High8.1Vendor: CriticalMicrosoft Server Updated
Windows Deployment Services (WDS) Remote Code Execution
CVE-2026-42987 Published Jun 9, 2026
Affected products & platforms
Microsoft ServerWindows Server
Summary
Windows Deployment Services (WDS) Remote Code Execution Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
Fixed versions
- KB5094123 (build 10.0.17763.8880)
- KB5094128 (build 10.0.20348.5256)
- KB5094125 (build 10.0.26100.32995)
- KB5094122 (build 10.0.14393.9234)
- KB5094042 (build 6.2.9200.26132)
- KB5094041 (build 6.3.9600.23228)
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Install the applicable security update for your platform: KB5094123, KB5094128, KB5094125, KB5094122, KB5094042, KB5094041 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.