CVE-2026-59138: Microsoft Remote Registry Service Denial of Service Vulnerability
Microsoft Remote Registry Service Denial of Service Vulnerability
Other sources
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23337Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26279Patch KB5120385 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59138?
The severity of CVE-2026-59138 is medium, with a score of 6.5.
How does CVE-2026-59138 affect Microsoft systems?
CVE-2026-59138 allows an authorized attacker to deny service by exploiting a null pointer dereference in the Microsoft Remote Registry Service.
What versions of Microsoft Windows are affected by CVE-2026-59138?
CVE-2026-59138 affects Microsoft Windows 10, Windows 11, and various versions of Windows Server including 2012, 2016, 2019, 2022, and 2025.
How can I mitigate CVE-2026-59138?
To mitigate CVE-2026-59138, ensure that Microsoft Remote Registry Service is properly configured and disable it if not needed.
Is CVE-2026-59138 a zero-day vulnerability?
No, CVE-2026-59138 is not a zero-day vulnerability as it was published on August 11, 2026.