September 14, 2026—KB5129194 (OS Build 28000.2956) Out-of-band

September 14, 2026—KB5129194 OS Build 28000.2956 Out-of-band Applies To Windows 11 version 26H1, all editions This out-of-band update for Windows 11, version 26H1 KB5129194 includes the latest fixes and improvements. Visit the Windows release health dashboard for the latest status on this release...

User-Mode Power Service Privilege Escalation

The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-62721

Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...

CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

...

CVE-2026-62721

Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.

September 14, 2026—Hotpatch KB5129241 (OS Builds 26200.9448 and 26100.9448) Out-of-band

September 14, 2026—Hotpatch KB5129241 OS Builds 26200.9448 and 26100.9448 Out-of-band Applies To Windows 11 Enterprise LTSC 2024 Important This update applies only to devices enrolled in hotpatch updates and is offered to eligible devices that have installed the September security update KB512400...

Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...

CVE-2026-62721: Insufficient Granularity of Access Control

Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...

PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service UMPS handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011...

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service UMPS handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011...

CVE-2020-1015

CVE-2020-1015 is a Windows elevation-of-privilege vulnerability affecting the User-Mode Power Service (UMPS). Connected CNVD entries corroborate an EoP issue stemming from improper handling of memory objects in Windows components (UMPS and related services such as WpcDesktopMonSvc); they describe...

CVE-2020-1015: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service UMPS handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011...