KB5122882: what it fixes and who gets it
KB5122882 is a security update from Microsoft's September 2026 release for Windows Server 2022.
Microsoft data read
Should you install it?
Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5122882
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | ExploitedImportant |
| CVE-2026-69579Windows Message Queuing Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69730Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69769Windows HTTP Print Provider Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69829Windows Shell Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69845Windows DHCP Server Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-70296Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-72979Windows DHCP Server Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-72982Windows Netlogon Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-73010Microsoft Failover Cluster Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-77493Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69499Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69518Windows Remote Desktop Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69603Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69676Windows Kerberos Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69712Windows Key Distribution Center Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69860Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-70203Windows Media Player Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-70586Windows Paint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72960Windows Media Player Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72986Graphic Fonts Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73006DirectWrite Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73013Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73018Graphic Fonts Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73023Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-77495Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-77504Microsoft Office Word Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-80083Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-81955Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69846Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Elevation of Privilege | 8.2 | Critical |
| CVE-2026-69874Windows ALPC Elevation of Privilege Vulnerability | Elevation of Privilege | 8.2 | Critical |
| CVE-2026-69906Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Elevation of Privilege | 8.2 | Critical |
| CVE-2026-72961Windows Hyper-V Elevation of Privilege Vulnerability | Elevation of Privilege | 8.2 | Critical |
| CVE-2026-72962Windows USB Video Driver Elevation of Privilege Vulnerability | Elevation of Privilege | 8.2 | Critical |
| CVE-2026-69530Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-69813Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-69827Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-69858Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-72981IP Helper Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-72987Windows DNS Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-77505Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-78444Microsoft Failover Cluster Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-78450Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-72957Windows Deployment Services Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-69890Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | Elevation of Privilege | 7.5 | Critical |
| CVE-2026-72954Windows Deployment Services Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-73017Graphics Kernel Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-69501Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Elevation of Privilege | 7.0 | Critical |
| CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Remote Code Execution | 7.0 | Critical |
Showing the 60 most severe of 641. The full list is in Microsoft's Security Update Guide.
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…