Microsoft has released an out-of-band hotpatch update, designated KB5084597, to address three critical remote code execution vulnerabilities affecting the Windows Routing and Remote Access Service (RRAS) management tool. This emergency update was made available on March 13, 2026, specifically targeting Windows 11 Enterprise devices enrolled in the hotpatch program.

The vulnerabilities, tracked as CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111, pose significant risks to users, prompting Microsoft’s swift action. The hotpatch update allows for in-memory patching of running processes, enabling immediate application of the fixes without requiring a system restart.

This update applies to Windows 11 versions 24H2 and 25H2, as well as Windows 11 Enterprise LTSC 2024. KB5084597 is cumulative and includes all fixes from the March 2026 security update, ensuring that users receive comprehensive protection against these vulnerabilities.

Only devices enrolled in the hotpatch update program and managed through Windows Autopatch will receive this specific update. For devices not enrolled in the program, the necessary fixes were provided through the standard March 10 Patch Tuesday update.

Microsoft emphasized that this approach is designed for mission-critical devices where unplanned reboots are not practical. As a result, the hotpatch mechanism allows for seamless updates, minimizing disruption to users.

In a statement, Microsoft noted that “no action is required for PCs receiving standard Windows updates,” indicating a streamlined process for most users. This rapid response to the RRAS vulnerabilities demonstrates a commitment to keeping Windows users safe from potential threats.

As cybersecurity threats continue to evolve, timely updates such as this one are crucial for maintaining the integrity and security of operating systems. Microsoft’s proactive measures reflect an ongoing effort to address vulnerabilities and protect its user base.

Details remain unconfirmed regarding the extent of the vulnerabilities’ exploitation prior to the update’s release, but the urgency of the situation underscores the importance of regular software updates.

The post Microsoft Windows 11 Emergency Update Released to Address Vulnerabilities appeared first on newscasino.

Google has addressed 129 vulnerabilities in the Android operating system through its March 2026 Android Security Bulletin. Among these, a severe bug identified as CVE-2026-21385, affecting over 230 Qualcomm chipset models, is currently being exploited in targeted attacks.

The CVE-2026-21385 vulnerability allows malicious applications to manipulate memory, potentially leading to serious exploits. To exploit this vulnerability, attackers must trick users into installing a malicious app, raising concerns about user awareness and security practices.

In addition to addressing critical vulnerabilities, Google’s March 2026 update for Pixel devices includes 63 security issues resolved in the first bulletin and 66 additional fixes in a second bulletin. This comprehensive update carries the build number CP1A.260305.016 and is available for a wide range of Pixel devices.

Devices receiving the update include the Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8 series, Pixel 9 series, Pixel 10 series, and Pixel 10a. This extensive rollout underscores Google’s commitment to maintaining device security and performance.

The update not only focuses on security but also includes stability improvements addressing audio behavior, camera reliability, and display performance. Additionally, battery reporting errors have been resolved on Pixel 10 devices, particularly when using wireless charging.

Overall, the March 2026 Android Security Bulletin highlights the ongoing efforts by Google to enhance the security and reliability of its operating system and devices. Observers expect that continued vigilance will be necessary as vulnerabilities evolve and new threats emerge.

As the landscape of cybersecurity continues to change, the importance of timely updates and user education cannot be overstated. The steps taken by Google in this bulletin reflect a proactive approach to safeguarding users against potential threats.

Details remain unconfirmed regarding the full impact of the CVE-2026-21385 vulnerability and the effectiveness of the measures taken in this update.

The post Android security bulletin: March 2026 Update appeared first on newscasino.