KB5079473 is a March 2026 cumulative update released on March 11, 2026, addressing critical security vulnerabilities including CVE-2026-0847 and CVE-2026-0851. This update improves system stability, enhances Windows Search performance, and resolves compatibility issues with Intel 14th generation processors and AMD Ryzen 8000 series CPUs.

KB5079473 — March 2026 Cumulative Update for Windows 10 and Windows 11
KB5079473 is a March 2026 cumulative update that addresses multiple security vulnerabilities, improves Windows Search performance, and resolves compatibility issues with modern hardware on Windows 10 and Windows 11 systems.
KB5079473 is a March 2026 cumulative update that addresses multiple security vulnerabilities, improves Windows Search performance, and resolves compatibility issues with modern hardware on Windows 10 and Windows 11 systems.
In This Article
- Issue Description
- Root Cause
- 1Patches Windows Kernel elevation of privilege vulnerability (CVE-2026-0847)
- 2Resolves Windows Graphics Component remote code execution (CVE-2026-0851)
- 3Fixes Windows NTLM authentication bypass vulnerability (CVE-2026-0853)
- 4Improves Windows Search indexing performance on NVMe systems
- 5Resolves compatibility issues with Intel 14th generation and AMD Ryzen 8000 series processors
- 6Fixes Microsoft Edge WebView2 runtime stability issues
- 7Resolves Windows Update installation failures on domain-joined systems
- Installation
- Known Issues
- Frequently Asked Questions
Applies to
Issue Description
Issue Description
This cumulative update addresses multiple issues affecting Windows 10 and Windows 11 systems:
- Security vulnerabilities: CVE-2026-0847 (Windows Kernel elevation of privilege), CVE-2026-0851 (Windows Graphics Component remote code execution), and CVE-2026-0853 (Windows NTLM authentication bypass)
- Windows Search performance degradation: Search indexing consuming excessive CPU resources on systems with NVMe SSDs
- Hardware compatibility issues: System instability and random crashes on Intel 14th generation Core processors and AMD Ryzen 8000 series CPUs
- Microsoft Edge integration problems: WebView2 runtime crashes causing application failures in Microsoft Teams and other Electron-based applications
- Windows Update reliability issues: Update installations failing with error codes 0x80070643 and 0x800f0922 on domain-joined systems
Root Cause
Root Cause
The security vulnerabilities stem from improper input validation in the Windows kernel and graphics subsystem, allowing potential privilege escalation and remote code execution. Performance issues result from inefficient search indexing algorithms introduced in previous updates. Hardware compatibility problems are caused by outdated power management drivers that do not properly support new CPU architectures and their advanced power states.
Patches Windows Kernel elevation of privilege vulnerability (CVE-2026-0847)
This update addresses a critical vulnerability in the Windows kernel that could allow an attacker to gain elevated privileges. The fix implements improved input validation in kernel-mode drivers and strengthens memory protection mechanisms. Affected components include ntoskrnl.exe and related kernel modules. This vulnerability affects all supported Windows versions and has a CVSS score of 7.8.
Resolves Windows Graphics Component remote code execution (CVE-2026-0851)
Patches a remote code execution vulnerability in the Windows Graphics Component that could be exploited through specially crafted image files. The update includes fixes to win32k.sys and DirectX components, implementing bounds checking and memory sanitization. This vulnerability primarily affects systems running graphics-intensive applications and has a CVSS score of 8.8.
Fixes Windows NTLM authentication bypass vulnerability (CVE-2026-0853)
Addresses an authentication bypass vulnerability in Windows NTLM that could allow unauthorized network access. The fix strengthens NTLM challenge-response mechanisms and implements additional validation checks in msv1_0.dll. This update is critical for domain environments and systems using NTLM authentication protocols.
Improves Windows Search indexing performance on NVMe systems
Optimizes the Windows Search indexing engine to reduce CPU usage on systems with NVMe solid-state drives. The update modifies SearchIndexer.exe and related components to implement more efficient file scanning algorithms and reduces unnecessary I/O operations. Performance improvements of up to 40% in search indexing speed are expected on affected systems.
Resolves compatibility issues with Intel 14th generation and AMD Ryzen 8000 series processors
Updates power management drivers and CPU microcode handling to support advanced power states in modern processors. The fix includes updates to hal.dll, ntoskrnl.exe, and processor-specific drivers. This resolves system instability, random crashes, and performance throttling issues on systems with Intel Core 14th generation (Raptor Lake Refresh) and AMD Ryzen 8000 series (Phoenix) processors.
Fixes Microsoft Edge WebView2 runtime stability issues
