Microsoft DirectMusic Remote Code Execution Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-95882 · score 9.8/10

What could go wrong?

An attacker could run their own programs on your computer from far away, without sitting at it.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation) and 20 more versions

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5131291, KB5131085, KB5131096, KB5131090, KB5131087, KB5132061. Official page.