MC1250975 High Major change
Out-of-band update released for Windows Enterprise client devices running hotpatch updates
Summary AI-generated
An OOB hotpatch (KB5084597) fixes a remote code execution vulnerability in Windows RRAS management for Windows 11 25H2/24H2 hotpatch devices; update released March 13, 2026.
Suggested actions AI-generated
- Ensure affected Windows 11 hotpatch devices receive OOB update KB5084597
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1251194 Prevent/Fix (Detected): Out-of-band update released for Windows Enterprise client devices running hotpatch updates
- MC1188558 Take Action: Out-of-band update to address November 2025 hotpatch update being reoffered after Windows update scan
- MC1253720 Out-of-band hotpatch update released to address an issue affecting Bluetooth device visibility
- MC1432461 Out-of-band update to address Windows update issue affecting some devices with Intel IPF driver
- MC1285472 Take action: Out-of-band updates released for Windows Server to address two issues
- MC1266857 Take Action: Out-of-band update to address an issue affecting installation of the March 2026 non-security preview update
Original post from Microsoft
Microsoft has identified a security issue in the Windows Routing and Remote Access Service (RRAS) management tool that could allow remote code execution when connecting to a malicious server. This issue only applies to a limited set of scenarios involving Enterprise client devices running hotpatch updates and being used for remote server management.
An out-of-band (OOB) hotpatch update (KB5084597) was released today, March 13, 2026, to address this issue. This cumulative update includes all protections and improvements from the March 2026 Windows security update released March 10, 2026. No action is required if:
- Your devices receive standard Windows updates.
- If you are not using the RRAS management tool on Windows devices running versions 25H2 or 24H2.
This OOB hotpatch update is available for Windows 11, versions 25H2 and 24H2 devices enrolled in hotpatch updates and managed by Windows Autopatch. This update will install automatically through Windows Update and take effect without requiring you to restart your device. Learn more about Hotpatch updates.
For more information, refer to the KB article March 13, 2026—Hotpatch KB5084597 (OS Builds 26200.7979 and 26100.7979) Out-of-band.