# KB5094126: June 2026 cumulative update for Windows 11 24H2 KB5094126, released June 9, 2026, fixes 101 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/microsoft/kb5094126 - Platform: Microsoft - Released: Jun 9, 2026 - Priority: Urgent (Closes CVE-2026-49160, exploitation more likely) - CVEs: 101, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5094126 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 11 Version 24H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-arm64-based-systems.md) | | | | [Windows 11 Version 24H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-x64-based-systems.md) | | | | [Windows 11 Version 25H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-25h2-for-arm64-based-systems.md) | | | | [Windows 11 Version 25H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-25h2-for-x64-based-systems.md) | | | | [Windows Server 2025](https://patchblox.com/security/data/product/microsoft/windows-server-2025.md) | | | | [Windows Server 2025 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2025-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-49160](https://patchblox.com/security/data/cve/CVE-2026-49160.md) | Urgent | HTTP/2 | 7.5 | 0.5660 | Disclosed | | [CVE-2026-47291](https://patchblox.com/security/data/cve/CVE-2026-47291.md) | Urgent | Windows HTTP.sys | 9.8 | 0.2530 | More likely | | [CVE-2026-45657](https://patchblox.com/security/data/cve/CVE-2026-45657.md) | Urgent | Windows Kernel | 9.8 | 0.1548 | | | [CVE-2026-50507](https://patchblox.com/security/data/cve/CVE-2026-50507.md) | Urgent | Windows BitLocker | 6.8 | 0.0502 | Disclosed | | [CVE-2026-45586](https://patchblox.com/security/data/cve/CVE-2026-45586.md) | Urgent | Windows Collaborative Translation Framework | 7.8 | 0.0363 | Disclosed | | [CVE-2026-42989](https://patchblox.com/security/data/cve/CVE-2026-42989.md) | Urgent | Winlogon | 7.8 | 0.0227 | More likely | | [CVE-2026-42905](https://patchblox.com/security/data/cve/CVE-2026-42905.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0200 | More likely | | [CVE-2026-42986](https://patchblox.com/security/data/cve/CVE-2026-42986.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0200 | More likely | | [CVE-2026-45585](https://patchblox.com/security/data/cve/CVE-2026-45585.md) | Urgent | Windows BitLocker | 6.8 | 0.0189 | Disclosed | | [CVE-2026-42985](https://patchblox.com/security/data/cve/CVE-2026-42985.md) | Urgent | Remote Desktop Client | 8.8 | 0.0126 | More likely | | [CVE-2026-44815](https://patchblox.com/security/data/cve/CVE-2026-44815.md) | Urgent | Windows DHCP Client | 9.8 | 0.0110 | | | [CVE-2026-47289](https://patchblox.com/security/data/cve/CVE-2026-47289.md) | Urgent | Remote Desktop Client | 8.8 | 0.0095 | | | [CVE-2026-48563](https://patchblox.com/security/data/cve/CVE-2026-48563.md) | Urgent | Remote Desktop Client | 7.5 | 0.0055 | | | [CVE-2025-10263](https://patchblox.com/security/data/cve/CVE-2025-10263.md) | Urgent | Windows Kernel | 9.3 | 0.0054 | | | [CVE-2026-44803](https://patchblox.com/security/data/cve/CVE-2026-44803.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0052 | More likely | | [CVE-2026-44812](https://patchblox.com/security/data/cve/CVE-2026-44812.