KB5126651: CVEs fixed (Windows update (KB))

KB5126651 fixes 9 tracked CVEs. Affected systems and fixed versions.

CVE-2026-108132 HIGH 7.0 UPGRADE UPGRADE Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-108396 HIGH 7.0 UPGRADE UPGRADE Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz
CVE-2026-83862 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac
CVE-2026-68836 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally
CVE-2026-69326 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-69387 HIGH 7.0 UPGRADE UPGRADE Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69452 HIGH 7.1 UPGRADE UPGRADE Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a
CVE-2026-69471 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96222 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke

Applies to