Microsoft · ServicingStack update · September 14, 2026

KB5129194: September 2026 cumulative update for Windows 11 22H2

KB5129194, released September 14, 2026, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.0035

28th percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 2
                                High 0
                                Routine 0

Applies to

Product	Build after install
Windows 11 Version 26H1 for ARM64-based Systems	28000.2956
Windows 11 version 26H1 for x64-based Systems	28000.2956

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2026-85921	Windows Secure Kernel Mode	Elevation of Privilege	8.2	0.0035	Exploitation Less Likely
Urgent	CVE-2026-62721	User-Mode Power Service (UMPS)	Elevation of Privilege	7.8	0.0030	More likely

Released the same day

KB5129195
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more

Vendor advisory

https://support.microsoft.com/help/5129194

Our write-up

September 2026 Patch Tuesday: The Update Pipeline Was the Attack Surface

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5129194">KB5129194 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.