MC1251194 High
Prevent/Fix (Detected): Out-of-band update released for Windows Enterprise client devices running hotpatch updates
Summary AI-generated
Microsoft released an OOB hotpatch (KB5084597) on March 13, 2026, to fix a RRAS management tool vulnerability in Windows 11 25H2/24H2 Enterprise devices using hotpatch updates.
Suggested actions AI-generated
- Verify device update compliance if managing RRAS on hotpatched devices
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1250975 Out-of-band update released for Windows Enterprise client devices running hotpatch updates
- MC1188558 Take Action: Out-of-band update to address November 2025 hotpatch update being reoffered after Windows update scan
- MC1253720 Out-of-band hotpatch update released to address an issue affecting Bluetooth device visibility
- MC1432461 Out-of-band update to address Windows update issue affecting some devices with Intel IPF driver
- MC1285472 Take action: Out-of-band updates released for Windows Server to address two issues
- MC1471876 Take Action: Out-of-band update released to address issues from the September 2026 Windows security update
Original post from Microsoft
Out-of-band update released for Windows Enterprise client devices running hotpatch updates
Microsoft has identified a security issue in the Windows Routing and Remote Access Service (RRAS) management tool that could allow remote code execution when connecting to a malicious server. This issue only applies to a limited set of scenarios involving Enterprise client devices running hotpatch updates and being used for remote server management.
An out-of-band (OOB) hotpatch update (KB5084597) was released today, March 13, 2026, to address this issue. This cumulative update includes all protections and improvements from the March 2026 Windows security update released March 10, 2026. No action is required if:
- Your devices receive standard Windows updates.
- If you are not using the RRAS management tool on Windows devices running versions 25H2 or 24H2.
This OOB hotpatch update is available for Windows 11, versions 25H2 and 24H2 devices enrolled in hotpatch updates and managed by Windows Autopatch. This update will install automatically through Windows Update and take effect without requiring you to restart your device. Learn more about hotpatch updates.
For more information, refer to the KB article March 13, 2026—Hotpatch KB5084597 (OS Builds 26200.7979 and 26100.7979) Out-of-band.
Additional details from Microsoft
- Summary
- Microsoft released an out-of-band hotpatch update (KB5084597) on March 13, 2026, to fix a remote code execution vulnerability in the Windows RRAS management tool for Enterprise Windows 11 (versions 25H2 and 24H2) devices running hotpatch updates. The update installs automatically without a restart.