Microsoft has launched an out-of-band (OOB) replace to repair a safety vulnerabilities affecting Home windows 11 Enterprise gadgets that obtain hotpatch updates as an alternative of the common Patch Tuesday cumulative updates.
The KB5084597 hotpatch replace was launched yesterday to repair vulnerabilities within the Home windows Routing and Distant Entry Service (RRAS) administration device that would enable distant code execution when connecting to a malicious server.
“Microsoft has recognized a safety situation within the Home windows Routing and Distant Entry Service (RRAS) administration device that would enable distant code execution when connecting to a malicious server,” reads an advisory from Microsoft.
“This situation solely applies to a restricted set of situations involving Enterprise shopper gadgets operating hotpatch updates and getting used for distant server administration.”
The KB5084597 replace is for Home windows 11 variations 25H2 and 24H2, in addition to Home windows 11 Enterprise LTSC 2024 techniques.
Microsoft says the vulnerabilities fastened by this hotpatch are tracked as CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111, which had been fastened as a part of the March 2026 Patch Tuesday updates.
“An attacker authenticated on the area might exploit this vulnerability by tricking a domain-joined person into sending a request to a malicious server through the Routing and Distant Entry Service (RRAS) Snap-in,” reads the outline for all three flaws.
The corporate says the hotpatch replace is cumulative and consists of all fixes and enhancements from the March 2026 Home windows safety replace launched on March 10.
Whereas the vulnerabilities had been already fastened on Patch Tuesday, putting in cumulative updates requires gadgets to be rebooted. Nevertheless, some gadgets are used for mission-critical functions and companies that can’t be simply rebooted.
To guard most of these gadgets, hotpatch updates apply new vulnerability fixes by performing in-memory patching of operating processes to ship fixes. On the similar time, they replace the recordsdata on disk in order that the subsequent time the gadget reboots, the fixes are nonetheless current.
Microsoft says it beforehand launched hotfixes for these flaws, however re-released them yesterday “guarantee complete protection throughout all affected situations.”
Nevertheless, Microsoft says the hotpatch will solely be supplied to gadgets enrolled within the hotpatch replace program and managed via Home windows Autopatch, the place will probably be put in mechanically with out requiring a restart.
Malware is getting smarter. The Pink Report 2026 reveals how new threats use math to detect sandboxes and conceal in plain sight.
Obtain our evaluation of 1.1 million malicious samples to uncover the highest 10 strategies and see in case your safety stack is blinded.
