Skip to the content
The Update Bureau
Security

KB5093998: all 158 vulnerabilities

Cumulative update for Windows 11, version 23H2, June 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

158 vulnerabilities fixed
22 critical 136 important
VulnerabilitySeverityCVSS
Windows DNS Client Remote Code Execution Vulnerability
Critical 9.8
Windows Kernel Remote Code Execution Vulnerability
Critical 9.8
HTTP.sys Remote Code Execution Vulnerability
Critical 9.8
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
Critical 9.3
Windows Hyper-V Elevation of Privilege Vulnerability
Critical 9.3
Windows Graphics Component Remote Code Execution Vulnerability
Critical 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Critical 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Critical 8.8
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Critical 8.4
Windows Hyper-V Remote Code Execution Vulnerability
Critical 8.4
Windows Hyper-V Remote Code Execution Vulnerability
Critical 8.4
Windows Hyper-V Remote Code Execution Vulnerability
Critical 8.2
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Critical 7.8
Windows GDI Remote Code Execution Vulnerability
Critical 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Critical 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Critical 7.8
Windows Media Remote Code Execution Vulnerability
Critical 7.8
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Windows TCP/IP Elevation of Privilege Vulnerability
Important 9.6
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Important 9.1
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Important 8.8
Windows DHCP Client Elevation of Privilege Vulnerability
Important 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.8
Windows TCP/IP Remote Code Execution Vulnerability
Important 8.1
Windows Performance Monitor Remote Code Execution Vulnerability
Important 8.1
Windows Performance Monitor Remote Code Execution Vulnerability
Important 8.1
Windows UPnP Device Host Remote Code Execution Vulnerability
Important 8.1
Windows UPnP Device Host Remote Code Execution Vulnerability
Important 8.1
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Windows Boot Manager Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Windows Event Logging Service Elevation of Privilege Vulnerability
Important 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important 7.8
Windows TCP/IP Local Elevation of Privilege Vulnerability
Important 7.8
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Telephony Service Elevation of Privilege Vulnerability
Important 7.8
Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Important 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Important 7.8
Windows Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important 7.8
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Important 7.8
Windows Telephony Service Elevation of Privilege Vulnerability
Important 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Important 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Important 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Important 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows WAN ARP Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Microsoft Kinect Elevation of Privilege Vulnerability
Important 7.8
Windows Projected File System Elevation of Privilege Vulnerability
Important 7.8
Windows Projected File System Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
NT OS Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
NT OS Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Winlogon Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Important 7.8
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Important 7.8
Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
Important 7.8
Windows SDK Elevation of Privilege Vulnerability
Important 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.8
Windows NTFS Remote Code Execution Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
UEFI Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
UEFI Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
Important 7.5
Windows TCP/IP Information Disclosure Vulnerability
Important 7.5
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Important 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Important 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Important 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Important 7.5
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Important 7.5
HTTP.sys Denial of Service Vulnerability
Important 7.5
Windows TCP/IP Denial of Service Vulnerability
Important 7.4
Windows TCP/IP Denial of Service Vulnerability
Important 7.4
Windows TCP/IP Denial of Service Vulnerability
Important 7.1
Win32k Elevation of Privilege Vulnerability
Important 7.0
Win32k Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Projected File System Elevation of Privilege Vulnerability
Important 7.0
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Important 7.0
Windows Print Spooler Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Win32k Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows SMB Client Elevation of Privilege Vulnerability
Important 7.0
Windows DNS Client Elevation of Privilege Vulnerability
Important 7.0
Windows Telephony Service Elevation of Privilege Vulnerability
Important 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Telephony Service Elevation of Privilege Vulnerability
Important 7.0
Windows Kernel Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Important 7.0
Windows Kernel Elevation of Privilege Vulnerability
Important 7.0
Windows Storage Elevation of Privilege Vulnerability
Important 7.0
Windows DHCP Client Information Disclosure Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows Rich Text Edit Elevation of Privilege Vulnerability
Important 6.7
Windows Rich Text Edit Elevation of Privilege Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Windows TCP/IP Driver Security Feature Bypass Vulnerability
Important 6.5
Windows Kerberos Denial of Service Vulnerability
Important 6.5
Windows Shell Information Disclosure Vulnerability
Important 6.5
Windows NTLM Spoofing Vulnerability
Important 6.5
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Important 6.2
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 5.5
Windows Shell Information Disclosure Vulnerability
Important 5.5
Microsoft Windows VMSwitch Denial of Service Vulnerability
Important 5.5
Windows Telephony Server Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Hyper-V Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Application Identity (AppID) Information Disclosure Vulnerability
Important 5.5
Windows Managed Installer Information Disclosure Vulnerability
Important 5.5
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Important 5.5
Windows DHCP Client Information Disclosure Vulnerability
Important 5.5
Windows 11 Telnet Client Information Disclosure Vulnerability
Important 5.4
Windows Mark of the Web Security Feature Bypass Vulnerability
Important 5.4
Windows Kerberos Denial of Service Vulnerability
Important 5.3
Windows BitLocker Security Feature Bypass Vulnerability
Important 5.3
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
Important 4.4
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Important 3.9
AMD: CVE-2025-54518 CPU OP Cache Corruption
Important —