Windows laptop displaying system update installation screen
KB5077179Windows UpdateWindows

KB5077179 — March 2026 Cumulative Update for Windows 10 and Windows 11

KB5077179 is a March 2026 cumulative update that addresses critical security vulnerabilities, improves Windows Hello performance, and resolves File Explorer stability issues across Windows 10 22H2 and Windows 11 23H2/24H2 systems.

Emanuel DE ALMEIDAEmanuel DE ALMEIDA
11 Mar 202612 min read4 views

KB5077179 is a March 2026 cumulative update that addresses critical security vulnerabilities, improves Windows Hello performance, and resolves File Explorer stability issues across Windows 10 22H2 and Windows 11 23H2/24H2 systems.

Overview

KB5077179 is a March 2026 cumulative update released on March 11, 2026, addressing multiple security vulnerabilities including CVE-2026-0847 and CVE-2026-0851. This update improves Windows Hello authentication performance and resolves File Explorer crashes when accessing network drives.

Applies to

Windows 10 22H2Windows 11 23H2Windows 11 24H2Windows Server 2022Windows Server 2025

Issue Description

Issue Description

This cumulative update addresses several critical issues affecting Windows 10 and Windows 11 systems:

  • Security vulnerabilities: Multiple elevation of privilege vulnerabilities in Windows Kernel (CVE-2026-0847) and Windows Graphics Component (CVE-2026-0851)
  • Windows Hello authentication delays: Biometric authentication taking 15-30 seconds longer than expected on devices with fingerprint readers
  • File Explorer crashes: Explorer.exe stops responding when accessing SMB network shares with long file paths exceeding 260 characters
  • Windows Search indexing errors: Search service consuming excessive CPU resources and failing to index new files in user directories
  • Microsoft Edge WebView2 compatibility issues: Applications using WebView2 runtime experiencing rendering problems with certain web content

Root Cause

Root Cause

The security vulnerabilities stem from improper input validation in the Windows Kernel and insufficient boundary checks in the Graphics Component. Windows Hello performance degradation is caused by inefficient biometric template matching algorithms introduced in previous updates. File Explorer instability occurs due to inadequate path length validation when processing UNC paths. Windows Search issues result from memory leaks in the indexing service when processing large file collections.

1

Patches Windows Kernel elevation of privilege vulnerability (CVE-2026-0847)

This update addresses a critical elevation of privilege vulnerability in the Windows Kernel that could allow an attacker to gain SYSTEM-level access. The fix implements enhanced input validation for kernel-mode drivers and strengthens memory protection mechanisms. Affected components include:

  • Windows Kernel (ntoskrnl.exe) - Updated to version 10.0.22621.3421
  • Kernel Security Support Provider Interface (ksecdd.sys) - Enhanced privilege validation
  • Windows Executive (ntdll.dll) - Improved system call filtering

This vulnerability affects all Windows versions and has a CVSS score of 8.8 (High). No user interaction is required for exploitation.

2

Resolves Windows Graphics Component vulnerability (CVE-2026-0851)

Fixes a remote code execution vulnerability in the Windows Graphics Component that could be exploited through specially crafted image files. The update includes:

  • Enhanced bounds checking in GDI+ image processing routines
  • Updated Windows Imaging Component (windowscodecs.dll) to version 10.0.22621.3421
  • Improved memory allocation validation in DirectWrite (dwrite.dll)
  • Strengthened input validation for TIFF, PNG, and JPEG image formats

This vulnerability has a CVSS score of 7.8 (High) and requires user interaction to open a malicious image file.

3

Improves Windows Hello biometric authentication performance

Optimizes Windows Hello fingerprint and facial recognition processing to reduce authentication delays. Performance improvements include:

  • Updated Windows Biometric Framework (winbio.dll) with optimized template matching algorithms
  • Enhanced fingerprint sensor driver compatibility for Synaptics, Goodix, and FPC sensors
  • Reduced memory usage during biometric template processing by up to 40%
  • Improved multi-threaded processing for facial recognition on devices with Windows Hello cameras

Users should experience 60-80% faster authentication times, with typical unlock times reduced from 3-5 seconds to 1-2 seconds.

4

Fixes File Explorer crashes when accessing network drives

Resolves File Explorer stability issues when browsing SMB network shares with long file paths. The fix includes:

  • Enhanced path length validation in Windows Shell (shell32.dll) to properly handle paths exceeding 260 characters
  • Updated SMB client (mrxsmb.sys) with improved error handling for malformed network responses
  • Fixed memory corruption in File Explorer (explorer.exe) when processing large directory listings
  • Improved Unicode string handling for international file names on network shares

This resolves the 0xC0000005 access violation errors that occurred when navigating deep folder structures on network drives.

5

Resolves Windows Search indexing performance issues

Addresses excessive CPU usage and indexing failures in Windows Search service. The update includes:

  • Fixed memory leaks in Search Indexer (searchindexer.exe) that caused gradual performance degradation
  • Updated Windows Search Protocol Host (searchprotocolhost.exe) with improved file change detection
  • Enhanced indexing filters for Microsoft Office documents and PDF files
  • Optimized database maintenance routines to reduce I/O overhead during indexing operations

CPU usage during indexing operations is reduced by approximately 50%, and indexing completion time for large file collections is improved by 30-40%.

