KB5087423: CVEs fixed (Windows update (KB))

KB5087423 fixes 2 tracked CVEs. Affected systems and fixed versions.

CVE-2026-40369 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-41096 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a net

Applies to