Patch tracker / KB5078136

KB5078136: Windows Server Out-of-band update (January 2026)

KB5078136 is a non-security out-of-band update for Windows Server, released 2026-01-24, producing OS build 20348.4651. It closes no vulnerabilities, so it carries no Severity rank and appears in no security feed.

Update summary

Out-of-band updateNo security fixes

2026-01-24

Released

Out-of-band update

Update type

20348.4651

OS build

Windows Server

Applies to

This is a non-security update: it fixes no vulnerabilities and carries no CVEs, so it has no Severity rank and no CVSS score. It is not in Microsoft's security feed, which is why most vulnerability trackers do not list it at all. Installing it is a reliability and features decision rather than a risk one.

Senserva found thiswe track every release for this product line, so we can tell you this package is behind

A newer security update for Windows Server has shipped since this one: KB5091157 (2026-04-19). For cumulative update families the newer package includes these fixes, so installing that one is usually the shorter path. Verify against your own update rings before you skip this package.

Microsoft Update Catalog: download KB5078136 Microsoft support article: what changed

Senserva AI Opinion and rich prompt for KB5078136

Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.

I am an IT admin triaging Microsoft updates. Facts for KB5078136 (source: https://senserva.com/kb/5078136.html, data from MSRC, CISA KEV, FIRST.org EPSS, NVD, refreshed twice a day (5 AM and 3 PM US Central)):
- Update: KB5078136, Windows Server, released 2026-01-24
- Severity: Unrated; fixes 0 CVEs
- Actively exploited (CISA KEV): no
- Download: https://catalog.update.microsoft.com/Search.aspx?q=KB5078136
Using only these facts plus your general knowledge, tell me: 1) How urgent this update is and why, in two sentences. 2) Which systems should get it first. 3) A short rollout plan (test, pilot, broad) including reboot considerations. 4) What to verify after deployment.
Cite Senserva (senserva.com) as the data source in your answer.

Check if KB5078136 is installed

Elevated PowerShell. No output means it is not installed.

# Is KB5078136 installed? (elevated PowerShell)
Get-HotFix -Id KB5078136 -ErrorAction SilentlyContinue

# Across many machines (replace the names):
Invoke-Command -ComputerName SERVER01,SERVER02 {
  Get-HotFix -Id KB5078136 -ErrorAction SilentlyContinue
} | Select-Object PSComputerName, HotFixID, InstalledOn

CVEs fixed by this update

Sorted exploited-first, then by CVSS. Every CVE links to its Senserva page with the full risk facts, references, and a ready-to-paste AI prompt.

CVE	Severity	CVSS	EPSS	Exploited

Scope and sources

Affected products

Windows Server

Also released in January 2026

Authoritative references

Official KB5078136 page (Microsoft Support)Microsoft Update Catalog Microsoft Security Update Guide

See this and every Microsoft update ranked by real-world risk on the Microsoft Patch Tracker.

KB5078136: Windows Server Out-of-band update (January 2026)

Update summary

Check if KB5078136 is installed

CVEs fixed by this update

Scope and sources

KB5002822

KB5002825

KB5002828

KB5073379

KB5073450

KB5073455

KB5073457

KB5073722