KB5131291

Security update fixing 507 CVEs

507CVEs fixed · 26 critical

0Exploited or in CISA KEV

YesRestart required (per MSRC)

Known issues in this update

Windows release health

No known issues affecting this KB were identified in the collected Windows release health data.

Resolvedfixed by KB5132061Win 11 26H2, Win 11 26H1, Win 11 25H2 +12updated 10 Nov

USB audio devices might fail to start or produce no sound Some USB Audio Class 1.0 devices display Code 10 after installing Windows 11, version 26H2
Resolvedfrom KB5126651 fixed by KB5131085Server 2019, Server 2016, Server 2025 +1updated 10 Nov

Users might be unable to sign in to OWA or send emails on Exchange Server Issue reported on Exchange Server 2016, 2019, and Subscription Edition, affecting OWA sign-in and mail delivery.

507 Microsoft CVEs · most urgent first

CVE	Vulnerability	Severity	CVSS	Impact
CVE-2026-116928	Windows Search Remote Code Execution VulnerabilityMicrosoft Windows Search Component	Critical	9.8	RCENetwork
CVE-2026-119958	Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityWindows LDAP - Lightweight Directory Access Protocol	Critical	9.8	RCENetwork
CVE-2026-118146	Windows Active Directory Domain Services Remote Code Execution VulnerabilityActive Directory Domain Services	Critical	8.8	RCENetwork
CVE-2026-119969	Graphic Fonts Remote Code Execution VulnerabilityGraphic Fonts	Critical	8.8	RCENetwork
CVE-2026-125136	Windows Network Connected Devices Auto-Setup Service Remote Code Execution VulnerabilityWindows Network Connected Devices Auto-Setup Service	Critical	8.8	RCEAdjacent
CVE-2026-109459	Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityWindows Message Queuing Queue Manager	Critical	8.1	RCENetwork
CVE-2026-113862	Windows Network Address Translation (NAT) Remote Code Execution VulnerabilityWindows Network Address Translation (NAT)	Critical	8.1	RCENetwork
CVE-2026-116710	Windows Message Queuing Remote Code Execution VulnerabilityWindows Message Queuing	Critical	8.1	RCENetwork
CVE-2026-118737	Remote Procedure Call Runtime Remote Code Execution VulnerabilityWindows Remote Procedure Call Runtime	Critical	8.1	RCENetwork
CVE-2026-119951	Windows Deployment Services Remote Code Execution VulnerabilityWindows Deployment Services	Critical	8.1	RCENetwork

Showing the 10 most urgent of 507All 507 CVEs

Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Field-level log (0)

Up to 100 recent field edits are shown; older edits may be outside retention.

No retained field changes for this selection.