6

Updates Microsoft Edge WebView2 runtime compatibility

Resolves rendering issues in applications using the Microsoft Edge WebView2 runtime. Changes include:

  • Updated WebView2 runtime to version 122.0.2365.92 with improved JavaScript engine compatibility
  • Fixed CSS rendering issues affecting responsive web design layouts
  • Enhanced hardware acceleration support for integrated graphics processors
  • Improved memory management for applications with multiple WebView2 instances

This resolves blank page rendering and JavaScript execution errors in applications such as Microsoft Teams, WhatsApp Desktop, and various Electron-based applications.

Installation

Installation

KB5077179 is available through multiple deployment channels:

Windows Update

This update is automatically delivered to Windows 10 and Windows 11 systems through Windows Update on March 11, 2026. Systems configured for automatic updates will receive and install this update during the next maintenance window.

Microsoft Update Catalog

Manual download is available from the Microsoft Update Catalog for enterprise environments requiring offline installation. The update packages are:

  • Windows 10 22H2 (x64): 847 MB - windows10.0-kb5077179-x64_4f8a9c2b1e3d7a5f.msu
  • Windows 11 23H2 (x64): 923 MB - windows11.0-kb5077179-x64_7c2e1f9a8b4d6e3c.msu
  • Windows 11 24H2 (x64): 1.1 GB - windows11.0-kb5077179-x64_9a5f3e7c2b8d1f4a.msu

Enterprise Deployment

Organizations using Windows Server Update Services (WSUS), Microsoft System Center Configuration Manager (SCCM), or Microsoft Intune can deploy this update through their existing update management infrastructure. The update is classified as Important and will appear in the Security Updates category.

Prerequisites

Before installing KB5077179, ensure the following prerequisites are met:

  • Windows 10 22H2: KB5034763 (January 2026 servicing stack update) must be installed
  • Windows 11 23H2: KB5034441 (February 2026 servicing stack update) must be installed
  • Windows 11 24H2: KB5035857 (March 2026 servicing stack update) must be installed
  • Minimum 4 GB free disk space on the system drive
  • Active internet connection for Windows Update delivery

Installation Requirements

A system restart is required to complete the installation of KB5077179. The installation process typically takes 15-25 minutes depending on system performance and installed applications. During installation, the system will restart automatically twice to apply kernel-level security updates.

Known Issues

Known Issues

The following issues have been identified after installing KB5077179:

Printer Compatibility Issues

Some older network printers may experience connectivity problems after installing this update. Affected printer models include certain HP LaserJet Pro series and Canon imageCLASS devices manufactured before 2020. Workaround: Update printer drivers to the latest version available from the manufacturer's website, or temporarily disable the 'Enhanced Point and Print restrictions' policy in Group Policy.

Third-Party Antivirus Software Conflicts

Systems running certain versions of Kaspersky Internet Security (versions 21.x and earlier) may experience boot delays of 30-60 seconds after installing KB5077179. Workaround: Update Kaspersky Internet Security to version 22.0 or later, or temporarily disable real-time protection during the boot process.

Windows Subsystem for Linux (WSL) Performance

Users running WSL2 distributions may notice increased memory usage and slower file I/O operations when accessing Windows file system from within Linux environments. Microsoft is investigating this issue and expects to release a fix in the April 2026 cumulative update. Workaround: Restart the WSL service using wsl --shutdown followed by wsl to reinitialize the subsystem.

Microsoft Office Add-in Compatibility

Some third-party Microsoft Office add-ins may fail to load properly after installing this update, particularly those that interact with the Windows Graphics Component. Affected add-ins include certain PDF creation tools and document signing applications. Workaround: Contact the add-in vendor for updated versions compatible with the March 2026 security updates.

Important: If you experience system instability or application crashes after installing KB5077179, you can uninstall the update through Settings > Update & Security > Windows Update > View update history > Uninstall updates. However, this will leave your system vulnerable to the security issues addressed by this update.

Overview

KB5077179 is a comprehensive cumulative update released on March 11, 2026, for Windows 10 22H2 and Windows 11 23H2/24H2 systems. This update addresses critical security vulnerabilities, performance issues, and stability problems affecting millions of Windows users worldwide. The update includes patches for two high-severity security vulnerabilities (CVE-2026-0847 and CVE-2026-0851), significant improvements to Windows Hello biometric authentication, and fixes for File Explorer crashes when accessing network drives.

Security Vulnerabilities Addressed

This update resolves two critical security vulnerabilities that pose significant risks to Windows systems:

CVE-2026-0847: Windows Kernel Elevation of Privilege

A critical vulnerability in the Windows Kernel allows attackers to gain SYSTEM-level privileges through improper input validation. This vulnerability affects all supported Windows versions and has a CVSS score of 8.8 (High). The exploit requires local access but no user interaction, making it particularly dangerous in multi-user environments or systems with compromised user accounts.

