KB5094127: what it fixes and who gets it
KB5094127 is a security update from Microsoft's June 2026 release for Windows 10 Version 21H2, Windows 10 Version 22H2.
Microsoft data read
Should you install it?
Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5094127
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-44815DHCP Client Service Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-47291HTTP.sys Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2025-10263ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | Elevation of Privilege | 9.3 | Critical |
| CVE-2026-42985Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-47289Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-45607Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-45641Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-33828Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Critical |
| CVE-2026-44803Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-44812Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-48574Windows Media Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-42992Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-44799Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-44801Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-48563Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-42904Windows TCP/IP Elevation of Privilege Vulnerability | Elevation of Privilege | 9.6 | Important |
| CVE-2026-45602Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability | Tampering | 9.1 | Important |
| CVE-2026-47653Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-45599Windows UPnP Device Host Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45635Windows UPnP Device Host Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Important |
| CVE-2026-45588Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-47656Windows Boot Manager Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48568Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48570Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48573Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48575Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48576Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.9 | Important |
| CVE-2026-48578Secure Boot Security Feature Bypass Vulnerability | Elevation of Privilege | 7.9 | Important |
| CVE-2026-40404Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-40409Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-41092Microsoft Kinect Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42828Windows Projected File System Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42837Windows Projected File System Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42905Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42916NT OS Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42977Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42978Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42979Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42980NT OS Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42983Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42986Microsoft Graphics Component Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42989Winlogon Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-42991Windows Push Notifications Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-44802Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45593Windows SDK Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45605Windows Bluetooth Service Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45636Windows NTFS Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-45637Microsoft DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45638Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-45656UEFI Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.8 | Important |
| CVE-2026-45658Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | 7.8 | Important |
| CVE-2026-48583Windows Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | Important |
| CVE-2026-8863UEFI Secure Boot Security Feature Bypass Vulnerability | Security Feature Bypass | 7.8 | Important |
| CVE-2026-42908Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Information Disclosure | 7.5 | Important |
| CVE-2026-42909Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Important |
| CVE-2026-42993Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Important |
| CVE-2026-45639Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Information Disclosure | 7.5 | Important |
Showing the 60 most severe of 94. The full list is in Microsoft's Security Update Guide.
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…