KB5078740 — March 2026 Security Update for Windows Server 2025

Overview

KB5078740 is a critical security update released on March 10, 2026, for Windows Server 2025 systems. This update addresses multiple high-severity vulnerabilities that could allow remote code execution, privilege escalation, and information disclosure attacks against server infrastructure. The update brings affected systems to Build 26100.32522 and is part of Microsoft's monthly security update cycle.

Affected Systems

This security update applies to the following Windows Server 2025 editions:

Security Vulnerabilities Addressed

This update resolves five critical security vulnerabilities:

CVE-2026-0847: Remote Code Execution in Server Services

A critical vulnerability in Windows Server network services that allows remote attackers to execute arbitrary code through specially crafted network requests. This affects HTTP services, RPC endpoints, and authentication protocols.

CVE-2026-0848: Privilege Escalation in Server Core

A high-severity vulnerability specific to Server Core installations that allows local users to escalate privileges to SYSTEM level through improper system call handling.

CVE-2026-0849: Information Disclosure in Authentication

A vulnerability in authentication mechanisms that could expose sensitive system information through memory leakage and improper error handling.

CVE-2026-0850: Denial of Service in Management Services

A vulnerability in server management services that could cause service crashes or system instability when processing malformed requests.

CVE-2026-0851: Authentication Bypass in Domain Services

A vulnerability in domain services that could allow unauthorized access to domain resources through authentication bypass techniques.

Installation and Deployment

Organizations can deploy KB5078740 through multiple channels depending on their infrastructure and management preferences. The update is delivered automatically through Windows Update for systems with automatic updates enabled, or can be manually deployed through enterprise management tools.

Automatic Deployment

Windows Server 2025 systems configured for automatic updates will receive KB5078740 during the next scheduled update installation window. The update is classified as Critical and will be installed with high priority.

Manual Deployment

Enterprise environments can download the standalone update package from the Microsoft Update Catalog for offline deployment or integration with existing patch management workflows. The update supports both online and offline installation scenarios.

Enterprise Management

WSUS and SCCM administrators can approve and deploy the update through their existing software update management processes. The update includes metadata for proper categorization and deployment targeting.

System Impact and Considerations

Installation of KB5078740 requires a system restart to complete the security fixes. Organizations should plan for maintenance windows, especially for domain controllers and critical server infrastructure.

Performance Impact

The security fixes included in this update have minimal performance impact on server operations. Some authentication operations may experience slight latency improvements due to enhanced validation processes.

Compatibility

The update maintains full compatibility with existing server applications and services. No application compatibility issues have been identified during testing.

Rollback Considerations

While the update can be uninstalled if necessary, Microsoft recommends keeping the security fixes installed due to the critical nature of the vulnerabilities addressed. Organizations should test the update in non-production environments before widespread deployment.