Microsoft Configuration Manager
General38982839
In brief
The documentation now states that the update is included in the Configuration Manager 2603 update rollup and that a separate out-of-band hotfix is not required after installing the rollup.
What Intune admins need to know
Administrators can avoid planning a separate hotfix installation when the update rollup is installed.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- hugowu
- qiani
description: Security update for the SMS Provider and administration service
ms.date: 2026-
08-17T00:09-07T00:00:00.0000000Z ms.subservice: core-infra ms.topic: reference locale: en-us - An issue with the SMS Provider. This update addresses the elevation of privilege vulnerability described in CVE-2026-88075.
- An issue with the administration service. This is a defense-in-depth fix related to a Windows SMB Server issue, addressed separately by CVE-2026-26128. We strongly recommend that you also install the applicable Windows security update.
Note
For Configuration Manager version 2603, this update is included with the update rollup for Configuration Manager version 2603 KB 39169655. A separate out of band hotfix isn't required after you install the update rollup.
Hotfixes that are included in this update
For Configuration Manager version 2503:
Release history
- September 2026: Added inclusion information for KB 39169655
- August 2026: Initial hotfix release
- August 2026: Added supersedence information for KB 39398030
@@ -17,7 +17,7 @@ ms.reviewer: - hugowu - qiani description: Security update for the SMS Provider and administration service-ms.date: 2026-08-17T00:00:00.0000000Z+ms.date: 2026-09-07T00:00:00.0000000Z ms.subservice: core-infra ms.topic: reference locale: en-us@@ -62,6 +62,10 @@ This update fixes the following security issues in Configuration Manager: - An issue with the SMS Provider. This update addresses the elevation of privilege vulnerability described in [CVE-2026-88075](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075).
- An issue with the administration service. This is a defense-in-depth fix related to a Windows SMB Server issue, addressed separately by [CVE-2026-26128](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26128). We strongly recommend that you also install the applicable Windows security update.
+Note
+
+For Configuration Manager version 2603, this update is included with the update rollup for Configuration Manager version 2603 [KB 39169655](39169655). A separate out of band hotfix isn't required after you install the update rollup.
+
## Hotfixes that are included in this update
For Configuration Manager version 2503:
@@ -103,6 +107,7 @@ File information is available in the following downloadable text files:
## Release history
+- September 2026: Added inclusion information for KB 39169655
- August 2026: Initial hotfix release
- August 2026: Added supersedence information for KB 39398030