ANAVEM
Languagefr
Windows laptop displaying system update installation screen
KB5079473Windows UpdateWindows

KB5079473 — March 2026 Cumulative Update for Windows 10 and Windows 11

KB5079473 is a March 2026 cumulative update that addresses multiple security vulnerabilities, improves Windows Search performance, and resolves compatibility issues with modern hardware on Windows 10 and Windows 11 systems.

Emanuel DE ALMEIDAEmanuel DE ALMEIDA
17 March 202612 min read 0

KB5079473 is a March 2026 cumulative update that addresses multiple security vulnerabilities, improves Windows Search performance, and resolves compatibility issues with modern hardware on Windows 10 and Windows 11 systems.

Overview

KB5079473 is a March 2026 cumulative update released on March 11, 2026, addressing critical security vulnerabilities including CVE-2026-0847 and CVE-2026-0851. This update improves system stability, enhances Windows Search performance, and resolves compatibility issues with Intel 14th generation processors and AMD Ryzen 8000 series CPUs.

Applies to

Windows 10 22H2Windows 11 22H2Windows 11 23H2Windows 11 24H2

Issue Description

Issue Description

This cumulative update addresses multiple issues affecting Windows 10 and Windows 11 systems:

  • Security vulnerabilities: CVE-2026-0847 (Windows Kernel elevation of privilege), CVE-2026-0851 (Windows Graphics Component remote code execution), and CVE-2026-0853 (Windows NTLM authentication bypass)
  • Windows Search performance degradation: Search indexing consuming excessive CPU resources on systems with NVMe SSDs
  • Hardware compatibility issues: System instability and random crashes on Intel 14th generation Core processors and AMD Ryzen 8000 series CPUs
  • Microsoft Edge integration problems: WebView2 runtime crashes causing application failures in Microsoft Teams and other Electron-based applications
  • Windows Update reliability issues: Update installations failing with error codes 0x80070643 and 0x800f0922 on domain-joined systems

Root Cause

Root Cause

The security vulnerabilities stem from improper input validation in the Windows kernel and graphics subsystem, allowing potential privilege escalation and remote code execution. Performance issues result from inefficient search indexing algorithms introduced in previous updates. Hardware compatibility problems are caused by outdated power management drivers that do not properly support new CPU architectures and their advanced power states.

1

Patches Windows Kernel elevation of privilege vulnerability (CVE-2026-0847)

This update addresses a critical vulnerability in the Windows kernel that could allow an attacker to gain elevated privileges. The fix implements improved input validation in kernel-mode drivers and strengthens memory protection mechanisms. Affected components include ntoskrnl.exe and related kernel modules. This vulnerability affects all supported Windows versions and has a CVSS score of 7.8.

2

Resolves Windows Graphics Component remote code execution (CVE-2026-0851)

Patches a remote code execution vulnerability in the Windows Graphics Component that could be exploited through specially crafted image files. The update includes fixes to win32k.sys and DirectX components, implementing bounds checking and memory sanitization. This vulnerability primarily affects systems running graphics-intensive applications and has a CVSS score of 8.8.

3

Fixes Windows NTLM authentication bypass vulnerability (CVE-2026-0853)

Addresses an authentication bypass vulnerability in Windows NTLM that could allow unauthorized network access. The fix strengthens NTLM challenge-response mechanisms and implements additional validation checks in msv1_0.dll. This update is critical for domain environments and systems using NTLM authentication protocols.

4

Improves Windows Search indexing performance on NVMe systems

Optimizes the Windows Search indexing engine to reduce CPU usage on systems with NVMe solid-state drives. The update modifies SearchIndexer.exe and related components to implement more efficient file scanning algorithms and reduces unnecessary I/O operations. Performance improvements of up to 40% in search indexing speed are expected on affected systems.

5

Resolves compatibility issues with Intel 14th generation and AMD Ryzen 8000 series processors

Updates power management drivers and CPU microcode handling to support advanced power states in modern processors. The fix includes updates to hal.dll, ntoskrnl.exe, and processor-specific drivers. This resolves system instability, random crashes, and performance throttling issues on systems with Intel Core 14th generation (Raptor Lake Refresh) and AMD Ryzen 8000 series (Phoenix) processors.

6

Fixes Microsoft Edge WebView2 runtime stability issues

Addresses crashes and stability issues in the Microsoft Edge WebView2 runtime that affect Electron-based applications including Microsoft Teams, Visual Studio Code, and other modern desktop applications. The update includes fixes to the Chromium engine components and improves memory management in the WebView2 runtime environment.

7

Resolves Windows Update installation failures on domain-joined systems

Fixes Windows Update reliability issues that caused update installations to fail with error codes 0x80070643 and 0x800f0922 on domain-joined systems. The update improves communication between Windows Update components and Active Directory services, and resolves permission issues during update installation processes.

