KB5099536: CVEs fixed (Windows update (KB))

KB5099536 fixes 2 tracked CVEs. Affected systems and fixed versions.

CVE-2026-49172 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a netwo
CVE-2026-54990 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net

Applies to