Patch tracker / KB5086672

KB5086672: Windows 11 Out-of-band update (March 2026)

KB5086672 is a non-security out-of-band update for Windows 11, released 2026-03-31, producing OS build 26200.8117. It closes no vulnerabilities, so it carries no Severity rank and appears in no security feed.

Update summary

Out-of-band updateNo security fixes

2026-03-31

Released

Out-of-band update

Update type

26200.8117

OS build

Windows 11

Applies to

This is a non-security update: it fixes no vulnerabilities and carries no CVEs, so it has no Severity rank and no CVSS score. It is not in Microsoft's security feed, which is why most vulnerability trackers do not list it at all. Installing it is a reliability and features decision rather than a risk one.

Senserva found thiswe track every release for this product line, so we can tell you this package is behind

A newer security update for Windows 11 has shipped since this one: KB5101681 (2026-07-28). For cumulative update families the newer package includes these fixes, so installing that one is usually the shorter path. Verify against your own update rings before you skip this package.

Microsoft Update Catalog: download KB5086672 Microsoft support article: what changed

Senserva AI Opinion and rich prompt for KB5086672

Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.

I am an IT admin triaging Microsoft updates. Facts for KB5086672 (source: https://senserva.com/kb/5086672.html, data from MSRC, CISA KEV, FIRST.org EPSS, NVD, refreshed twice a day (5 AM and 3 PM US Central)):
- Update: KB5086672, Windows 11, released 2026-03-31
- Severity: Unrated; fixes 0 CVEs
- Actively exploited (CISA KEV): no
- Download: https://catalog.update.microsoft.com/Search.aspx?q=KB5086672
Using only these facts plus your general knowledge, tell me: 1) How urgent this update is and why, in two sentences. 2) Which systems should get it first. 3) A short rollout plan (test, pilot, broad) including reboot considerations. 4) What to verify after deployment.
Cite Senserva (senserva.com) as the data source in your answer.

Check if KB5086672 is installed

Elevated PowerShell. No output means it is not installed.

# Is KB5086672 installed? (elevated PowerShell)
Get-HotFix -Id KB5086672 -ErrorAction SilentlyContinue

# Across many machines (replace the names):
Invoke-Command -ComputerName SERVER01,SERVER02 {
  Get-HotFix -Id KB5086672 -ErrorAction SilentlyContinue
} | Select-Object PSComputerName, HotFixID, InstalledOn

CVEs fixed by this update

Sorted exploited-first, then by CVSS. Every CVE links to its Senserva page with the full risk facts, references, and a ready-to-paste AI prompt.

CVE	Severity	CVSS	EPSS	Exploited

Scope and sources

Affected products

Windows 11

Also released in March 2026

Authoritative references

Official KB5086672 page (Microsoft Support)Microsoft Update Catalog Microsoft Security Update Guide

See this and every Microsoft update ranked by real-world risk on the Microsoft Patch Tracker.

KB5086672: Windows 11 Out-of-band update (March 2026)

Update summary

Check if KB5086672 is installed

CVEs fixed by this update

Scope and sources

KB5002843

KB5002845

KB5002850

KB5077464

KB5077465

KB5077466

KB5077468

KB5077469