Installation

Installation

Windows Update: KB5079473 is automatically delivered through Windows Update starting March 11, 2026. The update is classified as Important and will be installed during the next scheduled update cycle.

Microsoft Update Catalog: Manual download is available from the Microsoft Update Catalog for standalone installation. The update package size varies by architecture:

  • Windows 10 x64: 847 MB
  • Windows 11 x64: 923 MB
  • Windows 11 ARM64: 756 MB

Enterprise Deployment: Available through Windows Server Update Services (WSUS), Microsoft System Center Configuration Manager (SCCM), and Microsoft Intune for enterprise environments.

Prerequisites: Systems must have the February 2026 servicing stack update (KB5078901) installed before applying KB5079473. Windows 10 systems require build 19045.4046 or later, while Windows 11 systems require build 22621.3155 or later.

Installation Requirements: A system restart is required after installation. Ensure at least 2 GB of free disk space is available before beginning the installation process.

Note: Installation time may vary from 15-45 minutes depending on system configuration and hardware specifications.

Known Issues

Known Issues

The following issues have been identified after installing KB5079473:

  • Printer compatibility: Some older HP LaserJet printers (models 1020, 1022, P1005) may experience printing delays or fail to print after the update. Updating to the latest HP Universal Print Driver resolves this issue.
  • VPN connectivity: Certain third-party VPN clients may experience connection drops or authentication failures. Affected VPN software includes older versions of Cisco AnyConnect (versions prior to 4.10.7) and Fortinet FortiClient (versions prior to 7.2.3).
  • Audio device recognition: USB audio devices may not be recognized immediately after system restart. Disconnecting and reconnecting the device typically resolves the issue.
  • Windows Defender performance: Real-time protection may temporarily consume higher CPU resources during the first 24 hours after installation while rebuilding security databases.

Workarounds:

  • For printer issues: Download and install the latest Universal Print Driver from the manufacturer's website
  • For VPN problems: Update VPN client software to the latest version or contact your VPN provider for compatibility updates
  • For audio issues: Use Device Manager to scan for hardware changes or restart the Windows Audio service
Important: Systems with custom kernel-mode drivers may require driver updates from hardware manufacturers before installing this update.

Overview

KB5079473 is a comprehensive cumulative update released on March 11, 2026, for Windows 10 and Windows 11 systems. This update addresses multiple critical security vulnerabilities, improves system performance, and resolves compatibility issues with modern hardware platforms. The update is part of Microsoft's regular Patch Tuesday release cycle and includes both security and non-security fixes.

Security Improvements

This update addresses three critical security vulnerabilities that could potentially compromise system security:

CVE-2026-0847: Windows Kernel Elevation of Privilege

A critical vulnerability in the Windows kernel that could allow an attacker with limited user privileges to gain administrative access to the system. The vulnerability exists in the way Windows handles certain kernel objects and memory allocations. Successful exploitation could lead to complete system compromise.

CVE-2026-0851: Windows Graphics Component Remote Code Execution

A remote code execution vulnerability in the Windows Graphics Component that could be exploited through specially crafted image files or web content. The vulnerability affects the DirectX graphics subsystem and could allow attackers to execute arbitrary code with system privileges.

Related: KB5075899 — March 2026 Cumulative Update for Windows 10 and

Related: KB5075904 — March 2026 Cumulative Update for Windows 10 and

Related: KB5078883 — March 2026 Cumulative Update for Windows 10 and

CVE-2026-0853: Windows NTLM Authentication Bypass

An authentication bypass vulnerability in the Windows NTLM implementation that could allow unauthorized access to network resources. This vulnerability is particularly concerning for enterprise environments using NTLM authentication protocols.

Performance and Compatibility Enhancements

Windows Search Optimization

The update includes significant improvements to the Windows Search indexing engine, particularly for systems equipped with NVMe solid-state drives. Previous versions of Windows Search could consume excessive CPU resources during indexing operations, impacting overall system performance. The optimized indexing algorithms reduce CPU usage by up to 40% while maintaining search accuracy and speed.

Modern Hardware Support

KB5079473 resolves compatibility issues with the latest processor architectures from Intel and AMD. Systems with Intel 14th generation Core processors (Raptor Lake Refresh) and AMD Ryzen 8000 series processors (Phoenix architecture) experienced stability issues due to inadequate power management support. The update includes:

  • Updated CPU microcode handling routines
  • Improved power state management for advanced CPU features
  • Enhanced thermal management algorithms
  • Better support for hybrid CPU architectures

Application Stability Improvements

The update addresses stability issues in the Microsoft Edge WebView2 runtime, which serves as the foundation for many modern desktop applications. Applications built using Electron framework, including Microsoft Teams, Visual Studio Code, Discord, and Spotify, may have experienced crashes or performance issues prior to this update.

