KB5126835: what it fixes and who gets it

KB5126835 is a security update from Microsoft's October 2026 release for Windows Server 2012.

Microsoft data read
612CVEs fixed
21rated Critical
0already exploited
Yesrestart required

Should you install it?

Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5126835

CVETypeCVSSSeverity
CVE-2026-100202Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70147Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70153Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-96934Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-97814Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-102225Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-108467Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-70250Windows DHCP Client Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-83934Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-108460Windows Message Queuing Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-69802Network Device Enrollment Service (NDES) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-70187Windows Remote Desktop Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-70229Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88117Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88119Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88120Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88171Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-88174Windows Deployment Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing VulnerabilitySpoofing7.5Critical
CVE-2026-108399Windows Hyper-V Elevation of Privilege VulnerabilityElevation of Privilege7.2Critical
CVE-2026-100222Network Policy Server (NPS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69634Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69705Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69883Windows iSCSI Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69886Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70024Windows Internet Information Services Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70096Windows Rich Text Edit Control Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-70157Windows System Information Console Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83517Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83519Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83578Microsoft PowerShell Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83693Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83748Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83770Windows Text Shaping Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83782Windows Shell Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83862Windows Network Load Balancing Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83869Windows Domain Name Service Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83910RPC Runtime Library Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-83935Microsoft XML Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-84015Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85792Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85806Network Policy Server (NPS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85809Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85814Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-85928Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96096Windows Media Player Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96113Windows Domain Name Service Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96320Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96864Microsoft Failover Cluster Virtual Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96924Windows OLE Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-97805Windows Partition Management Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-97815Windows Error Reporting Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-96252Active Directory Federation Services (AD FS) Spoofing VulnerabilitySpoofing9.1Important
CVE-2026-105008Windows Schannel Spoofing VulnerabilitySpoofing9.0Important
CVE-2026-102203RPC Runtime Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-102217WebDAV Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-103575Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-105007Windows NDIS Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-108458Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Important
Showing the 60 most severe of 612. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year