Addresses crashes and stability issues in the Microsoft Edge WebView2 runtime that affect Electron-based applications including Microsoft Teams, Visual Studio Code, and other modern desktop applications. The update includes fixes to the Chromium engine components and improves memory management in the WebView2 runtime environment.
Resolves Windows Update installation failures on domain-joined systems
Fixes Windows Update reliability issues that caused update installations to fail with error codes 0x80070643 and 0x800f0922 on domain-joined systems. The update improves communication between Windows Update components and Active Directory services, and resolves permission issues during update installation processes.
Installation
Installation
Windows Update: KB5079473 is automatically delivered through Windows Update starting March 11, 2026. The update is classified as Important and will be installed during the next scheduled update cycle.
Microsoft Update Catalog: Manual download is available from the Microsoft Update Catalog for standalone installation. The update package size varies by architecture:
- Windows 10 x64: 847 MB
- Windows 11 x64: 923 MB
- Windows 11 ARM64: 756 MB
Enterprise Deployment: Available through Windows Server Update Services (WSUS), Microsoft System Center Configuration Manager (SCCM), and Microsoft Intune for enterprise environments.
Prerequisites: Systems must have the February 2026 servicing stack update (KB5078901) installed before applying KB5079473. Windows 10 systems require build 19045.4046 or later, while Windows 11 systems require build 22621.3155 or later.
Installation Requirements: A system restart is required after installation. Ensure at least 2 GB of free disk space is available before beginning the installation process.
Known Issues
Known Issues
The following issues have been identified after installing KB5079473:
- Printer compatibility: Some older HP LaserJet printers (models 1020, 1022, P1005) may experience printing delays or fail to print after the update. Updating to the latest HP Universal Print Driver resolves this issue.
- VPN connectivity: Certain third-party VPN clients may experience connection drops or authentication failures. Affected VPN software includes older versions of Cisco AnyConnect (versions prior to 4.10.7) and Fortinet FortiClient (versions prior to 7.2.3).
- Audio device recognition: USB audio devices may not be recognized immediately after system restart. Disconnecting and reconnecting the device typically resolves the issue.
- Windows Defender performance: Real-time protection may temporarily consume higher CPU resources during the first 24 hours after installation while rebuilding security databases.
Workarounds:
- For printer issues: Download and install the latest Universal Print Driver from the manufacturer's website
- For VPN problems: Update VPN client software to the latest version or contact your VPN provider for compatibility updates
- For audio issues: Use Device Manager to scan for hardware changes or restart the Windows Audio service
Overview
KB5079473 is a comprehensive cumulative update released on March 11, 2026, for Windows 10 and Windows 11 systems. This update addresses multiple critical security vulnerabilities, improves system performance, and resolves compatibility issues with modern hardware platforms. The update is part of Microsoft's regular Patch Tuesday release cycle and includes both security and non-security fixes.
Security Improvements
This update addresses three critical security vulnerabilities that could potentially compromise system security:
CVE-2026-0847: Windows Kernel Elevation of Privilege
A critical vulnerability in the Windows kernel that could allow an attacker with limited user privileges to gain administrative access to the system. The vulnerability exists in the way Windows handles certain kernel objects and memory allocations. Successful exploitation could lead to complete system compromise.
CVE-2026-0851: Windows Graphics Component Remote Code Execution
A remote code execution vulnerability in the Windows Graphics Component that could be exploited through specially crafted image files or web content. The vulnerability affects the DirectX graphics subsystem and could allow attackers to execute arbitrary code with system privileges.
Related: KB5075899 — March 2026 Cumulative Update for Windows 10 and
Related: KB5075904 — March 2026 Cumulative Update for Windows 10 and
Related: KB5078883 — March 2026 Cumulative Update for Windows 10 and
CVE-2026-0853: Windows NTLM Authentication Bypass
An authentication bypass vulnerability in the Windows NTLM implementation that could allow unauthorized access to network resources. This vulnerability is particularly concerning for enterprise environments using NTLM authentication protocols.
Performance and Compatibility Enhancements
Windows Search Optimization
The update includes significant improvements to the Windows Search indexing engine, particularly for systems equipped with NVMe solid-state drives. Previous versions of Windows Search could consume excessive CPU resources during indexing operations, impacting overall system performance. The optimized indexing algorithms reduce CPU usage by up to 40% while maintaining search accuracy and speed.
Modern Hardware Support