Installation Process

KB5079473 follows Microsoft's standard cumulative update installation process. The update is delivered automatically through Windows Update for consumer systems and can be deployed through enterprise management tools for business environments.

Automatic Installation

For most users, KB5079473 will be installed automatically during the next scheduled Windows Update cycle. The update is classified as Important, meaning it will be downloaded and installed without user intervention on systems with automatic updates enabled.

Manual Installation

Users who prefer manual control over updates can download KB5079473 from the Microsoft Update Catalog. The standalone installer allows for immediate installation without waiting for the automatic update cycle.

Enterprise Deployment

Enterprise administrators can deploy KB5079473 through established update management infrastructure including WSUS, SCCM, and Microsoft Intune. The update supports standard deployment scenarios including staged rollouts and testing groups.

System Requirements and Prerequisites

Before installing KB5079473, ensure your system meets the following requirements:

  • Operating System: Windows 10 version 22H2 (build 19045.4046 or later) or Windows 11 version 22H2/23H2/24H2 (build 22621.3155 or later)
  • Prerequisite Updates: February 2026 servicing stack update (KB5078901) must be installed
  • Disk Space: Minimum 2 GB free space on the system drive
  • Memory: At least 4 GB RAM for Windows 10, 8 GB RAM recommended for Windows 11
  • Network: Internet connection required for download and activation verification

Post-Installation Verification

After installing KB5079473, verify the installation was successful by checking the installed updates list:

Get-HotFix -Id KB5079473

The command should return installation details including the installation date and description. Additionally, check the Windows Update history in Settings > Update & Security > Windows Update > View update history.

Impact on System Performance

KB5079473 is designed to improve overall system performance, particularly in the following areas:

  • Search Performance: Reduced CPU usage during indexing operations
  • Graphics Performance: Improved stability and performance in graphics-intensive applications
  • Power Management: Better battery life on laptops with modern processors
  • Application Responsiveness: Reduced crashes and improved stability in Electron-based applications

Rollback Considerations

While KB5079473 can be uninstalled if necessary, Microsoft recommends keeping the update installed due to the critical security fixes it contains. If system issues occur after installation, consider updating device drivers or contacting hardware manufacturers for compatibility updates before removing the update.

To uninstall KB5079473 if absolutely necessary:

  1. Open Settings > Update & Security > Windows Update
  2. Click "View update history"
  3. Click "Uninstall updates"
  4. Select KB5079473 and click "Uninstall"
  5. Restart the system when prompted
Warning: Uninstalling this update will leave your system vulnerable to the security issues it addresses. Only remove the update if critical system functionality is impacted.

Frequently Asked Questions

What does KB5079473 resolve?
KB5079473 resolves three critical security vulnerabilities (CVE-2026-0847, CVE-2026-0851, CVE-2026-0853), improves Windows Search performance on NVMe systems, fixes compatibility issues with Intel 14th generation and AMD Ryzen 8000 series processors, and addresses Microsoft Edge WebView2 runtime stability problems.
Which systems require KB5079473?
KB5079473 applies to Windows 10 version 22H2 (build 19045.4046 or later) and all supported versions of Windows 11 including 22H2, 23H2, and 24H2. Systems must have the February 2026 servicing stack update (KB5078901) installed as a prerequisite.
Is KB5079473 a security update?
Yes, KB5079473 is classified as a security update containing fixes for three critical vulnerabilities: Windows Kernel elevation of privilege (CVE-2026-0847), Windows Graphics Component remote code execution (CVE-2026-0851), and Windows NTLM authentication bypass (CVE-2026-0853). It also includes non-security improvements and compatibility fixes.
What are the prerequisites for KB5079473?
The primary prerequisite is the February 2026 servicing stack update (KB5078901). Systems also need at least 2 GB of free disk space, and Windows 10 systems must be on build 19045.4046 or later while Windows 11 systems require build 22621.3155 or later.
Are there known issues with KB5079473?
Known issues include compatibility problems with older HP LaserJet printers, connection issues with certain VPN clients (Cisco AnyConnect and Fortinet FortiClient), temporary USB audio device recognition problems, and temporarily increased Windows Defender CPU usage during the first 24 hours after installation.

References (3)

About the Author

Emanuel DE ALMEIDA

Emanuel DE ALMEIDA

Senior IT Journalist & Cloud Architect

Microsoft MCSA-certified Cloud Architect | Fortinet-focused. I modernize cloud, hybrid & on-prem infrastructure for reliability, security, performance and cost control - sharing field-tested ops & troubleshooting.

Discussion

Share your thoughts and insights

You must be logged in to comment.

Loading comments...