Microsoft · Security update · September 8, 2026

KB5123099: September 2026 cumulative update for Windows 10 1607

KB5123099, released September 8, 2026, fixes 562 CVEs across 7 products. One of them is being exploited (CVE-2026-85880); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
562
49 rated Critical
Exploited
1
CVE-2026-85880
Exploitation more likely
43
Vendor assessment
Highest EPSS
0.0280
86th percentile

Priority of the 562 CVEs

Patch now 1 Urgent 87 High 354 Routine 120

Applies to

ProductBuild after install
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems14393.9512
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems14393.9512
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 201614393.9512
Windows 10 Version 1607 for 32-bit Systems14393.9512
Windows 10 Version 1607 for x64-based Systems14393.9512
Windows Server 201614393.9512
Windows Server 2016 (Server Core installation)14393.9512

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-85880 Windows ALPC Elevation of Privilege 7.8 0.0039 KEVExploited
Urgent CVE-2026-69845 Windows DHCP Server Remote Code Execution 9.8 0.0102 Exploitation Less Likely
Urgent CVE-2026-69525 Windows Remote Desktop Services Remote Code Execution 9.8 0.0097 More likely
Urgent CVE-2026-69579 Windows Message Queuing Remote Code Execution 9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-69730 Windows DNS Remote Code Execution 9.8 0.0097 More likely
Urgent CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution 9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-69829 Windows Shell Remote Code Execution 9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-70296 Windows Imaging Component Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-72979 Windows DHCP Server Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-72982 Windows Netlogon Remote Code Execution 9.8 0.0097 Exploitation Unlikely
Urgent CVE-2026-72983 Windows Internet Connection Sharing (ICS) Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-77493 Microsoft Graphics Component Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution 9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0092 Exploitation Unlikely
Urgent CVE-2026-69712 Windows Key Distribution Center Remote Code Execution 8.8 0.0091 Exploitation Less Likely
Urgent CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0091 Exploitation Less Likely
Urgent CVE-2026-69723 Windows Kernel Information Disclosure 5.7 0.0089 More likely
Urgent CVE-2026-69499 Windows Imaging Component Remote Code Execution 8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-69518 Windows Remote Desktop Remote Code Execution 8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution 8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-69860 Windows Imaging Component Remote Code Execution 8.8 0.0082 Exploitation Unlikely
Urgent CVE-2026-70203 Windows Media Player Remote Code Execution 8.8 0.0082 Exploitation Less Likely
Showing 1 to 25 of 562 1Next