KB5101650: what it fixes and who gets it

KB5101650 is a security update from Microsoft's July 2026 release for Windows 11 Version 24H2, Windows 11 Version 25H2.

Microsoft data read
379CVEs fixed
25rated Critical
0already exploited
Yesrestart required

Should you install it?

Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5101650

CVETypeCVSSSeverity
CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityElevation of Privilege9.9Critical
CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution9.6Critical
CVE-2026-50382DirectX Graphics Kernel Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-50474Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-54982Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-54999Windows TCP/IP Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-57087Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-57090Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-57094Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-58608Windows Print Spooler Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-54128Windows DHCP Client Remote Code Execution VulnerabilityRemote Code Execution8.4Critical
CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution8.4Critical
CVE-2026-50680Windows Hyper-V Elevation of Privilege VulnerabilityElevation of Privilege8.2Critical
CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-50694Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-54995Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege VulnerabilityElevation of Privilege7.8Critical
CVE-2026-49796Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-50327Windows Media Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-50655Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-58542Windows Media Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-54127Windows Hyper-V Elevation of Privilege VulnerabilityElevation of Privilege7.4Critical
CVE-2026-50392Windows Secure Kernel Mode Elevation of Privilege VulnerabilityElevation of Privilege7.0Critical
CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityRemote Code Execution9.8Important
CVE-2026-49172Windows FTP Service Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-54990Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege9.3Important
CVE-2026-49178Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-49795Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50342Windows MIDI Service Module Elevation of Privileges VulnerabilityElevation of Privilege8.8Important
CVE-2026-50360Windows SMB Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50369Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50385Windows Runtime Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50398Windows Media Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50413Windows Runtime Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50477Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50489Win32k Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50666Windows Remote Access Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50670Windows Win32k Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50687Windows Win32k Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-50692Desktop Window Manager Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-54107Windows Win32k Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-56194Windows NFS Server Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-56647Windows Remote Access Service Infrastructure Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-58534Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityElevation of Privilege8.8Important
CVE-2026-58594Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-58626Windows Remote Desktop Services Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-50340Windows Runtime Elevation of Privilege VulnerabilityElevation of Privilege8.5Important
CVE-2026-49184Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution8.4Important
CVE-2026-54122Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution8.4Important
CVE-2026-50429Windows Kernel Information Disclosure VulnerabilityInformation Disclosure8.2Important
CVE-2026-42900Microsoft Windows App Store Elevation of Privilege VulnerabilityElevation of Privilege8.1Important
CVE-2026-50439Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-50460Windows Runtime Elevation of Privilege VulnerabilityElevation of Privilege8.1Important
CVE-2026-50487Windows DNS Client Elevation of Privilege VulnerabilityElevation of Privilege8.1Important
CVE-2026-50686Windows OLE Remote Code Execution VulnerabilityRemote Code Execution8.1Important
Showing the 60 most severe of 379. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.