KB5120229: CVEs fixed (Windows update (KB))

KB5120229 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-62893 CRITICAL 9.8 UPGRADE UPGRADE Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
• CVE-2026-62878 CRITICAL 9.8 UPGRADE UPGRADE Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
• CVE-2026-62815 CRITICAL 9.8 UPGRADE UPGRADE Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Applies to

• Windows Server 2022 · fixed in 10.0.20348.5440
• Windows Server 2022 (Server Core installation) · fixed in 10.0.20348.5440

← Back to latest CVEs