Microsoft · ServicingStack update · July 14, 2026

KB5099414: July 2026 cumulative update for Windows 11 22H2

KB5099414, released July 14, 2026, fixes 19 CVEs across 2 products. One of them is being exploited (CVE-2026-32202); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
19
1 rated Critical
Exploited
1
CVE-2026-32202
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7090
99th percentile

Priority of the 19 CVEs

Patch now 1 Urgent 1 High 12 Routine 5

Applies to

ProductBuild after install
Windows 11 Version 23H2 for ARM64-based Systems22631.7376
Windows 11 Version 23H2 for x64-based Systems22631.7376

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-32202 Windows Shell Spoofing 4.3 0.7090 KEVExploited
Urgent CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege 7.8 0.0033 Exploitation Less Likely
High CVE-2026-40378 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service 7.5 0.0117 Exploitation Less Likely
High CVE-2026-50696 Windows Internet Key Exchange (IKE) Protocol Denial of Service 7.5 0.0117 Exploitation Unlikely
High CVE-2026-42990 SQL Server ODBC driver Remote Code Execution 9.8 0.0097 Exploitation Unlikely
High CVE-2026-49172 Windows FTP Service Remote Code Execution 9.8 0.0097 Exploitation Less Likely
High CVE-2026-50471 Windows NTFS Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-58640 Windows NTFS Remote Code Execution 7.3 0.0036 Exploitation Less Likely
High CVE-2026-58601 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege 7.8 0.0033 Exploitation Less Likely
High CVE-2026-48571 Windows App Installer Elevation of Privilege 7.0 0.0026 Exploitation Less Likely
High CVE-2026-56173 Windows WebView Elevation of Privilege 7.0 0.0026 Exploitation Unlikely
High CVE-2026-58629 Windows DirectX Elevation of Privilege 7.0 0.0026 Exploitation Unlikely
High CVE-2026-44800 Windows Push Notifications Elevation of Privilege 7.8 0.0020 Exploitation Less Likely
High CVE-2026-48572 Windows App Installer Elevation of Privilege 7.0 0.0020 Exploitation Less Likely
Routine CVE-2026-34348 Windows Event Logging Service Information Disclosure 6.5 0.0100 Exploitation Less Likely
Routine CVE-2026-33842 Windows File Explorer Information Disclosure 5.5 0.0048 Exploitation Unlikely
Routine CVE-2026-34328 Windows Audio Service Information Disclosure 5.5 0.0048 Exploitation Unlikely
Routine CVE-2026-59116 Windows Remote Desktop Security Feature Bypass 6.8 0.0040 Exploitation Unlikely
Routine CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure 5.5 0.0027 Exploitation Less Likely
Showing 1 to 19 of 19 1