KB5089549: CVEs fixed (Windows update (KB))

KB5089549 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-40369 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2026-41096 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a net

Applies to

• Windows 11 Version 25H2 for ARM64-based Systems · fixed in 10.0.26200.8457
• Windows 11 Version 25H2 for x64-based Systems · fixed in 10.0.26200.8457

← Back to latest CVEs