
⚠️ If your RDS servers are hit: do NOT roll back the September CU. Apply KB5129195 on top instead. Rolling back reopens whatever CVE-2026-62721 and the rest of that CU were patching. #WindowsUpdate
Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 13 products

⚠️ If your RDS servers are hit: do NOT roll back the September CU. Apply KB5129195 on top instead. Rolling back reopens whatever CVE-2026-62721 and the rest of that CU were patching. #WindowsUpdate

Also bundled in: CVE-2026-62721, a local EoP in the Windows User-Mode Power Service. CVSS not yet published - but being the only CVE in an emergency OOB release is itself a signal to treat it as high priority. #CVE #Security

「なぜ、いきなり更新が始まったのか?」——KB5129195緊急パッチから読み解くWindows Updateの構造変化 https://xn--ecka7j.biz/toolboox/windows11/14639/ Windows Updateが突然始まった理由を徹底解説。KB5129195緊急パッチ(OOB)の背景にある、前回の更新による重大障害とセキュリティ脆弱性(CVE-2026-62721)の正体を解明。 https://t.co/9c4N1xEtZN

Windows User-Mode Power Service (UMPS) の特権昇格の脆弱性 CVE-2026-62721 https://msrc.microsoft.com/update-guide/advisory/CVE-2026-62721
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |