KB5126836: CVEs fixed (Windows update (KB))

KB5126836 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-108136 HIGH 7.8 UPGRADE UPGRADE Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local
• CVE-2026-96951 HIGH 8.8 EXPLOITED MITIGATE UPGRADE Microsoft Windows Command Injection Vulnerability

Applies to

• Windows Server 2012 R2 · fixed in 6.3.9600.23470
• Windows Server 2012 R2 (Server Core installation) · fixed in 6.3.9600.23470

← Back to latest CVEs