KB5123065: what it fixes and who gets it
KB5123065 is a monthly rollup from Microsoft's September 2026 release for Windows Server 2012.
Microsoft data read
Should you install it?
Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5123065
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | ExploitedImportant |
| CVE-2026-69579Windows Message Queuing Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69730Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69769Windows HTTP Print Provider Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69829Windows Shell Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69845Windows DHCP Server Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-70296Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-72979Windows DHCP Server Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-72982Windows Netlogon Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-77493Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69499Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69518Windows Remote Desktop Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69603Windows Hyper-V Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69676Windows Kerberos Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69712Windows Key Distribution Center Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69860Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-70203Windows Media Player Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-70586Windows Paint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-72986Graphic Fonts Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73013Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73018Graphic Fonts Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-73023Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-77495Windows Imaging Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-77504Microsoft Office Word Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-81955Windows Graphics Component Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Critical |
| CVE-2026-69813Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-69827Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-72981IP Helper Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-72987Windows DNS Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-77505Windows DNS Server Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Remote Code Execution | 8.1 | Critical |
| CVE-2026-72957Windows Deployment Services Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-72954Windows Deployment Services Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Critical |
| CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | Remote Code Execution | 7.0 | Critical |
| CVE-2026-68839Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69276Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69408Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69431Telnet Client Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69463Windows NTFS Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69491Microsoft DirectMusic Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69493Windows Event Logging Service Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69496Windows Compressed Folder Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69525Remote Desktop Services Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69715Windows Direct Show Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69768Windows RNDIS Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69819RPC Runtime Library Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-69824Microsoft Standard XPS Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Important |
| CVE-2026-73025Windows iSCSI Security Feature Bypass Vulnerability | Security Feature Bypass | 9.8 | Important |
| CVE-2026-62706Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-68828Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
Showing the 60 most severe of 393. The full list is in Microsoft's Security Update Guide.
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…