KB5131096

Security update fixing 546 CVEs

546CVEs fixed · 30 critical

0Exploited or in CISA KEV

YesRestart required (per MSRC)

Known issues in this update

Windows release health

No known issues affecting this KB were identified in the collected Windows release health data.

Resolvedfixed by KB5132061Win 11 26H2, Win 11 26H1, Win 11 25H2 +12updated 10 Nov

USB audio devices might fail to start or produce no sound Some USB Audio Class 1.0 devices display Code 10 after installing Windows 11, version 26H2

546 Microsoft CVEs · most urgent first

CVE	Vulnerability	Severity	CVSS	Impact
CVE-2026-112967	Windows Xbox Live Networking Service Remote Code Execution VulnerabilityWindows Xbox Live Networking Service	Critical	9.8	RCENetwork
CVE-2026-116928	Windows Search Remote Code Execution VulnerabilityMicrosoft Windows Search Component	Critical	9.8	RCENetwork
CVE-2026-119958	Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityWindows LDAP - Lightweight Directory Access Protocol	Critical	9.8	RCENetwork
CVE-2026-118146	Windows Active Directory Domain Services Remote Code Execution VulnerabilityActive Directory Domain Services	Critical	8.8	RCENetwork
CVE-2026-119969	Graphic Fonts Remote Code Execution VulnerabilityGraphic Fonts	Critical	8.8	RCENetwork
CVE-2026-125136	Windows Network Connected Devices Auto-Setup Service Remote Code Execution VulnerabilityWindows Network Connected Devices Auto-Setup Service	Critical	8.8	RCEAdjacent
CVE-2026-109459	Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityWindows Message Queuing Queue Manager	Critical	8.1	RCENetwork
CVE-2026-113862	Windows Network Address Translation (NAT) Remote Code Execution VulnerabilityWindows Network Address Translation (NAT)	Critical	8.1	RCENetwork
CVE-2026-116710	Windows Message Queuing Remote Code Execution VulnerabilityWindows Message Queuing	Critical	8.1	RCENetwork
CVE-2026-118737	Remote Procedure Call Runtime Remote Code Execution VulnerabilityWindows Remote Procedure Call Runtime	Critical	8.1	RCENetwork

Showing the 10 most urgent of 546All 546 CVEs

Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Field-level log (0)

Up to 100 recent field edits are shown; older edits may be outside retention.

No retained field changes for this selection.