3 OctRestore deleted or older files in OneDrive3 OctRun the Windows Update troubleshooter3 OctWindows File Recovery: recover permanently deleted files with winfr3 OctHow to update drivers in Windows 11 and 10 (roll back, reinstall)3 OctDisable Fast Startup in Windows 11 and 103 OctUse System Restore in Windows 11 and Windows 103 OctHow to stop apps from opening on startup3 OctRun Startup Repair in Windows 11 (fix the Automatic Repair loop)

KB5099444: what it fixes and who gets it

KB5099444 is a monthly rollup from Microsoft's July 2026 release for Windows Server 2012 R2.

Microsoft data read
184CVEs fixed
19rated Critical
1already exploited
Yesrestart required

Should you install it?

Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5099444

CVETypeCVSSSeverity
CVE-2026-56155Active Directory Federation Services Elevation of Privilege VulnerabilityElevation of Privilege7.8ExploitedImportant
CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityElevation of Privilege9.9Critical
CVE-2026-50518Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-56159DHCP Server Service Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution9.6Critical
CVE-2026-50370DHCP Server Service Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-50444Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-50474Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-54121Active Directory Certificate Services Elevation of Privilege VulnerabilityElevation of Privilege8.8Critical
CVE-2026-54982Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-54999Windows TCP/IP Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-58608Windows Print Spooler Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-54128Windows DHCP Client Remote Code Execution VulnerabilityRemote Code Execution8.4Critical
CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution8.4Critical
CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-50694Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-54995Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-49796Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege9.3Important
CVE-2026-49178Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-50369Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50477Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50489Win32k Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50666Windows Remote Access Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-54107Windows Win32k Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-56194Windows NFS Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-56647Windows Remote Access Service Infrastructure Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-58594Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-49184Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution8.4Important
CVE-2026-54122Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution8.4Important
CVE-2026-50439Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-50686Windows OLE Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-56186Windows Secure Channel Information Disclosure VulnerabilityInformation Disclosure8.1Important
CVE-2026-40400Windows PowerShell Remote Code Execution VulnerabilityRemote Code Execution8.0Important
CVE-2026-42975Windows Bluetooth Port Driver Remote Code ExecutionRemote Code Execution8.0Important
CVE-2026-50365Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityElevation of Privilege8.0Important
CVE-2026-50502Windows Event Logging Service Remote Code Execution VulnerabilityRemote Code Execution8.0Important
CVE-2026-50683Windows DHCP Client Elevation of Privilege VulnerabilityElevation of Privilege8.0Important
CVE-2026-49797Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50306Windows TCP/IP Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50308Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50309Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50311Windows Server Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50313Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50321Windows USB Driver Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50332Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50344Windows OLE Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50346Netlogon RPC Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50347Windows Data.dll Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50351Windows Audio Compression Manager (ACM) Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50363Windows Push Notifications Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50386Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50387Windows GDI Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50388Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-50391Windows Group Policy Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-50400Windows App Package Installer Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
Showing the 60 most severe of 184. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year
All membersJoin

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.