CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability
Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.
Other sources
Windows Kernel Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.32995Patch KB5094125 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2269Patch KB5095051 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8655Patch KB5094126 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8655Patch KB5094126 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5256Patch KB5094128 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7219Patch KB5093998
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45657?
The severity of CVE-2026-45657 is classified as critical with a score of 9.8.
How do I fix CVE-2026-45657?
To fix CVE-2026-45657, ensure that your system is updated with the latest security patches provided by Microsoft.
What exploit does CVE-2026-45657 allow?
CVE-2026-45657 allows an unauthorized attacker to execute remote code over a network due to a use after free vulnerability in the Windows Kernel.
Which software is affected by CVE-2026-45657?
CVE-2026-45657 affects Microsoft Windows 11, Microsoft Windows Server 2025, Microsoft Windows Server 2022, and the Microsoft Windows Kernel.
Is CVE-2026-45657 a local or remote vulnerability?
CVE-2026-45657 is a remote vulnerability that can be exploited over a network.