Microsoft CVE-2026-27916

Apply the vendor-released security updates immediately via Windows Update or Windows Server Update Services (WSUS). Fixed versions are Windows 10 Version 1607 build 10.0.14393.9060 or later, Windows 10 Version 1809/Server 2019 build 10.0.17763.8644 or later, Windows 10 Version 21H2 build 10.0.19044.7184 or later, Windows 10 Version 22H2 build 10.0.19045.7184 or later, Windows 11 22H3/23H2 build 10.0.22631.6936 or later, Windows 11 24H2/Server 2025 build 10.0.26100.32690 or later, Windows 11 25H2 build 10.0.26200.8246 or later, Windows 11 26H1 build 10.0.28000.1836 or later, Windows Server 2012 build 6.2.9200.26026 or later, Windows Server 2012 R2 build 6.3.9600.23132 or later, Windows Server 2016 build 10.0.14393.9060 or later, Windows Server 2022 build 10.0.20348.5020 or later, and Windows Server 2022 23H2 build 10.0.25398.2274 or later. Detailed update guidance available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27916. No effective workarounds exist; patching is the only reliable mitigation. Organizations unable to patch immediately should implement compensating controls such as restricting local logon rights to trusted users only and enhanced monitoring for suspicious privilege escalation activity.