Microsoft · Security update · July 14, 2026
KB5099538: July 2026 cumulative update for Windows 10 1809
KB5099538, released July 14, 2026, fixes 308 CVEs across 4 products. 2 of them are being exploited (CVE-2026-32202); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
308
27 rated Critical
Exploited
2
CVE-2026-32202
Exploitation more likely
31
Vendor assessment
Highest EPSS
0.7090
99th percentile
Priority of the 308 CVEs
Patch now 2
Urgent 52
High 172
Routine 82
Applies to
| Product | Build after install |
|---|---|
| Windows 10 Version 1809 for 32-bit Systems | 17763.9020 |
| Windows 10 Version 1809 for x64-based Systems | 17763.9020 |
| Windows Server 2019 | 17763.9020 |
| Windows Server 2019 (Server Core installation) | 17763.9020 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-32202 | Windows Shell | Spoofing | 4.3 | 0.7090 | KEVExploited |
| Patch now | CVE-2026-56155 | Active Directory Federation Services (AD FS) | Elevation of Privilege | 7.8 | 0.0035 | KEVExploited |
| Urgent | CVE-2026-50509 | Windows Wireless Wide Area Network Service | Elevation of Privilege | 7.8 | 0.0353 | More likely |
| Urgent | CVE-2026-50518 | Windows DHCP Server | Remote Code Execution | 9.8 | 0.0097 | More likely |
| Urgent | CVE-2026-56159 | Windows DHCP Server | Remote Code Execution | 9.8 | 0.0097 | Exploitation Unlikely |
| Urgent | CVE-2026-57092 | Windows VMSwitch | Elevation of Privilege | 9.9 | 0.0091 | Exploitation Less Likely |
| Urgent | CVE-2026-48564 | Windows DHCP Server | Remote Code Execution | 8.8 | 0.0091 | Exploitation Less Likely |
| Urgent | CVE-2026-50380 | Windows GDI+ | Remote Code Execution | 9.6 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-50474 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0082 | Exploitation Unlikely |
| Urgent | CVE-2026-57090 | Microsoft Windows Media Foundation | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-57094 | Microsoft Windows Media Foundation | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-57087 | Microsoft Windows Media Foundation | Remote Code Execution | 8.8 | 0.0079 | Exploitation Less Likely |
| Urgent | CVE-2026-49164 | Active Directory Domain Services | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-54995 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-50444 | Windows Server Update Service | Elevation of Privilege | 8.8 | 0.0078 | Exploitation Less Likely |
| Urgent | CVE-2026-54121 | Active Directory Certificate Services (AD CS) | Elevation of Privilege | 8.8 | 0.0078 | Exploitation Less Likely |
| Urgent | CVE-2026-56188 | Windows Server Network driver | Remote Code Execution | 9.8 | 0.0061 | More likely |
| Urgent | CVE-2026-58608 | Windows Print Spooler Components | Remote Code Execution | 8.8 | 0.0057 | Exploitation Less Likely |
| Urgent | CVE-2026-54982 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 8.8 | 0.0054 | Exploitation Less Likely |
| Urgent | CVE-2026-58531 | Windows SMB | Elevation of Privilege | 7.5 | 0.0051 | More likely |
| Urgent | CVE-2026-50370 | Windows DHCP Server | Remote Code Execution | 8.8 | 0.0050 | More likely |
| Urgent | CVE-2026-49796 | Windows GDI+ | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-50655 | Windows Media | Remote Code Execution | 7.8 | 0.0047 | More likely |
| Urgent | CVE-2026-54999 | Windows TCP/IP | Remote Code Execution | 8.8 | 0.0041 | Exploitation Less Likely |
Showing 1 to 25 of 308
1Next