Loading story…
Microsoft released out-of-band hotpatch KB5084897 to fix a Windows 11 Enterprise bug that caused connected Bluetooth devices to disappear from Settings and Quick Settings even though the devices remained operational. The issue affected Windows 11 24H2 and 25H2 systems enrolled in the hotpatch program, and it also prevented users from pairing new Bluetooth devices because available hardware did not appear in the connection list.
The update installs automatically in the background and does not require a reboot, reflecting Microsoft’s use of hotpatch delivery for eligible enterprise devices. Reporting indicates the fix is limited to hotpatch-enabled Enterprise systems rather than devices on standard cumulative updates, and Microsoft positioned it as an emergency release to quickly restore normal Bluetooth management functionality after a disruptive user-interface failure.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
On 2026-03-16, Microsoft released out-of-band update KB5084897 to fix a Windows 11 24H2/25H2 bug that caused connected Bluetooth devices to disappear from Settings and Quick Settings. The issue also blocked discovery and pairing of new Bluetooth devices, and the hotpatch was delivered without requiring a reboot on eligible hotpatch-enabled systems.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
zdnet.fr
Open sourceghacks.net
Open sourcecybersecuritynews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released the out-of-band **KB5084597** hotpatch for Windows 11 Enterprise hotpatch-enabled systems to address three vulnerabilities in the **Windows Routing and Remote Access Service (RRAS) management tool**: `CVE-2026-25172`, `CVE-2026-25173`, and `CVE-2026-26111`. The flaws can be exploited when a user or administrator connects the RRAS snap-in or management tool to an attacker-controlled or malicious server, creating a path for **remote code execution** and, in some scenarios, service disruption or denial of service. Microsoft said the issue affects a limited set of enterprise client scenarios involving remote server management on domain-joined devices. The hotpatch applies to Windows 11 versions **24H2**, **25H2**, and Windows 11 Enterprise LTSC 2024 systems configured to receive hotpatches, and it is designed to install **without requiring a reboot**. Reporting indicates the vulnerabilities were already addressed in the March 2026 Patch Tuesday cumulative updates, but Microsoft issued the OOB hotpatch to protect systems that cannot be easily restarted, including mission-critical enterprise devices. The update is cumulative and includes the March security fixes, giving organizations a faster mitigation path for exposed RRAS management environments.
Jun 29, 2026
Microsoft released the mandatory Windows 11 cumulative update **KB5101650** for versions **25H2** and **24H2**, alongside **KB5099414** for **23H2**, as part of its latest Patch Tuesday rollout. The update advances Windows 11 builds to **26200.8875** and **26100.8875** for 25H2 and 24H2 and includes fixes for **571 vulnerabilities**, with security-critical items such as continued **Secure Boot** certificate deployment delivered in the normal rollout phase. Microsoft said 25H2 and 24H2 receive the same package because both are based on 24H2, and no new known issues were acknowledged for the release. Beyond security fixes, KB5101650 adds and expands several user-facing and reliability improvements, including broader availability of **Point-in-time restore**, the new accessibility feature **Screen Tint**, quieter **Widgets**, and more flexible update pausing. Microsoft also addressed Bluetooth pairing and audio issues, including improvements for AirPods and call handling, while fixing problems affecting **File Explorer** performance, `explorer.exe` stability, Recycle Bin file naming, taskbar badges, networking in virtualized environments, **WSL** VPN connectivity, printing, **BITS** shutdown delays, and GIF support in the emoji panel after a switch from Tenor to **GIPHY**. The update is being distributed automatically through Windows Update and is also available as an offline `.msu` installer through the Microsoft Update Catalog.
Jul 17, 2026
Microsoft released Windows 11 cumulative update **KB5089573** to permanently fix an installation bug introduced by **KB5089549** that caused some systems running versions **24H2** and **25H2** to fail during reboot. Affected devices typically stalled at about **35–36%** completion, rolled back the update, and returned error `0x800f0922`, with logs indicating insufficient free space in the **EFI System Partition (ESP)**. Microsoft had already applied a Known Issue Rollback and provided a registry-based workaround for enterprise administrators before issuing the permanent fix. The update raises Windows 11 builds to **26100.8524** and **26200.8524**, includes servicing stack and AI component updates, and is available through **Windows Update**, **Microsoft Update Catalog**, **Windows Update for Business**, and **WSUS**. Microsoft said no known issues were identified at release and indicated that the fix will also be included in subsequent cumulative updates, reducing the need for users and administrators to manually resize the ESP or remove security updates.
Jun 29, 2026