KB5094126: what it fixes and who gets it
KB5094126 is a security update from Microsoft's June 2026 release for Windows 11 Version 24H2, Windows 11 Version 25H2.
Microsoft data read
Should you install it?
Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5094126
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-44815DHCP Client Service Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-45657Windows Kernel Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-47291HTTP.sys Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2025-10263ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | Elevation of Privilege | 9.3 | Critical |
| CVE-2026-42985Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-47289Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-44810Microsoft Cryptographic Services Elevation of Privilege Vulnerability | Elevation of Privilege | 8.4 | Critical |
| CVE-2026-45607Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-45641Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-47652Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.2 | Critical |
| CVE-2026-33828Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Critical |
| CVE-2026-44803Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-44812Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-48574Windows Media Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-42992Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-44799Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-44801Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-48563Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-42904Windows TCP/IP Elevation of Privilege Vulnerability | Elevation of Privilege | 9.6 | Important |
| CVE-2026-45602Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability | Tampering | 9.1 | Important |
| CVE-2026-47653Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-42974Windows Performance Monitor Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-42981Windows Performance Monitor Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45599Windows UPnP Device Host Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45635Windows UPnP Device Host Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45588Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-45654Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-47656Windows Boot Manager Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48568Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48570Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48573Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48575Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48576Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48578Secure Boot Security Feature Bypass Vulnerability | Elevation of Privilege | 7.9 | Important |
| CVE-2026-40404Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-40409Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-41092Microsoft Kinect Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42828Windows Projected File System Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42829Windows Administrator Protection Secure Feature Bypass Vulnerability | Security Feature Bypass | 7.8 | Important |
| CVE-2026-42837Windows Projected File System Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42905Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42910Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42916NT OS Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42977Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42978Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42979Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42980NT OS Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42983Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42986Microsoft Graphics Component Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42989Winlogon Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42991Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-44802Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-44809Windows Common Log File System Driver Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45593Windows SDK Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45600Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45605Windows Bluetooth Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45636Windows NTFS Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
Showing the 60 most severe of 106. The full list is in Microsoft's Security Update Guide.
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…