13:39How to fix Windows keeps adjusting input device volume automatically13:39How to fix Windows activation error 0xC004F213?13:39How to uninstall Bonjour on Windows 11 and 1013:39How to fix the BthA2DP.sys blue screen (BSOD) in Windows 11 and 1013:39How to extract audio from YouTube videos: what is allowed and what works13:39How to fix "0x8096002A: No error description available" in Windows?13:39How to fix Windows stuck at shutting down screen?13:39How to fix NVIDIA Container high CPU usage on Windows?

KB5126657: what it fixes and who gets it

KB5126657 is a security update from Microsoft's October 2026 release for Windows 10 Version 21H2, Windows 10 Version 22H2.

Microsoft data read
899CVEs fixed
22rated Critical
1already exploited
Yesrestart required

Should you install it?

Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. We have a guide for this update below.

Security fixes in KB5126657

CVETypeCVSSSeverity
CVE-2026-96951Windows Shell Security Feature Bypass VulnerabilitySecurity Feature Bypass8.8ExploitedImportant
CVE-2026-100202Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70147Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70153Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-97814Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-102214Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-102225Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-105733Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-108467Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-83934Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-88073Windows Graphics Kernel Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-96913Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-96914Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-96952Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-108457Microsoft Windows PDF Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-108460Windows Message Queuing Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-70229Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-100215Microsoft Graphics Component Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing VulnerabilitySpoofing7.5Critical
CVE-2026-108399Windows Hyper-V Elevation of Privilege VulnerabilityElevation of Privilege7.2Critical
CVE-2026-102211Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityElevation of Privilege7.0Critical
CVE-2026-83917Windows ALPC Elevation of Privilege VulnerabilityElevation of Privilege7.0Critical
CVE-2026-100222Network Policy Server (NPS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-102210Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-105010Microsoft Windows Search Component Elevation of Privilege VulnerabilityElevation of Privilege9.8Important
CVE-2026-69634Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69639Windows libarchive Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69705Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69883Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69886Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70024Windows Internet Information Services Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70096Windows Rich Text Edit Control Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70157Windows System Information Console Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83517Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83519Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83578Microsoft PowerShell Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83693Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83748Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83770Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83782Windows Shell Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83869Windows Domain Name Service Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83910RPC Runtime Library Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83935Microsoft XML Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-84015Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85792Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85806Network Policy Server (NPS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85809Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85814Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85928Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96096Windows Media Player Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96219Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96924Windows OLE Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-97805Windows Partition Management Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-97815Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-97816Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-105008Windows Schannel Spoofing VulnerabilitySpoofing9.0Important
CVE-2026-102203RPC Runtime Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-102217WebDAV Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-103575Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Important
Showing the 60 most severe of 899. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year
All membersJoin