Microsoft · Security update · June 9, 2026

KB5094127: June 2026 cumulative update for Windows 10 21H2

KB5094127, released June 9, 2026, fixes 142 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent3 publicly disclosed
CVEs closed
142
18 rated Critical
Exploited
0
None reported
Exploitation more likely
19
Vendor assessment
Highest EPSS
0.5660
99th percentile

Priority of the 142 CVEs

Patch now 0 Urgent 33 High 84 Routine 25

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows Server, version 2004 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-49160 HTTP/2 Denial of Service 7.5 0.5660 DisclosedMore likely
Urgent CVE-2026-47291 Windows HTTP.sys Remote Code Execution 9.8 0.2530 More likely
Urgent CVE-2026-50508 Windows NTLM Spoofing 6.5 0.1144 More likely
Urgent CVE-2026-50507 Windows BitLocker Security Feature Bypass 6.8 0.0502 DisclosedMore likely
Urgent CVE-2026-45586 Windows Collaborative Translation Framework Elevation of Privilege 7.8 0.0363 DisclosedMore likely
Urgent CVE-2026-40398 Windows Remote Desktop Elevation of Privilege 7.8 0.0267 More likely
Urgent CVE-2026-42989 Winlogon Elevation of Privilege 7.8 0.0227 More likely
Urgent CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0212 More likely
Urgent CVE-2026-42905 Windows DWM Core Library Elevation of Privilege 7.8 0.0200 More likely
Urgent CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege 7.8 0.0200 More likely
Urgent CVE-2026-33837 Windows TCP/IP Elevation of Privilege 7.8 0.0184 More likely
Urgent CVE-2026-35416 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0165 More likely
Urgent CVE-2026-42985 Remote Desktop Client Remote Code Execution 8.8 0.0126 More likely
Urgent CVE-2026-44815 Windows DHCP Client Remote Code Execution 9.8 0.0110 Exploitation Less Likely
Urgent CVE-2026-47289 Remote Desktop Client Remote Code Execution 8.8 0.0095 Exploitation Less Likely
Urgent CVE-2026-48563 Remote Desktop Client Remote Code Execution 7.5 0.0055 Exploitation Less Likely
Urgent CVE-2025-10263 Windows Kernel Elevation of Privilege 9.3 0.0054 Exploitation Less Likely
Urgent CVE-2026-35421 Windows GDI Remote Code Execution 7.8 0.0053 Exploitation Unlikely
Urgent CVE-2026-44803 Windows Win32K - GRFX Remote Code Execution 7.8 0.0052 More likely
Urgent CVE-2026-44812 Windows Win32K - GRFX Remote Code Execution 7.8 0.0052 More likely
Urgent CVE-2026-42992 Remote Desktop Client Remote Code Execution 7.5 0.0046 Exploitation Less Likely
Urgent CVE-2026-44799 Remote Desktop Client Remote Code Execution 7.5 0.0046 Exploitation Less Likely
Urgent CVE-2026-44801 Remote Desktop Client Remote Code Execution 7.5 0.0046 Exploitation Less Likely
Urgent CVE-2026-48574 Windows Media Remote Code Execution 7.8 0.0045 Exploitation Less Likely
Urgent CVE-2026-40403 Windows Win32K - GRFX Remote Code Execution 8.8 0.0043 Exploitation Less Likely
Showing 1 to 25 of 142 1Next