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0052 | More likely | | [CVE-2026-42992](https://patchblox.com/security/data/cve/CVE-2026-42992.md) | Urgent | Remote Desktop Client | 7.5 | 0.0046 | | | [CVE-2026-44799](https://patchblox.com/security/data/cve/CVE-2026-44799.md) | Urgent | Remote Desktop Client | 7.5 | 0.0046 | | | [CVE-2026-44801](https://patchblox.com/security/data/cve/CVE-2026-44801.md) | Urgent | Remote Desktop Client | 7.5 | 0.0046 | | | [CVE-2026-48574](https://patchblox.com/security/data/cve/CVE-2026-48574.md) | Urgent | Windows Media | 7.8 | 0.0045 | | | [CVE-2026-45607](https://patchblox.com/security/data/cve/CVE-2026-45607.md) | Urgent | Windows Hyper-V | 8.4 | 0.0036 | | | [CVE-2026-45658](https://patchblox.com/security/data/cve/CVE-2026-45658.md) | Urgent | Windows BitLocker | 7.8 | 0.0035 | More likely | | [CVE-2026-47652](https://patchblox.com/security/data/cve/CVE-2026-47652.md) | Urgent | Windows Hyper-V | 8.2 | 0.0034 | | | [CVE-2026-33828](https://patchblox.com/security/data/cve/CVE-2026-33828.md) | Urgent | Microsoft Azure Attestation service and Device Health Attestation Service | 7.8 | 0.0031 | | | [CVE-2026-45641](https://patchblox.com/security/data/cve/CVE-2026-45641.md) | Urgent | Role: Windows Hyper-V | 8.4 | 0.0031 | | | [CVE-2026-44810](https://patchblox.com/security/data/cve/CVE-2026-44810.md) | Urgent | Windows Cryptographic Services | 8.4 | 0.0026 | | | [CVE-2026-48573](https://patchblox.com/security/data/cve/CVE-2026-48573.md) | High | Windows Secure Boot | 7.9 | 0.0103 | | | [CVE-2026-48576](https://patchblox.com/security/data/cve/CVE-2026-48576.md) | High | Windows Secure Boot | 7.9 | 0.0103 | | | [CVE-2026-42908](https://patchblox.com/security/data/cve/CVE-2026-42908.md) | High | Windows RDP | 7.5 | 0.0087 | | | [CVE-2026-45639](https://patchblox.com/security/data/cve/CVE-2026-45639.md) | High | Windows RDP | 7.5 | 0.0087 | | | [CVE-2026-42974](https://patchblox.com/security/data/cve/CVE-2026-42974.md) | High | Windows Performance Monitor | 8.1 | 0.0064 | | | [CVE-2026-42981](https://patchblox.com/security/data/cve/CVE-2026-42981.md) | High | Windows Performance Monitor | 8.1 | 0.0064 | | | [CVE-2026-47653](https://patchblox.com/security/data/cve/CVE-2026-47653.md) | High | Remote Desktop Client | 8.8 | 0.0060 | | | [CVE-2026-45635](https://patchblox.com/security/data/cve/CVE-2026-45635.md) | High | Universal Plug and Play (upnp.dll) | 8.1 | 0.0056 | | | [CVE-2026-45599](https://patchblox.com/security/data/cve/CVE-2026-45599.md) | High | Universal Plug and Play (upnp.dll) | 8.1 | 0.0052 | | | [CVE-2026-42913](https://patchblox.com/security/data/cve/CVE-2026-42913.md) | High | Remote Desktop Client | 7.5 | 0.0047 | | | [CVE-2026-42904](https://patchblox.com/security/data/cve/CVE-2026-42904.md) | High | Windows TCP/IP | 9.6 | 0.0044 | | | [CVE-2026-45636](https://patchblox.com/security/data/cve/CVE-2026-45636.md) | High | Windows NTFS | 7.8 | 0.0041 | | | [CVE-2026-42909](https://patchblox.com/security/data/cve/CVE-2026-42909.md) | High | Remote Desktop Client | 7.5 | 0.0040 | | | [CVE-2026-45602](https://patchblox.com/security/data/cve/CVE-2026-45602.md) | High | Windows DHCP Server | 9.1 | 0.0037 | | | [CVE-2026-40404](https://patchblox.com/security/data/cve/CVE-2026-40404.md) | High | Windows Universal Disk Format File System Driver (UDFS) | 7.8 | 0.0034 | | | [CVE-2026-42828](https://patchblox.com/security/data/cve/CVE-2026-42828.md) | High | Windows Projected File System Filter Driver | 7.8 | 0.0033 | | | [CVE-2026-42837](https://patchblox.com/security/data/cve/CVE-2026-42837.md) | High | Windows Projected File System Filter Driver | 7.8 | 0.0033 | | | [CVE-2026-42916](https://patchblox.com/security/data/cve/CVE-2026-42916.md) | High | Windows NT OS Kernel | 7.8 | 0.0033 | | | [CVE-2026-45656](https://patchblox.com/security/data/cve/CVE-2026-45656.md) | High | Windows UEFI | 7.8 | 0.0032 | | | [CVE-2026-45654](https://patchblox.com/security/data/cve/CVE-2026-45654.md) | High | Windows Secure Boot | 7.9 | 0.0031 | | | [CVE-2026-45588](https://patchblox.com/security/data/cve/CVE-2026-45588.md) | High | Windows Secure Boot | 7.9 | 0.0030 | | | [CVE-2026-47656](https://patchblox.com/security/data/cve/CVE-2026-47656.md) | High | Windows Boot Manager | 7.9 | 0.0030 | | | [CVE-2026-48568](https://patchblox.com/security/data/cve/CVE-2026-48568.md) | High | Windows Secure Boot | 7.9 | 0.0030 | | | [CVE-2026-48570](https://patchblox.com/security/data/cve/CVE-2026-48570.md) | High | Windows Secure Boot | 7.9 | 0.0030 | | | [CVE-2026-48575](https://patchblox.com/security/data/cve/CVE-2026-48575.md) | High | Windows Secure Boot | 7.9 | 0.0030 | | | [CVE-2026-41092](https://patchblox.com/security/data/cve/CVE-2026-41092.md) | High | Microsoft Kinect | 7.8 | 0.0030 | | | [CVE-2026-40409](https://patchblox.com/security/data/cve/CVE-2026-40409.md) | High | Windows Universal Disk Format File System Driver (UDFS) | 7.8 | 0.0030 | | | [CVE-2026-42829](https://patchblox.com/security/data/cve/CVE-2026-42829.md) | High | Windows Administrator Protection | 7.8 | 0.0029 | | | [CVE-2026-42910](https://patchblox.com/security/data/cve/CVE-2026-42910.md) | High | Windows Hotpatch Monitoring Service | 7.8 | 0.0029 | | | [CVE-2026-42983](https://patchblox.com/security/data/cve/CVE-2026-42983.md) | High | Windows DWM Core Library | 7.8 | 0.0029 | | | [CVE-2026-45592](https://patchblox.com/security/data/cve/CVE-2026-45592.md) | High | Windows Internet (wininet.dll) | 7.8 | 0.0029 | | | [CVE-2026-45593](https://patchblox.com/security/data/cve/CVE-2026-45593.md) | High | Windows SDK | 7.8 | 0.0029 | | | [CVE-2026-45600](https://patchblox.com/security/data/cve/CVE-2026-45600.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0029 | | | [CVE-2026-45605](https://patchblox.com/security/data/cve/CVE-2026-45605.md) | High | Windows Bluetooth Service | 7.8 | 0.0029 | | | [CVE-2026-41108](https://patchblox.com/security/data/cve/CVE-2026-41108.md) | High | Windows DNS | 7.0 | 0.0027 | | | [CVE-2026-48578](https://patchblox.com/security/data/cve/CVE-2026-48578.md) | High | Windows Secure Boot | 7.9 | 0.0027 | | | [CVE-2026-44802](https://patchblox.com/security/data/cve/CVE-2026-44802.md) | High | Windows DWM Core Library | 7.8 | 0.0027 | | | [CVE-2026-44809](https://patchblox.com/security/data/cve/CVE-2026-44809.md) | High | Windows Common Log File System Driver | 7.8 | 0.0027 | | | [CVE-2026-48583](https://patchblox.com/security/data/cve/CVE-2026-48583.md) | High | Windows Kernel | 7.8 | 0.0027 | | | [CVE-2026-42984](https://patchblox.com/security/data/cve/CVE-2026-42984.md) | High | Windows Kernel | 7.0 | 0.0025 | | | [CVE-2026-45653](https://patchblox.com/security/data/cve/CVE-2026-45653.md) | High | Windows Kernel | 7.0 | 0.0025 | | | [CVE-2026-42978](https://patchblox.com/security/data/cve/CVE-2026-42978.md) | High | Windows Push Notifications | 7.8 | 0.0025 | | | [CVE-2026-34335](https://patchblox.com/security/data/cve/CVE-2026-34335.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0023 | | | [CVE-2026-42911](https://patchblox.com/security/data/cve/CVE-2026-42911.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0023 | | | [CVE-2026-45640](https://patchblox.com/security/data/cve/CVE-2026-45640.md) | High | Windows Bluetooth Port Driver | 7.0 | 0.0023 | | | [CVE-2026-47648](https://patchblox.com/security/data/cve/CVE-2026-47648.md) | High | Windows Storage | 7.0 | 0.0022 | | | [CVE-2026-42836](https://patchblox.com/security/data/cve/CVE-2026-42836.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0020 | | | [CVE-2026-42977](https://patchblox.com/security/data/cve/CVE-2026-42977.md) | High | Windows Push Notifications | 7.8 | 0.0019 | | | [CVE-2026-42979](https://patchblox.com/security/data/cve/CVE-2026-42979.md) | High | Windows Push Notifications | 7.8 | 0.0019 | | | [CVE-2026-45597](https://patchblox.com/security/data/cve/CVE-2026-45597.md) | High | UI Automation Manager (uiamanager.dll) | 7.0 | 0.0019 | | | [CVE-2026-45487](https://patchblox.com/security/data/cve/CVE-2026-45487.md) | High | Windows Program Compatibility Assistant Service | 7.8 | 0.0018 | | | [CVE-2026-42991](https://patchblox.com/security/data/cve/CVE-2026-42991.md) | High | Windows Push Notifications | 7.8 | 0.0018 | | | [CVE-2026-45596](https://patchblox.com/security/data/cve/CVE-2026-45596.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-45598](https://patchblox.com/security/data/cve/CVE-2026-45598.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-45601](https://patchblox.com/security/data/cve/CVE-2026-45601.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-45603](https://patchblox.com/security/data/cve/CVE-2026-45603.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-8863](https://patchblox.com/security/data/cve/CVE-2026-8863.md) | High | Windows UEFI | 7.8 | 0.0011 | | | [CVE-2026-42903](https://patchblox.com/security/data/cve/CVE-2026-42903.md) | Routine | Windows Kerberos | 6.5 | 0.0090 | | | [CVE-2026-42907](https://patchblox.com/security/data/cve/CVE-2026-42907.md) | Routine | Windows Shell | 6.5 | 0.0082 | | | [CVE-2026-42971](https://patchblox.com/security/data/cve/CVE-2026-42971.md) | Routine | Windows Push Notifications | 5.5 | 0.0046 | | | [CVE-2026-42972](https://patchblox.com/security/data/cve/CVE-2026-42972.md) | Routine | Role: Windows Hyper-V | 5.5 | 0.0046 | | | [CVE-2026-45595](https://patchblox.com/security/data/cve/CVE-2026-45595.md) | Routine | Windows Mark of the Web (MOTW) | 5.4 | 0.0042 | | | [CVE-2026-42970](https://patchblox.com/security/data/cve/CVE-2026-42970.md) | Routine | Windows Push Notifications | 5.5 | 0.0042 | | | [CVE-2026-42973](https://patchblox.com/security/data/cve/CVE-2026-42973.md) | Routine | Windows Push Notifications | 5.5 | 0.0042 | | | [CVE-2026-45655](https://patchblox.com/security/data/cve/CVE-2026-45655.md) | Routine | Windows BitLocker | 5.3 | 0.0041 | | | [CVE-2026-42906](https://patchblox.com/security/data/cve/CVE-2026-42906.md) | Routine | Windows Shell | 5.5 | 0.0040 | | | [CVE-2026-45594](https://patchblox.com/security/data/cve/CVE-2026-45594.md) | Routine | Windows Application Identity (AppID) Subsystem | 5.5 | 0.0040 | | | [CVE-2026-42969](https://patchblox.com/security/data/cve/CVE-2026-42969.md) | Routine | Windows Push Notifications | 5.5 | 0.0040 | | | [CVE-2026-42968](https://patchblox.com/security/data/cve/CVE-2026-42968.md) | Routine | Windows Telephony Service | 5.5 | 0.0039 | | | [CVE-2026-42915](https://patchblox.com/security/data/cve/CVE-2026-42915.md) | Routine | Windows VMSwitch | 5.5 | 0.0038 | | | [CVE-2026-45606](https://patchblox.com/security/data/cve/CVE-2026-45606.md) | Routine | Microsoft UxTheme Library (uxtheme.dll) | 5.5 | 0.0038 | | | [CVE-2026-45634](https://patchblox.com/security/data/cve/CVE-2026-45634.md) | Routine | Windows DHCP Server | 5.5 | 0.0036 | | | [CVE-2026-45604](https://patchblox.com/security/data/cve/CVE-2026-45604.md) | Routine | Windows Application Identity (AppID) Subsystem | 5.5 | 0.0034 | | | [CVE-2026-45608](https://patchblox.com/security/data/cve/CVE-2026-45608.md) | Routine | Windows DHCP Client | 6.8 | 0.0034 | | | [CVE-2026-45642](https://patchblox.com/security/data/cve/CVE-2026-45642.md) | Routine | Microsoft Azure Attestation service and Device Health Attestation Service | 3.9 | 0.0032 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo