Upgrade Bug: 2019/2022 No Longer Auto-Route to 2025","replies":0,"views":1153,"post_date":1776300047,"last_post_date":1776300047,"url":"https://windowsforum.com/news/microsoft-fixes-windows-server-upgrade-bug-2019-2022-no-longer-auto-route-to-2025.413539/","kind":"issue","match":"line","pinned":false,"score":0.983},{"thread_id":413595,"node_id":4,"title":"Microsoft Fixes Windows Server 2019/2022 Bug That Could Offer Server 2025","replies":0,"views":821,"post_date":1776336114,"last_post_date":1776336114,"url":"https://windowsforum.com/news/microsoft-fixes-windows-server-2019-2022-bug-that-could-offer-server-2025.413595/","kind":"issue","match":"line","pinned":false,"score":0.9784},{"thread_id":414389,"node_id":4,"title":"KB5082063 LSASS Reboot Loops: Microsoft Out-of-Band Fixes for Server 2025/2022","replies":0,"views":875,"post_date":1776685276,"last_post_date":1776685276,"url":"https://windowsforum.com/news/kb5082063-lsass-reboot-loops-microsoft-out-of-band-fixes-for-server-2025-2022.414389/","kind":"fix","match":"line","pinned":false,"score":0.9335},{"thread_id":416641,"node_id":4,"title":"Windows Server 2025 Upgrade via Windows Update: Opt-in Path for 2019 and 2022","replies":0,"views":1672,"post_date":1778022537,"last_post_date":1778022537,"url":"https://windowsforum.com/news/windows-server-2025-upgrade-via-windows-update-opt-in-path-for-2019-and-2022.416641/","kind":"coverage","match":"line","pinned":false,"score":0.7615},{"thread_id":419186,"node_id":84,"title":"Hitachi Energy GMS600 CVE-2022-4304: Fix OpenSSL RSA Timing Risk (v1.3.2)","replies":0,"views":534,"post_date":1779383601,"last_post_date":1779383601,"url":"https://windowsforum.com/news/hitachi-energy-gms600-cve-2022-4304-fix-openssl-rsa-timing-risk-v1-3-2.419186/","kind":"fix","match":"line","pinned":false,"score":0.5865},{"thread_id":419642,"node_id":4,"title":"Wittytool Disk Clone: Can You Change SIDs on Cloned Windows Server 2019/2022?","replies":0,"views":242,"post_date":1779784913,"last_post_date":1779784913,"url":"https://windowsforum.com/news/wittytool-disk-clone-can-you-change-sids-on-cloned-windows-server-2019-2022.419642/","kind":"coverage","match":"line","pinned":false,"score":0.5349}],"tutorials":[],"threads":[],"total":8,"exact":2,"window_days":45},"related":{"history":[{"build":"20348.5256","title":null,"created":1781006400,"kb":"KB5094128","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.5256/","current":false},{"build":"20348.5139","title":null,"created":1778587200,"kb":"KB5087545","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.5139/","current":false},{"build":"20348.5024","title":null,"created":1776600000,"kb":"KB5091575","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.5024/","current":false},{"build":"20348.5020","title":null,"created":1776168000,"kb":"KB5082142","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.5020/","current":true},{"build":"20348.4893","title":null,"created":1773144000,"kb":"KB5078766","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.4893/","current":false},{"build":"20348.4776","title":null,"created":1772452800,"kb":"KB5082314","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.4776/","current":false},{"build":"20348.4773","title":null,"created":1770724800,"kb":"KB5075906","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.4773/","current":false},{"build":"20348.4651","title":null,"created":1769256000,"kb":"KB5078136","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.4651/","current":false}],"history_total":94,"prev":{"build":"20348.4893","title":null,"created":1773144000,"kb":"KB5078766","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.4893/","current":false},"next":{"build":"20348.5024","title":null,"created":1776600000,"kb":"KB5091575","build_type":"release","channel_label":"Release","kind":null,"url":"/builds/windowsserver/20348.5024/","current":false},"wave":[]},"source":"microsoft","indexable":true,"generated":1790173607}