Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday Zero-day

KB5126868

KB5126868: Cumulative update for Windows 10, version 1607, October 2026. Actively exploited Windows Shell flaw patched; storage issues addressed

In short

An actively exploited Windows Shell flaw is patched, alongside fixes for File History and offline Storage Spaces Direct disks. Free support for these 2016 LTSB editions ends on release day.

Does it affect you? Applies to: This update applies to Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB, version 1607. Free support for both editions ends October 13, 2026.

Build
14393.9612
Security
748 fixed · 20 critical · 1 exploited
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fixes 2 changes

File History

  • File History backup and restore problems with external drives or network locations are addressed.1
    Affected devices might show a "Reconnect your drive" message even when a compatible backup drive is connected and working.

Storage Spaces

Verified in package
  • Some Storage Spaces Direct virtual disks might stay offline after a Windows update. This update addresses the issue.2
    During recovery, valid tiered storage metadata might be incorrectly identified as invalid, keeping affected virtual disks and dependent workloads offline.

Improvements 2 changes

Date and Time

  • Permanent daylight saving time support starts in British Columbia and Alberta in November 2026.3
    The change enables permanent DST support for British Columbia and Alberta starting in November 2026.

Secure Boot

Gradual rollout Verified in package
  • Eligible devices continue to receive updated Secure Boot certificates through an ongoing rollout.4
    The rollout uses the latest high-confidence targeting data to identify eligible devices ready to receive the certificates automatically.

New features 2 changes

Date and Time

  • A new Manitoba time zone is available.5
    The new time zone is Manitoba Standard Time, (UTC-05:00) Manitoba.

ReFS security

  • ReFS volumes on external storage devices gain auditing and optional security controls.6
    Auditing is enabled by default. Enforcement controls remain disabled by default so administrators can evaluate and prepare for future security hardening changes.

Known issues

  1. Mitigated Affects: Everyone

    USB Audio Class 1.0 devices with error Code 10 or no output

    Some USB Audio Class 1.0 devices might fail to start or produce audio. The September 14, 2026 OOB update partly resolves symptoms with 8-channel or 3D audio modes.7

    How to apply the workaround Workaround

    Some customers report restoring audio by switching to 2-channel mode. Administrators can contact Microsoft Support for symptoms not addressed by the OOB update.7

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-10-13
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5129239, KB5123099, KB5120418, KB5099535
+24 earlier KB5094122, KB5087537, KB5091572, KB5082198, KB5078938, KB5075999, KB5073722, KB5074974, KB5071543, KB5068864, KB5066836, KB5065427, KB5063871, KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5134123
VersionBuildChannel
1607 14393.9612 General availability

Security

748 vulnerabilities fixed
1 exploited 20 critical 728 important
VulnerabilitySeverityCVSS
CVE-2026-96951 Exploited
Windows Shell Security Feature Bypass Vulnerability
 Important 8.8
CVE-2026-100202
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-70147
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-70153
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-96934
Windows DHCP Server Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-97814
Windows Text Shaping Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-100220
Windows Media Video Decoder Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-102214
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-102225
Windows Text Shaping Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-108467
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-83934
Windows GDI+ Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-96914
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
 Critical 8.8
CVE-2026-108460
Windows Message Queuing Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-70229
Windows Active Directory Domain Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-88171
Windows DHCP Server Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-88174
Windows Deployment Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-100215
Microsoft Graphics Component Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-108131
Active Directory Federation Services (AD FS) Spoofing Vulnerability
 Critical 7.5
CVE-2026-96222
Active Directory Federation Services (AD FS) Spoofing Vulnerability
 Critical 7.4
CVE-2026-108399
Windows Hyper-V Elevation of Privilege Vulnerability
 Critical 7.2
CVE-2026-102211
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
 Critical 7.0

The table lists the 21 exploited, publicly disclosed or critical vulnerabilities. See all 748 vulnerabilities →

Updated components

2,538 files changed since the previous update for the same versions.

Top changed componentsFiles
Audio31
WPF28
Bluetooth24
Networking22
Graphics and display20
Secure Boot18
Remote Desktop17
Security and sign-in15
.NET runtime (CLR)14
WCF14
Storage and file systems13
Printing12

Verified in package: changed files confirm Storage Spaces, Secure Boot.

Page history

  1. Added 16 vulnerabilities (16 important)

  2. Superseded by KB5134123

Sources

Updated
Cited passages from Microsoft's official notes (7)
  1. 1. Fixed: This update addresses an issue where File History might fail to back up or restore files to an external drive or network location. support.microsoft.com
  2. 2. This update addresses an issue that might cause some Storage Spaces Direct virtual disks to remain offline after installing a Windows update. support.microsoft.com
  3. 3. This update enables permanent Daylight Saving Time (DST) support for British Columbia and Alberta starting in November 2026. support.microsoft.com
  4. 4. This update continues the deployment of updated Secure Boot certificates using the latest high-confidence targeting data to identify eligible devices that are ready to automatically receive the new certificates. support.microsoft.com
  5. 5. This update introduces the new time zone Manitoba Standard Time, "(UTC-05:00) Manitoba." support.microsoft.com
  6. 6. This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default support.microsoft.com
  7. 7. Some customers have reported that they're able to restore audio in these cases by switching to 2-channel mode. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake