Skip to the content
The Update Bureau
Security

KB5073723: all 72 vulnerabilities

Cumulative update for Windows Server, version 2019, January 2026. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

72 vulnerabilities fixed
1 exploited 1 critical 70 important 1 not rated
VulnerabilitySeverityCVSS
CVE-2026-20805 Exploited
Desktop Window Manager Information Disclosure Vulnerability
Important 5.5
Windows Graphics Component Elevation of Privilege Vulnerability
Critical 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Important 8.1
Windows Telephony Service Elevation of Privilege Vulnerability
Important 8.0
MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Memory Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
Important 7.8
Windows Media Remote Code Execution Vulnerability
Important 7.8
Windows NTFS Remote Code Execution Vulnerability
Important 7.8
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Important 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows NTFS Remote Code Execution Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Management Services Elevation of Privilege Vulnerability
Important 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Hello Tampering Vulnerability
Important 7.7
Windows Hello Tampering Vulnerability
Important 7.7
Windows Deployment Services Remote Code Execution Vulnerability
Important 7.5
Windows SMB Server Elevation of Privilege Vulnerability
Important 7.5
Windows Kerberos Elevation of Privilege Vulnerability
Important 7.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Important 7.5
Windows SMB Server Elevation of Privilege Vulnerability
Important 7.5
Windows SMB Server Elevation of Privilege Vulnerability
Important 7.5
Windows SMB Server Elevation of Privilege Vulnerability
Important 7.5
Windows HTTP.sys Elevation of Privilege Vulnerability
Important 7.5
Windows SMB Server Elevation of Privilege Vulnerability
Important 7.5
Windows Clipboard Server Elevation of Privilege Vulnerability
Important 7.4
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Important 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Important 7.0
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
Important 7.0
LDAP Tampering Vulnerability
Important 6.5
Microsoft Windows File Explorer Spoofing Vulnerability
Important 6.5
NTLM Hash Disclosure Spoofing Vulnerability
Important 6.5
NTLM Hash Disclosure Spoofing Vulnerability
Important 6.5
Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
Important 6.4
Windows Kernel Information Disclosure Vulnerability
Important 6.2
Remote Procedure Call Information Disclosure Vulnerability
Important 6.2
Windows File Explorer Information Disclosure Vulnerability
Important 5.5
Windows Remote Assistance Security Feature Bypass Vulnerability
Important 5.5
Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
Important 5.5
TPM Trustlet Information Disclosure Vulnerability
Important 5.5
Windows Kerberos Information Disclosure Vulnerability
Important 5.5
Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability
Important 5.5
Windows Management Services Information Disclosure Vulnerability
Important 5.5
Windows File Explorer Information Disclosure Vulnerability
Important 5.5
Windows File Explorer Information Disclosure Vulnerability
Important 5.5
Windows File Explorer Information Disclosure Vulnerability
Important 5.5
Windows SMB Server Denial of Service Vulnerability
Important 5.3
Windows rndismp6.sys Information Disclosure Vulnerability
Important 4.6
Windows Spoofing Vulnerability
Important 4.6
Windows Hyper-V Information Disclosure Vulnerability
Important 4.4
Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability
Important 4.4
Windows NDIS Information Disclosure Vulnerability
Important 4.3
Integer Truncation on SQLite
Not rated —