PatchTheCEVKB5126657: CVEs fixed (Windows update (KB))
KB5126657 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2026-108135 HIGH 7.0 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a
- CVE-2026-108396 HIGH 7.0 UPGRADE UPGRADE Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz
Applies to
- Windows 10 Version 21H2 for 32-bit Systems · fixed in 10.0.19044.7807
- Windows 10 Version 21H2 for ARM64-based Systems · fixed in 10.0.19044.7807
- Windows 10 Version 21H2 for x64-based Systems · fixed in 10.0.19044.7807
- Windows 10 Version 22H2 for 32-bit Systems · fixed in 10.0.19045.7807
- Windows 10 Version 22H2 for ARM64-based Systems · fixed in 10.0.19045.7807