KB5126655: CVEs fixed (Windows update (KB))

KB5126655 fixes 6 tracked CVEs. Affected systems and fixed versions.

CVE-2026-83862 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac
CVE-2026-69326 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-69387 HIGH 7.0 UPGRADE UPGRADE Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69471 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96222 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke
CVE-2026-85790 MEDIUM 5.9 UPGRADE UPGRADE Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Applies to