59/59 sources · synced 23:50 UTC Customize Public mode
KB5129194OOBOut-of-band release · 2026-09 OOB

Out-of-band release for Windows 11, version 26H1

Support article Update Catalog CVEs in Security CVE list for a ticket

Is it safe to deploy?

Deploy nowKB5129194OOB

It fixes actively exploited vulnerabilities. Deploy as soon as possible, and check the open known issues on your pilot devices first.

UrgencyCritical · 1 exploited RiskModerate · 2 mitigated
Everything in the September 2026 Patch Tuesday cycle
1Windows version
2CVEs fixed · 1 critical
0Exploited or in CISA KEV
2Open known issues affecting it
YesRestart required (per MSRC)

Applies to

From Microsoft's release-information tables
Servicing branchOS buildReleaseAvailable
Windows 11, version 26H1 28000.2956 OOB 2026-09 OOB 14 Sep 2026

Known issues in this update

Includes issues from the update it builds on

Issues this update resolves

Security fixes

2 Microsoft CVEs · most urgent first
CVE Vulnerability Severity CVSSEPSSImpact Status
CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege VulnerabilityWindows Secure Kernel Mode Critical 8.20.4%Elevation of Privilege Revised 25 Sep
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege VulnerabilityUser-Mode Power Service (UMPS) Important 7.80.3%Elevation of Privilege Revised 14 Sep
ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft. Microsoft, Windows, Microsoft 365, Azure, and related names are trademarks of the Microsoft group of companies. Data comes from public sources listed on Sources; every item links to its original page. Dates and statuses can change after they are read. Built by Evotec. This is the public demo. It can also run on your own server, with your Microsoft 365 tenant and device data kept inside your network; Evotec can help you deploy and extend it.