KB5094126: Cumulative update for Windows 11, versions 24H2 and 25H2, June 2026. Critical Remote Desktop flaws patched; Hyper-V crashes fixed

Critical Remote Desktop flaws get security fixes, and crashes after KB5089573 are addressed. Some folder icons may disappear in downloaded or remote locations.

Does it affect you? Applies to: Devices running Windows 11, versions 25H2 and 24H2, on x64 or Arm64. The 24H2 Home and Pro editions reach end of updates on October 13, 2026; Enterprise and Education reach it on October 12, 2027.

What changes

Improvements 4 changes

Secure Boot

Gradual rollout Verified in package

For: devices eligible for new Secure Boot certificates

More eligible devices can receive new Secure Boot certificates automatically, in a phased rollout.¹
Adds high-confidence device targeting data. Devices receive certificates only after enough successful update signals.

Folder customization

For: users with content from downloaded or remote locations

Some downloaded or remote folders might lose custom icons or localized names. Folder access is not affected.²
Adds a security hardening change to how Windows processes desktop.ini files.

AI components

Verified in package

For: Windows Copilot+ PCs

Four AI components receive updates on Copilot+ PCs.³
Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2605.856.0. These components do not install on other Windows PCs or Windows Server.

Servicing stack

For: devices installing this update

The component that installs Windows updates receives quality improvements.⁴
Includes servicing stack update KB5094135, build 26100.8648.

Fixes 2 changes

Virtualization

Some devices no longer encounter stop errors during restarts, virtual machine tasks, or some games after KB5089573.⁵
Addresses HYPERVISOR_ERROR (0x20001) and KMODE_EXCEPTION_NOT_HANDLED (0x1E) on some devices.

DISM (Known issue)

On some Windows 11, version 24H2 devices, component store repairs no longer fail with error 0x800f0915.⁶
Addresses failure of Deployment Image Servicing and Management (DISM) when running /RestoreHealth.

Known issues

Open Affects: Everyone

Microsoft Office applications might fail to open from certain third-party apps

Some third-party apps that use OLE automation might fail to open Word, Excel, PowerPoint, Access, or other Office apps or documents. Updates released on and after July 14, 2026 resolve this issue.⁷

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Open Affects: Everyone

Deleting from Recycle Bin displays an internal file name

When permanently deleting one item, the Recycle Bin confirmation dialog might show an internal file name instead of the original name. KB5095093 addresses this; the item remains listed and restores with its original name.⁸

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2026-06-09
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5089573, KB5089549, KB5083631, KB5083769

+52 earlier
KB5086672, KB5079391, KB5085516, KB5079473, KB5077241, KB5077181, KB5074105, KB5078127, KB5077744, KB5074109, KB5072033, KB5070311, KB5068861, KB5067036, KB5070773, KB5066835, KB5065789, KB5068221, KB5065426, KB5064081, KB5063878, KB5062660, KB5064489, KB5062553, KB5060829, KB5063060, KB5060842, KB5058499, KB5061977, KB5058411, KB5055627, KB5059087, KB5055523, KB5053656, KB5053598, KB5052093, KB5051987, KB5050094, KB5050009, KB5048667, KB5046740, KB5046617, KB5044384, KB5044284, KB5043178, KB5043080, KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239
Replaced by: KB5101650

Version	Build	Channel
24H2	26100.8655	General availability
25H2	26200.8655	General availability

Security

107 vulnerabilities fixed

17 critical 90 important

Vulnerability	Severity	CVSS
CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability	Critical	9.8
CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability	Critical	9.8
CVE-2025-10263 ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]	Critical	9.3
CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability	Critical	8.8
CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability	Critical	8.8
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability	Critical	8.4
CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability	Critical	8.4
CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability	Critical	8.4
CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability	Critical	8.2
CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability	Critical	7.8
CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability	Critical	7.8
CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability	Critical	7.8
CVE-2026-48574 Windows Media Remote Code Execution Vulnerability	Critical	7.8
CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability	Critical	7.5
CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability	Critical	7.5
CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability	Critical	7.5
CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability	Critical	7.5
CVE-2026-45586 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability	Important	7.8
CVE-2026-49160 HTTP.sys Denial of Service Vulnerability	Important	7.5
CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability	Important	6.8
CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability	Important	6.8

The table lists the 21 exploited, publicly disclosed or critical vulnerabilities. See all 107 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 24H2 / 25H2

5.3 GB

windows11.0-kb5094126-x64.msu Main update · KB5094126 SHA-1: 1b7fae96…d62e88 windows11.0-kb5043080-x64.msu Prerequisite · KB5043080 SHA-1: 95344967…9c83e8

Arm64 24H2 / 25H2

4.7 GB

windows11.0-kb5094126-arm64.msu Main update · KB5094126 SHA-1: 317d0de5…6c7797 windows11.0-kb5043080-arm64.msu Prerequisite · KB5043080 SHA-1: df540a05…0f090b

Updated components

1,868 files changed since the previous update for the same versions.

Top changed components	Files
Graphics and display	27
File Explorer and shell	21
Remote Desktop	20
Settings	18
Networking	16
Secure Boot	14
Bluetooth	10
Kernel	10
Security and sign-in	10
Hyper-V and virtualization	6
Printing	5
Emoji and input	4

Verified in package: changed files confirm Secure Boot, AI components.

Sources

Microsoft Support: KB5094126

Updated Nov 10, 2026

Cited passages from Microsoft's official notes (8)

1. With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. support.microsoft.com
2. As a result, some users might notice missing custom folder icons or localized folder names for content from downloaded or remote locations. Note that access to folders is not affected. support.microsoft.com
3. Image Search 1.2605.856.0; Content Extraction 1.2605.856.0; Semantic Analysis 1.2605.856.0; Settings Model 1.2605.856.0 support.microsoft.com
4. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
5. Fixed: This update addresses an issue that could result in Stop errors HYPERVISOR_ERROR (0x20001) and KMODE_EXCEPTION_NOT_HANDLED (0x1E) after installing KB5089573 on some devices during system restarts, virtual machine operations, or while running some gaming applications. support.microsoft.com
6. This update addresses an issue that could cause the Deployment Image Servicing and Management (DISM) tool to fail with error 0x800f0915 when running the /RestoreHealth command on some Windows 11, version 24H2 devices. support.microsoft.com
7. This issue is resolved in Windows updates released on and after July 14, 2026 such as KB5101650. support.microsoft.com
8. This issue is addressed in KB5095093. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 8 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake