3 OctRestore deleted or older files in OneDrive3 OctRun the Windows Update troubleshooter3 OctWindows File Recovery: recover permanently deleted files with winfr3 OctHow to update drivers in Windows 11 and 10 (roll back, reinstall)3 OctDisable Fast Startup in Windows 11 and 103 OctUse System Restore in Windows 11 and Windows 103 OctHow to stop apps from opening on startup3 OctRun Startup Repair in Windows 11 (fix the Automatic Repair loop)

KB5123066: what it fixes and who gets it

KB5123066 is a monthly rollup from Microsoft's September 2026 release for Windows Server 2012 R2.

Microsoft data read
418CVEs fixed
43rated Critical
1already exploited
Yesrestart required

Should you install it?

Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5123066

CVETypeCVSSSeverity
CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityElevation of Privilege7.8ExploitedImportant
CVE-2026-69579Windows Message Queuing Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69730Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69769Windows HTTP Print Provider Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69829Windows Shell Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69845Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-70296Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-72979Windows DHCP Server Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-72982Windows Netlogon Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-77493Windows Graphics Component Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Critical
CVE-2026-69499Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69518Windows Remote Desktop Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69603Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69676Windows Kerberos Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69712Windows Key Distribution Center Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69860Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-70203Windows Media Player Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-70586Windows Paint Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-72986Graphic Fonts Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73013Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73018Graphic Fonts Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-73023Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-77495Windows Imaging Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-77504Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-81955Windows Graphics Component Remote Code Execution VulnerabilityRemote Code Execution8.8Critical
CVE-2026-69813Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-69827Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-72981IP Helper Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-72987Windows DNS Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-77505Windows DNS Server Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityRemote Code Execution8.1Critical
CVE-2026-72957Windows Deployment Services Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-72954Windows Deployment Services Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution VulnerabilityRemote Code Execution7.5Critical
CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityRemote Code Execution7.0Critical
CVE-2026-68839Windows USB Mass Storage Class Driver Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69276Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69408Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69431Telnet Client Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69463Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69491Microsoft DirectMusic Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69493Windows Event Logging Service Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69496Windows Compressed Folder Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69525Remote Desktop Services Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69715Windows Direct Show Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69768Windows RNDIS Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69819RPC Runtime Library Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-69824Microsoft Standard XPS Remote Code Execution VulnerabilityRemote Code Execution9.8Important
CVE-2026-73025Windows iSCSI Security Feature Bypass VulnerabilitySecurity Feature Bypass9.8Important
CVE-2026-62706Microsoft Windows Media Foundation Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-68828Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution8.8Important
Showing the 60 most severe of 418. The full list is in Microsoft's Security Update Guide.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year
All membersJoin

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.