Skip to the content
The Update Bureau
Security

KB5094128: all 105 vulnerabilities

Cumulative update for Windows Server, version 2022, June 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

105 vulnerabilities fixed
20 critical 85 important
VulnerabilitySeverityCVSS
Windows Kernel Remote Code Execution Vulnerability
Critical 9.8
HTTP.sys Remote Code Execution Vulnerability
Critical 9.8
Remote Desktop Client Remote Code Execution Vulnerability
Critical 8.8
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Critical 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Critical 8.8
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Critical 8.4
Windows Hyper-V Remote Code Execution Vulnerability
Critical 8.4
Windows Hyper-V Remote Code Execution Vulnerability
Critical 8.4
Windows Hyper-V Remote Code Execution Vulnerability
Critical 8.2
Windows Deployment Services (WDS) Remote Code Execution
Critical 8.1
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Critical 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Critical 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Critical 7.8
Windows Media Remote Code Execution Vulnerability
Critical 7.8
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Critical 7.5
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Critical 7.1
Windows TCP/IP Elevation of Privilege Vulnerability
Important 9.6
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Important 9.1
Windows DHCP Client Elevation of Privilege Vulnerability
Important 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.8
Windows Performance Monitor Remote Code Execution Vulnerability
Important 8.1
Windows Performance Monitor Remote Code Execution Vulnerability
Important 8.1
Windows UPnP Device Host Remote Code Execution Vulnerability
Important 8.1
Windows UPnP Device Host Remote Code Execution Vulnerability
Important 8.1
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Windows Boot Manager Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Secure Boot Security Feature Bypass Vulnerability
Important 7.9
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Important 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Important 7.8
Microsoft Kinect Elevation of Privilege Vulnerability
Important 7.8
Windows Projected File System Elevation of Privilege Vulnerability
Important 7.8
Windows Projected File System Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
NT OS Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
NT OS Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Winlogon Elevation of Privilege Vulnerability
Important 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Important 7.8
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Important 7.8
Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
Important 7.8
Windows SDK Elevation of Privilege Vulnerability
Important 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.8
Windows NTFS Remote Code Execution Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
UEFI Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
UEFI Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Important 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Important 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Important 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Important 7.5
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Important 7.5
HTTP.sys Denial of Service Vulnerability
Important 7.5
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows DNS Client Elevation of Privilege Vulnerability
Important 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Telephony Service Elevation of Privilege Vulnerability
Important 7.0
Windows Kernel Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Important 7.0
Windows Kernel Elevation of Privilege Vulnerability
Important 7.0
Windows Storage Elevation of Privilege Vulnerability
Important 7.0
Windows DHCP Client Information Disclosure Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows Kerberos Denial of Service Vulnerability
Important 6.5
Windows Shell Information Disclosure Vulnerability
Important 6.5
Windows NTLM Spoofing Vulnerability
Important 6.5
Windows Shell Information Disclosure Vulnerability
Important 5.5
Microsoft Windows VMSwitch Denial of Service Vulnerability
Important 5.5
Windows Telephony Server Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Hyper-V Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Important 5.5
Windows Application Identity (AppID) Information Disclosure Vulnerability
Important 5.5
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Important 5.5
Windows DHCP Client Information Disclosure Vulnerability
Important 5.5
Windows Mark of the Web Security Feature Bypass Vulnerability
Important 5.4
Windows Kerberos Denial of Service Vulnerability
Important 5.3
Windows BitLocker Security Feature Bypass Vulnerability
Important 5.3
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Important 3.9