3 OctRestore deleted or older files in OneDrive3 OctRun the Windows Update troubleshooter3 OctWindows File Recovery: recover permanently deleted files with winfr3 OctHow to update drivers in Windows 11 and 10 (roll back, reinstall)3 OctDisable Fast Startup in Windows 11 and 103 OctUse System Restore in Windows 11 and Windows 103 OctHow to stop apps from opening on startup3 OctRun Startup Repair in Windows 11 (fix the Automatic Repair loop)

KB5120233: what it fixes and who gets it

KB5120233 is a security update from Microsoft's August 2026 release for Windows Server 2025.

Microsoft data read
215CVEs fixed
19rated Critical
1already exploited
Yesrestart required

Should you install it?

Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5120233

CVETypeCVSSSeverity
CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege7.0ExploitedImportant
CVE-2026-62815Microsoft QUIC Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-62878Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-62893Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-65791Windows iSCSI Target Service Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-62816Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-62817Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-62818Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-62822Windows GDI+ Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-62823Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-62819Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-62820Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-62889Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-65679Windows iSCSI Target Service Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-65789Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-65796Windows iSCSI Target Service Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-66802Windows Device Health Attestation (DHA) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-71331Windows Device Health Attestation (DHA) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-62890Windows GDI+ Elevation of Privilege VulnerabilityRemote Code Execution7.8Critical
CVE-2026-66799Windows Key Guard Elevation of Privilege VulnerabilityElevation of Privilege7.8Critical
CVE-2026-49179Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-62784Microsoft Local Security Authority Server (lsasrv) Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-62785Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-62790Windows SMBv3 Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-62795Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-62800Windows SMBv3 Server Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-62778Windows DNS Elevation of Privilege VulnerabilityElevation of Privilege8.1Important
CVE-2026-62781RPC Runtime Library Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-62792Windows TCP/IP Remote Code Execution VulnerabilityRemote Code Execution8.1Important
CVE-2026-6726MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot ReuseSpoofing7.9Important
CVE-2026-42976Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-54984Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-56174Windows Narrator Braille Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-59127Windows Installer Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61349Windows Work Folder Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61353Windows Telephony Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61355Windows Sensor Data Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61356Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61357Application Information Services Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61358Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61359Windows Storage Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61364Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61365Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61367Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61923Windows Display Enhancement Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61925Windows Installer Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61926Windows USB Driver Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61930Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61934Windows Bind Filter Driver Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-61937Windows HTTP.sys Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62692Windows Remote Desktop Services Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62695Windows Storage Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62696Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62698Microsoft Digest Authentication Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62700Windows NTFS Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62701Windows Telephony Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62707Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62710Windows Device Association Service Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62711Windows Win32k Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
CVE-2026-62712Windows Win32k Elevation of Privilege VulnerabilityElevation of Privilege7.8Important
Showing the 60 most severe of 215. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year
All membersJoin

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.