13:39How to fix Windows keeps adjusting input device volume automatically13:39How to fix Windows activation error 0xC004F213?13:39How to uninstall Bonjour on Windows 11 and 1013:39How to fix the BthA2DP.sys blue screen (BSOD) in Windows 11 and 1013:39How to extract audio from YouTube videos: what is allowed and what works13:39How to fix "0x8096002A: No error description available" in Windows?13:39How to fix Windows stuck at shutting down screen?13:39How to fix NVIDIA Container high CPU usage on Windows?

KB5126655: what it fixes and who gets it

KB5126655 is a security update from Microsoft's October 2026 release for Windows Server 2022.

Microsoft data read
977CVEs fixed
33rated Critical
1already exploited
Yesrestart required

Should you install it?

Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5126655

CVETypeCVSSSeverity
CVE-2026-96951Windows Shell Security Feature Bypass VulnerabilitySecurity Feature Bypass8.8ExploitedImportant
CVE-2026-100202Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-100219Microsoft QUIC Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-105016Microsoft QUIC Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70147Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70153Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-96934Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-97814Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-102214Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-102225Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-105733Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-108467Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-70250Windows DHCP Client Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-83934Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-96913Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-96914Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-96952Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-108457Microsoft Windows PDF Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-108460Windows Message Queuing Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-69802Network Device Enrollment Service (NDES) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-70187Windows Remote Desktop Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-70229Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88117Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88119Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88120Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88171Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88174Windows Deployment Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-100215Microsoft Graphics Component Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing VulnerabilitySpoofing7.5Critical
CVE-2026-96222Active Directory Federation Services (AD FS) Spoofing VulnerabilitySpoofing7.4Critical
CVE-2026-108399Windows Hyper-V Elevation of Privilege VulnerabilityElevation of Privilege7.2Critical
CVE-2026-102211Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityElevation of Privilege7.0Critical
CVE-2026-83917Windows ALPC Elevation of Privilege VulnerabilityElevation of Privilege7.0Critical
CVE-2026-100222Network Policy Server (NPS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-102210Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-105010Microsoft Windows Search Component Elevation of Privilege VulnerabilityElevation of Privilege9.8Important
CVE-2026-69634Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69639Windows libarchive Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69705Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69883Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69886Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70024Windows Internet Information Services Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70096Windows Rich Text Edit Control Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70157Windows System Information Console Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83517Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83519Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83578Microsoft PowerShell Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83693Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83748Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83770Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83780Windows CCFFilter Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83782Windows Shell Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83862Windows Network Load Balancing Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83869Windows Domain Name Service Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83910RPC Runtime Library Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83935Microsoft XML Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-84015Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85792Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85806Network Policy Server (NPS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
Showing the 60 most severe of 977. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year
All membersJoin