The Update BureauKB5079473: Cumulative update for Windows 11, versions 24H2 and 25H2, March 2026. Secure Boot certificate rollout expands; app sign-in can fail
Secure Boot certificate coverage expands, while Microsoft-account sign-in can fail in some apps after installation. File Explorer search and WDAC policy handling also improve.
Does it affect you? Applies to: Devices running Windows 11 versions 25H2 or 24H2 on x64 or Arm64.
What changes
Improvements 9 changes
Secure Boot
For: devices eligible for automatic certificate updates
-
More eligible devices can receive new Secure Boot certificates automatically.1
Windows quality updates add high-confidence device-targeting data. Devices receive certificates only after enough successful update signals.
File Explorer
- Searching across multiple drives or This PC becomes more reliable.2
Windows Defender Application Control
For: devices using WDAC COM object allowlisting policies
-
COM objects allowed by policy work as expected.3
WDAC allows COM objects when the endpoint security policy is set higher than the allowlisting policy.
Windows System Image Manager
For: people choosing catalog files
-
Choosing a trusted catalog file is more reliable.4
A warning dialog helps confirm that a selected catalog file comes from a trusted source.
AI Components
-
Image Search receives an updated version on Copilot+ PCs.5
Version 1.2602.1451.0
-
Content Extraction receives an updated version on Copilot+ PCs.6
Version 1.2602.1451.0
-
Semantic Analysis receives an updated version on Copilot+ PCs.7
Version 1.2602.1451.0
-
Settings Model receives an updated version on Copilot+ PCs.8
Version 1.2602.1451.0
Servicing stack
For: devices receiving this update
-
The component that installs Windows updates receives quality improvements.9
Includes servicing stack update KB5083532, build 26100.8035.
Known issues
-
Signing in with a Microsoft account might fail for Microsoft Teams Free and other apps
Signing in to apps with a Microsoft account might fail, even with a working internet connection. Microsoft lists this as an open issue for this update; Microsoft Entra ID sign-ins are not affected.10
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-03-10
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
-
KB5077241, KB5077181, KB5074105, KB5078127
+44 earlier
KB5077744, KB5074109, KB5072033, KB5070311, KB5068861, KB5067036, KB5070773, KB5066835, KB5065789, KB5068221, KB5065426, KB5064081, KB5063878, KB5062660, KB5064489, KB5062553, KB5060829, KB5063060, KB5060842, KB5058499, KB5061977, KB5058411, KB5055627, KB5059087, KB5055523, KB5053656, KB5053598, KB5052093, KB5051987, KB5050094, KB5050009, KB5048667, KB5046740, KB5046617, KB5044384, KB5044284, KB5043178, KB5043080, KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239 - Replaced by
- KB5085516
| Version | Build | Channel |
|---|---|---|
| 24H2 | 26100.8037 | General availability |
| 25H2 | 26200.8037 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|
The table lists the 0 exploited, publicly disclosed or critical vulnerabilities. See all 41 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
1,127 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 21 |
| Audio | 18 |
| File Explorer and shell | 16 |
| Secure Boot | 8 |
| Networking | 6 |
| Kernel | 5 |
| Security and sign-in | 4 |
| Settings | 4 |
| Storage and file systems | 4 |
| Hyper-V and virtualization | 3 |
| Printing | 3 |
| Bluetooth | 2 |
Verified in package: changed files confirm Secure Boot, AI Components.
Sources
Cited passages from Microsoft's official notes (10)
-
1.
Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals
support.microsoft.com -
2.
This update improves File Explorer search reliability when searching across multiple drives or "This PC".
support.microsoft.com -
3.
With this update, COM objects are allowed as expected.
support.microsoft.com -
4.
This update improves the reliability of choosing trusted catalog files. It adds a warning dialog that helps you confirm that the file you select comes from a trusted source.
support.microsoft.com -
5.
Image Search 1.2602.1451.0
support.microsoft.com -
6.
Content Extraction 1.2602.1451.0
support.microsoft.com -
7.
Semantic Analysis 1.2602.1451.0
support.microsoft.com -
8.
Settings Model 1.2602.1451.0
support.microsoft.com -
9.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
10.
After installing this update, you might experience an issue signing into apps with a Microsoft account. Even when the device has a working internet connection, an error might appear during sign in that indicates a lack of internet connection
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 10 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake