KB5122876BMonthly security release (Patch Tuesday) · 2026-09 B

Monthly security release (Patch Tuesday) for Windows 10, version 1809 and Windows Server 2019

Support article Update Catalog CVEs in Security CVE list for a ticket

Is it safe to deploy?

SupersededKB5122876B

Deploy KB5129238 instead; it includes these fixes.

UrgencyCritical · 1 exploited RiskModerate · 1 mitigated

Everything in the September 2026 Patch Tuesday cycle

2Windows versions

616CVEs fixed · 58 critical

1Exploited or in CISA KEV

1Open known issues affecting it

YesRestart required (per MSRC)

Applies to

From Microsoft's release-information tables

Servicing branch	OS build	Release	Available
Windows 10, version 1809	17763.9245	B 2026-09 B	8 Sep 2026
Windows Server 2019	17763.9245	B 2026-09 B	8 Sep 2026

Known issues in this update

Windows release health

Mitigatedfrom KB5122876Win 10 1809, Server 2019updated 14 Sep

USB audio devices might fail to start or produce no soundSome USB Audio Class 1.0 devices display Code 10 or fail in multichannel audio modes after installing KB5124008.
Resolvedfrom KB5122876 fixed by KB5129238Win 10 1809, Server 2019updated 17 Sep

Remote Desktop Services might stop responding after Sept. 2026 security updateSome Windows devices with Remote Desktop enabled might experience Remote Desktop Services (RDS) instability.

Issues this update resolves

No resolved issues listed

Windows release health names no issues fixed by this KB.

Security fixes

616 Microsoft CVEs · most urgent first

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status
CVE-2026-85880	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityWindows ALPC	Important	7.8	3.6%	Elevation of Privilege	ExploitedCISA KEV · due 22 SepRevised 16 Sep
CVE-2026-69579	Windows Message Queuing Remote Code Execution VulnerabilityWindows Message Queuing	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-69590	Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS)	Critical	9.8	1.0%	Remote Code Execution	Revised 24 Sep
CVE-2026-69595	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityWindows Services for NFS ONCRPC XDR Driver	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-69730	Windows DNS Server Remote Code Execution VulnerabilityWindows DNS	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-69769	Windows HTTP Print Provider Remote Code Execution VulnerabilityWindows HTTP Print Provider	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-69829	Windows Shell Remote Code Execution VulnerabilityWindows Shell	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-69845	Windows DHCP Server Remote Code Execution VulnerabilityWindows DHCP Server	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-70296	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-72979	Windows DHCP Server Remote Code Execution VulnerabilityWindows DHCP Server	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-72982	Windows Netlogon Remote Code Execution VulnerabilityWindows Netlogon	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-72983	Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityWindows Internet Connection Sharing (ICS)	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-73009	Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP)	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-73010	Microsoft Failover Cluster Remote Code Execution VulnerabilityWindows Failover Cluster	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-77493	Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-78445	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityWindows Services for NFS ONCRPC XDR Driver	Critical	9.8	1.0%	Remote Code Execution
CVE-2026-69499	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-69518	Windows Remote Desktop Remote Code Execution VulnerabilityWindows Remote Desktop	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-69601	Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows Media Foundation	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-69603	Windows Hyper-V Remote Code Execution VulnerabilityWindows Hyper-V	Critical	8.8	0.3%	Remote Code Execution
CVE-2026-69676	Windows Kerberos Remote Code Execution VulnerabilityWindows Kerberos	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-69712	Windows Key Distribution Center Remote Code Execution VulnerabilityWindows Key Distribution Center	Critical	8.8	0.9%	Remote Code Execution
CVE-2026-69860	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	Remote Code Execution	Revised 11 Sep
CVE-2026-70203	Windows Media Player Remote Code Execution VulnerabilityWindows Media Player	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-70586	Windows Paint Remote Code Execution VulnerabilityWindows Paint	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-72950	Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS)	Critical	8.8	0.9%	Remote Code Execution
CVE-2026-72959	Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS)	Critical	8.8	0.9%	Remote Code Execution
CVE-2026-72960	Windows Media Player Remote Code Execution VulnerabilityWindows Media Player	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-72986	Graphic Fonts Remote Code Execution VulnerabilityGraphic Fonts	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-73006	DirectWrite Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	8.8	0.8%	Remote Code Execution	Revised 15 Sep
CVE-2026-73013	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-73018	Graphic Fonts Remote Code Execution VulnerabilityGraphic Fonts	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-73023	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-77495	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-77504	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Critical	8.8	0.8%	Remote Code Execution
CVE-2026-81955	Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	8.8	0.8%	Remote Code Execution	Revised 17 Sep
CVE-2026-69846	Windows Secure Kernel Mode Elevation of Privilege VulnerabilityWindows Secure Kernel Mode	Critical	8.2	0.3%	Elevation of Privilege
CVE-2026-69874	Windows ALPC Elevation of Privilege VulnerabilityWindows ALPC	Critical	8.2	0.3%	Elevation of Privilege
CVE-2026-69906	Windows Secure Kernel Mode Elevation of Privilege VulnerabilityWindows Secure Kernel Mode	Critical	8.2	0.3%	Elevation of Privilege
CVE-2026-72961	Windows Hyper-V Elevation of Privilege VulnerabilityWindows Hyper-V	Critical	8.2	0.3%	Elevation of Privilege
CVE-2026-72962	Windows USB Video Driver Elevation of Privilege VulnerabilityWindows USB Video Driver	Critical	8.2	0.3%	Elevation of Privilege
CVE-2026-81354	Windows Hello Elevation of Privilege VulnerabilityWindows Hello	Critical	8.2	0.3%	Elevation of Privilege
CVE-2026-69530	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityReliable Multicast Transport Driver (RMCAST)	Critical	8.1	0.7%	Remote Code Execution
CVE-2026-69813	Windows DNS Server Remote Code Execution VulnerabilityWindows DNS	Critical	8.1	0.7%	Remote Code Execution
CVE-2026-69827	Windows DNS Server Remote Code Execution VulnerabilityRole: DNS Server	Critical	8.1	0.5%	Remote Code Execution
CVE-2026-72981	IP Helper Remote Code Execution VulnerabilityIP Helper	Critical	8.1	0.7%	Remote Code Execution
CVE-2026-72987	Windows DNS Remote Code Execution VulnerabilityWindows DNS	Critical	8.1	0.7%	Remote Code Execution
CVE-2026-77505	Windows DNS Server Remote Code Execution VulnerabilityRole: DNS Server	Critical	8.1	0.7%	Remote Code Execution
CVE-2026-78444	Microsoft Failover Cluster Remote Code Execution VulnerabilityWindows Failover Cluster	Critical	8.1	0.7%	Remote Code Execution
CVE-2026-78449	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityReliable Multicast Transport Driver (RMCAST)	Critical	8.1	0.7%	Remote Code Execution

Showing 50 of 616All CVEs