KB5128896
Security update fixing 5 CVEs
0Windows versions
5CVEs fixed · 1 critical
0Exploited or in CISA KEV
Windows release health lists no known issues from this update or the one it builds on, and none it resolves.
Security fixes
5 Microsoft CVEs · most urgent first| CVE | Vulnerability | Severity | CVSS | Impact | Status |
|---|---|---|---|---|---|
| CVE-2026-70571 | Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server | Critical | 8.1 | RCENetwork | |
| CVE-2026-70279 | Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server | Important | 9.3 | SpoofingNetwork | |
| CVE-2026-77910 | Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server | Important | 8.8 | EoPNetwork | |
| CVE-2026-87695 | Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server | Important | 7.8 | EoPLocal | |
| CVE-2026-87696 | Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server | Important | 7.5 | EoPNetwork |
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.