Windows Update Stack Elevation of Privilege Vulnerability
Windows · KB5122871 KB5124008 KB5122880 KB5124012
On 8 Sep 2026 Microsoft fixed 998 vulnerabilities – critical: 131, already exploited (zero-days): 2. Known issues with the updates: 2 open, 2 with workaround, 3 fixed.
Windows · KB5122871 KB5124008 KB5122880 KB5124012
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5123099
Azure
Microsoft Office
Azure
Azure
Azure
Azure
Azure
Azure
Azure
Azure
Azure
Apps
SQL Server · KB5122769 KB5122768 KB5122775 KB5122773
SQL Server · KB5122771 KB5122770 KB5122768 KB5122769
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows · KB5122876 KB5122882 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099
Microsoft Office · KB5002923
Windows
Azure
Azure
Microsoft Office
Azure
SQL Server · KB5122773 KB5122771 KB5122770 KB5122772
SQL Server · KB5122773 KB5122771 KB5122770 KB5122772
Azure
Microsoft Dynamics
Microsoft Dynamics
Microsoft Office · KB5002916
Microsoft Office
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Microsoft Office
Windows
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Microsoft Office · KB5002920
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122871 KB5123099
Windows · KB5124008 KB5122880 KB5124012
Microsoft Office · KB5002920
Windows, Windows ESU (Extended Security Updates) · KB5122878 KB5124008 KB5122880 KB5124012
Microsoft Office · KB5002920
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
Windows, Windows ESU (Extended Security Updates) · KB5122876 KB5122882 KB5122878 KB5122871
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5124008 | Windows | 607 | 5 |
| KB5122871 | Windows | 655 | 2 |
| KB5122882 | Windows | 619 | 2 |
| KB5124012 | Windows | 103 | 2 |
| KB5129194 | Windows | 1 | 2 |
| KB5122876 | Windows | 594 | 1 |
| KB5122880 | Windows | 581 | 1 |
| KB5122878 | Windows | 548 | 1 |
| KB5123099 | Windows | 81 | 1 |
| KB5123065 | Windows | 71 | none known |
| KB5123066 | Windows | 71 | none known |
| KB5122773 | SQL Server | 52 | none known |
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5122771 | SQL Server | 52 | none known |
| KB5122770 | SQL Server | 50 | none known |
| KB5122772 | SQL Server | 45 | none known |
| KB5122775 | SQL Server | 45 | none known |
| KB5122774 | SQL Server | 45 | none known |
| KB5002923 | Microsoft Office | 30 | none known |
| KB5002914 | Microsoft Office | 30 | none known |
| KB5002904 | Microsoft Office | 30 | none known |
| KB5122769 | SQL Server | 23 | none known |
| KB5122768 | SQL Server | 18 | none known |
| KB5002916 | Microsoft Office | 17 | none known |
| KB5002908 | Microsoft Office | 16 | none known |
| KB5121610 | Windows ESU (Extended Security Updates) | 9 | none known |
| KB5121609 | Windows ESU (Extended Security Updates) | 9 | none known |
| KB5121608 | Windows ESU (Extended Security Updates) | 9 | none known |
| KB5123301 | Microsoft Office | 9 | none known |
| KB5123287 | Microsoft Office | 9 | none known |
| KB5123300 | Microsoft Office | 9 | none known |
| KB5121611 | Windows ESU (Extended Security Updates) | 8 | none known |
| KB5002920 | Microsoft Office | 6 | none known |
| KB5126105 | Developer tools (.NET, Visual Studio …) | 6 | none known |
| KB5126106 | Developer tools (.NET, Visual Studio …) | 6 | none known |
| KB5126104 | Developer tools (.NET, Visual Studio …) | 5 | none known |
| KB5002910 | Microsoft Office | 5 | none known |
| KB5002919 | Microsoft Office | 3 | none known |
| KB5002912 | Microsoft Office | 2 | none known |
| KB5002913 | Microsoft Office | 2 | none known |
| KB5002644 | Microsoft Office | 2 | none known |
| KB5002898 | Microsoft Office | 2 | none known |
| KB5126049 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5126047 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5126051 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5123731 | Microsoft Dynamics | 1 | none known |
| KB4011160 | Microsoft Office | 1 | none known |
USB Audio Class 1.0 devices reportedly fail with Code 10 or produce no sound on Windows 11 and Windows Server 2025. This is reported by users, not yet confirmed by the vendor. No permanent fix has been found; a third-party page claims the Windows Server 2022 update KB5126655 fixes it, which is unverified.
Microsoft · Windows Server 2025, Windows 11 26H2/25H2/24H2, Windows Server 2019
One user reported that systems with Supermicro mainboards and Intel SATA RAID fail to boot after installing KB5122882. This is reported by users, not yet confirmed by the vendor; Microsoft has not documented the issue. The cause and the full scope are unknown.
Microsoft · Windows Server
Some USB Audio Class 1.0 devices might fail to start or produce no audio after installing Windows 11, version 26H2. Microsoft lists the same issue for other Windows client and server versions, where it originates from the September 8, 2026 security updates. For 26H2 the vendor status is Mitigated and a fix in a future Windows update is still being worked on.
Microsoft · Windows 11, Version 26H2
File History is reported to show a false 'Reconnect your drive' message after the 8 Sep 2026 update, and backups stop working. This is reported by users, not yet confirmed by the vendor. A fix is reported to be available with KB5124010, but one report says part of the problem persists.
Microsoft · Windows 11 23H2, 24H2, 25H2, 26H1 and Windows 10 ESU
Always On VPN profiles with automatic protocol selection or fallback (IKEv2 and SSTP) failed after the September 2026 Windows 11 updates. According to secondary sources and research notes, the optional preview update KB5127936 (28 Oct 2026) fixes this. We could not read the vendor page ourselves, so the details are not yet confirmed by a vendor source here.
Microsoft · Windows 11
After installing Windows 11 version 26H2, Credential Guard protected machine accounts may lose their secure channel to an on-premises Active Directory domain. The cause is Machine Identity Isolation (MII), which Windows now honours; it is only supported with Windows Server 2025 domain controllers at Domain Functional Level 2025 or above. Microsoft has resolved the issue with updates released on 2026-09-22 and later.
Microsoft · Windows 11, Version 26H2
The October 2026 Windows security update was released on 2026-10-13 for all supported Windows versions. For Windows 11, version 26H2, it fixes several known problems: Always On VPN, a black screen in Azure Virtual Desktop with FSLogix, and tiered Storage Spaces Direct virtual disks. A limited number of devices may need one additional restart during installation because of the Secure Boot certificate update.
Microsoft · Windows 11
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.