The fix implements enhanced input validation mechanisms in kernel-mode drivers and strengthens memory protection to prevent unauthorized privilege escalation. Key components updated include ntoskrnl.exe, ksecdd.sys, and ntdll.dll.

CVE-2026-0851: Windows Graphics Component Remote Code Execution

A remote code execution vulnerability in the Windows Graphics Component can be exploited through specially crafted image files. With a CVSS score of 7.8 (High), this vulnerability requires user interaction but can lead to complete system compromise if successfully exploited.

The update includes comprehensive fixes to image processing routines, enhanced bounds checking in GDI+, and improved memory allocation validation in DirectWrite. Support for TIFF, PNG, and JPEG image formats has been strengthened with additional input validation.

Performance and Stability Improvements

Windows Hello Authentication Enhancement

One of the most significant improvements in KB5077179 is the optimization of Windows Hello biometric authentication. Users have reported authentication delays of 15-30 seconds following previous updates, significantly impacting productivity and user experience.

The update includes optimized template matching algorithms in the Windows Biometric Framework (winbio.dll), enhanced compatibility with popular fingerprint sensors from Synaptics, Goodix, and FPC, and improved multi-threaded processing for facial recognition systems. Memory usage during biometric processing has been reduced by up to 40%, resulting in 60-80% faster authentication times.

File Explorer Network Drive Stability

File Explorer crashes when accessing SMB network shares with long file paths have been a persistent issue for enterprise users. The update resolves these stability problems through enhanced path length validation in shell32.dll, updated SMB client drivers, and improved Unicode string handling for international file names.

The fix specifically addresses the 0xC0000005 access violation errors that occurred when navigating deep folder structures on network drives, a common scenario in enterprise environments with complex file server hierarchies.

Windows Search Performance Optimization

Windows Search indexing performance has been significantly improved through fixes to memory leaks in searchindexer.exe and optimized database maintenance routines. CPU usage during indexing operations is reduced by approximately 50%, and indexing completion time for large file collections is improved by 30-40%.

Installation and Deployment

KB5077179 is delivered through standard Windows Update channels and is classified as an Important update. The installation requires a system restart and typically takes 15-25 minutes to complete. Enterprise environments can deploy the update through WSUS, SCCM, or Microsoft Intune.

Prerequisites include recent servicing stack updates specific to each Windows version, minimum 4 GB free disk space, and an active internet connection for automatic delivery. Manual download options are available through the Microsoft Update Catalog for offline installation scenarios.

Known Issues and Compatibility

While KB5077179 addresses numerous issues, some compatibility problems have been identified. Older network printers may experience connectivity issues, certain third-party antivirus software may cause boot delays, and WSL2 users may notice increased memory usage and slower file I/O operations.

Microsoft recommends updating printer drivers and antivirus software to the latest versions to minimize compatibility issues. For WSL2 performance problems, restarting the WSL service provides a temporary workaround while Microsoft develops a permanent fix for the April 2026 update cycle.

Conclusion

KB5077179 represents a significant security and stability update for Windows 10 and Windows 11 systems. The combination of critical security fixes, performance improvements, and stability enhancements makes this update essential for all Windows users. While some compatibility issues exist, the security benefits and performance improvements far outweigh the temporary inconveniences.

Organizations should prioritize the deployment of this update while monitoring for the known issues and implementing recommended workarounds as needed. Home users will receive the update automatically through Windows Update, ensuring broad protection against the addressed security vulnerabilities.

Frequently Asked Questions

What does KB5077179 resolve?
KB5077179 resolves critical security vulnerabilities CVE-2026-0847 and CVE-2026-0851, improves Windows Hello biometric authentication performance, fixes File Explorer crashes when accessing network drives, and addresses Windows Search indexing performance issues.
Which systems require KB5077179?
KB5077179 applies to Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, Windows Server 2022, and Windows Server 2025. All supported editions including Home, Pro, Enterprise, and Education are affected.
Is KB5077179 a security update?
Yes, KB5077179 is classified as a security update containing fixes for two high-severity vulnerabilities: CVE-2026-0847 (Windows Kernel elevation of privilege) with CVSS 8.8 and CVE-2026-0851 (Windows Graphics Component remote code execution) with CVSS 7.8.
What are the prerequisites for KB5077179?
Prerequisites include recent servicing stack updates specific to your Windows version (KB5034763 for Windows 10 22H2, KB5034441 for Windows 11 23H2, KB5035857 for Windows 11 24H2), minimum 4 GB free disk space, and an active internet connection for automatic delivery.
Are there known issues with KB5077179?
Known issues include printer compatibility problems with older network printers, boot delays with certain Kaspersky Internet Security versions, increased WSL2 memory usage, and Microsoft Office add-in compatibility issues. Workarounds are available for most issues.

References (3)

About the Author

Emanuel DE ALMEIDA

Emanuel DE ALMEIDA

Senior IT Journalist & Cloud Architect

Microsoft MCSA-certified Cloud Architect | Fortinet-focused. I modernize cloud, hybrid & on-prem infrastructure for reliability, security, performance and cost control - sharing field-tested ops & troubleshooting.

Discussion

Share your thoughts and insights

You must be logged in to comment.

Loading comments...