KB5101650: CVEs fixed (Windows update (KB))

KB5101650 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-49172 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a netwo
• CVE-2026-54990 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net

Applies to

• Windows 11 Version 24H2 for ARM64-based Systems · fixed in 10.0.26100.8875
• Windows 11 Version 25H2 for ARM64-based Systems · fixed in 10.0.26200.8875
• Windows 11 Version 25H2 for x64-based Systems · fixed in 10.0.26200.8875

← Back to latest CVEs