KB5094125: what it fixes and who gets it
KB5094125 is a security update from Microsoft's June 2026 release for Windows Server 2025.
Microsoft data read
Should you install it?
Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5094125
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-44815DHCP Client Service Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-45657Windows Kernel Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-47291HTTP.sys Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-42985Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-45648Windows Active Directory Domain Services Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-47289Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-44810Microsoft Cryptographic Services Elevation of Privilege Vulnerability | Elevation of Privilege | 8.4 | Critical |
| CVE-2026-45607Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-45641Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-47652Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.2 | Critical |
| CVE-2026-42987Windows Deployment Services (WDS) Remote Code Execution | Remote Code Execution | 8.1 | Critical |
| CVE-2026-33828Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Critical |
| CVE-2026-44803Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-44812Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-48574Windows Media Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-42992Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-44799Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-44801Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-47654Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-48563Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-47288Windows Kerberos Key Distribution Center (KDC) Remote Code Execution | Remote Code Execution | 7.1 | Critical |
| CVE-2026-42904Windows TCP/IP Elevation of Privilege Vulnerability | Elevation of Privilege | 9.6 | Important |
| CVE-2026-45602Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability | Tampering | 9.1 | Important |
| CVE-2026-47653Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-42974Windows Performance Monitor Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-42981Windows Performance Monitor Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45599Windows UPnP Device Host Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45635Windows UPnP Device Host Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45588Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-45654Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-47656Windows Boot Manager Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48568Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48570Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48573Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48575Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48576Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48578Secure Boot Security Feature Bypass Vulnerability | Elevation of Privilege | 7.9 | Important |
| CVE-2026-40404Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-40409Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-41092Microsoft Kinect Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42828Windows Projected File System Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42837Windows Projected File System Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42905Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42910Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42916NT OS Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42977Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42978Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42979Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42980NT OS Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42983Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42986Microsoft Graphics Component Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42989Winlogon Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42991Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-44802Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-44809Windows Common Log File System Driver Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45593Windows SDK Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45600Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
Showing the 60 most severe of 108. The full list is in Microsoft's Security Update Guide.
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…