KB5122882: what it fixes and who gets it

KB5122882 is a security update from Microsoft's September 2026 release for Windows Server 2022.

Microsoft data read
641CVEs fixed
60rated Critical
1already exploited
Yesrestart required

Should you install it?

Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5122882

CVETypeCVSSSeverity
CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityElevation of Privilege7.8ExploitedImportant
CVE-2026-69579Windows Message Queuing Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69730Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69769Windows HTTP Print Provider Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69829Windows Shell Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69845Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70296Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-72979Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-72982Windows Netlogon Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-73010Microsoft Failover Cluster Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-77493Windows Graphics Component Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69499Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69518Windows Remote Desktop Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69603Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69676Windows Kerberos Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69712Windows Key Distribution Center Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69860Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-70203Windows Media Player Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-70586Windows Paint Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72960Windows Media Player Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72986Graphic Fonts Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73006DirectWrite Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73013Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73018Graphic Fonts Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73023Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-77495Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-77504Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-80083Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-81955Windows Graphics Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69846Windows Secure Kernel Mode Elevation of Privilege VulnerabilityElevation of Privilege8.2Critical
CVE-2026-69874Windows ALPC Elevation of Privilege VulnerabilityElevation of Privilege8.2Critical
CVE-2026-69906Windows Secure Kernel Mode Elevation of Privilege VulnerabilityElevation of Privilege8.2Critical
CVE-2026-72961Windows Hyper-V Elevation of Privilege VulnerabilityElevation of Privilege8.2Critical
CVE-2026-72962Windows USB Video Driver Elevation of Privilege VulnerabilityElevation of Privilege8.2Critical
CVE-2026-69530Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-69813Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-69827Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-69858Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-72981IP Helper Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-72987Windows DNS Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-77505Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-78444Microsoft Failover Cluster Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-78450Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-72957Windows Deployment Services Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-69890Windows Virtual Trusted Platform Module Elevation of Privilege VulnerabilityElevation of Privilege7.5Critical
CVE-2026-72954Windows Deployment Services Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-73017Graphics Kernel Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-69501Windows Secure Kernel Mode Elevation of Privilege VulnerabilityElevation of Privilege7.0Critical
CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityRemote Code Execution7.0Critical
Showing the 60 most severe of 641. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.