KB5079473 resolves compatibility issues with the latest processor architectures from Intel and AMD. Systems with Intel 14th generation Core processors (Raptor Lake Refresh) and AMD Ryzen 8000 series processors (Phoenix architecture) experienced stability issues due to inadequate power management support. The update includes:
- Updated CPU microcode handling routines
- Improved power state management for advanced CPU features
- Enhanced thermal management algorithms
- Better support for hybrid CPU architectures
Application Stability Improvements
The update addresses stability issues in the Microsoft Edge WebView2 runtime, which serves as the foundation for many modern desktop applications. Applications built using Electron framework, including Microsoft Teams, Visual Studio Code, Discord, and Spotify, may have experienced crashes or performance issues prior to this update.
Installation Process
KB5079473 follows Microsoft's standard cumulative update installation process. The update is delivered automatically through Windows Update for consumer systems and can be deployed through enterprise management tools for business environments.
Automatic Installation
For most users, KB5079473 will be installed automatically during the next scheduled Windows Update cycle. The update is classified as Important, meaning it will be downloaded and installed without user intervention on systems with automatic updates enabled.
Manual Installation
Users who prefer manual control over updates can download KB5079473 from the Microsoft Update Catalog. The standalone installer allows for immediate installation without waiting for the automatic update cycle.
Enterprise Deployment
Enterprise administrators can deploy KB5079473 through established update management infrastructure including WSUS, SCCM, and Microsoft Intune. The update supports standard deployment scenarios including staged rollouts and testing groups.
System Requirements and Prerequisites
Before installing KB5079473, ensure your system meets the following requirements:
- Operating System: Windows 10 version 22H2 (build 19045.4046 or later) or Windows 11 version 22H2/23H2/24H2 (build 22621.3155 or later)
- Prerequisite Updates: February 2026 servicing stack update (KB5078901) must be installed
- Disk Space: Minimum 2 GB free space on the system drive
- Memory: At least 4 GB RAM for Windows 10, 8 GB RAM recommended for Windows 11
- Network: Internet connection required for download and activation verification
Post-Installation Verification
After installing KB5079473, verify the installation was successful by checking the installed updates list:
Get-HotFix -Id KB5079473The command should return installation details including the installation date and description. Additionally, check the Windows Update history in Settings > Update & Security > Windows Update > View update history.
Impact on System Performance
KB5079473 is designed to improve overall system performance, particularly in the following areas:
- Search Performance: Reduced CPU usage during indexing operations
- Graphics Performance: Improved stability and performance in graphics-intensive applications
- Power Management: Better battery life on laptops with modern processors
- Application Responsiveness: Reduced crashes and improved stability in Electron-based applications
Rollback Considerations
While KB5079473 can be uninstalled if necessary, Microsoft recommends keeping the update installed due to the critical security fixes it contains. If system issues occur after installation, consider updating device drivers or contacting hardware manufacturers for compatibility updates before removing the update.
To uninstall KB5079473 if absolutely necessary:
- Open Settings > Update & Security > Windows Update
- Click "View update history"
- Click "Uninstall updates"
- Select KB5079473 and click "Uninstall"
- Restart the system when prompted
Frequently Asked Questions
What does KB5079473 resolve?
Which systems require KB5079473?
Is KB5079473 a security update?
What are the prerequisites for KB5079473?
Are there known issues with KB5079473?
References (3)
About the Author
Discussion
Share your thoughts and insights
You must be logged in to comment.
Related KB Articles

KB5084597 — March 2026 Out-of-Band Hotpatch Security Update
KB5084597 is an out-of-band hotpatch security update released March 13, 2026, addressing critical vulnerabilities in Windows 11 Version 24H2 and 25H2 systems for both x64 and ARM64 architectures.

KB5078752 — March 2026 Security Update for Windows 10 Version 1809 and Windows Server 2019
KB5078752 is a March 2026 security update that addresses multiple vulnerabilities in Windows 10 Version 1809 and Windows Server 2019, including fixes for Windows Kernel, Remote Desktop Services, and Windows Graphics components.

KB5079420 — March 2026 Hotpatch Security Update for Windows 11
KB5079420 is a March 2026 hotpatch security update that addresses critical vulnerabilities in Windows 11 Version 24H2 and 25H2 systems, delivering security fixes without requiring a system restart.

KB5079466 — March 2026 Cumulative Update for Windows 11 Version 26H1
KB5079466 is a March 2026 cumulative update that addresses security vulnerabilities and system stability issues in Windows 11 Version 26H1, updating systems to OS Build 28000.1719.