Critical9.8Vendor: HighMicrosoft Server Updated
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-54990 Published Jul 14, 2026Updated by vendor Jul 14, 2026
Affected products & platforms
Microsoft ServerWindows Server
Summary
Remote Desktop Client Remote Code Execution Vulnerability Affected product named by the advisory: Windows Server 2025.
Affected versions
- Windows 11 Version 24H2 10.0.26100.0
- Windows 11 Version 25H2 10.0.26200.0
- Windows 11 version 26H1 10.0.28000.0
- Windows Server 2025 10.0.26100.0
- Windows Server 2025 (Server Core installation) 10.0.26100.0
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Fixed versions
- KB5099536 (build 10.0.26100.33158)
- KB5101650 (build 10.0.26100.8875)
- KB5095051 (build 10.0.28000.2269)
- KB5101649 (build 10.0.28000.2525)
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Install the applicable security update for your platform: KB5099536, KB5101650, KB5095051, KB5101649 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.