Microsoft Configuration Manager
General39398030
In brief
The documentation now states that KB 39169655 includes this update for Configuration Manager 2603, so a separate out-of-band hotfix isn't required after installing the rollup.
What Intune admins need to know
Administrators can use the update rollup instead of deploying a separate hotfix.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- hugowu
- qiani
description: Security update for scripts, the SMS Provider, the Message Processing Engine, and Discovery Data Record processing
ms.date: 2026-
08-27T00:10-13T00:00:00.0000000Z ms.subservice: core-infra ms.topic: reference locale: en-us - An issue with the Message Processing Engine. This update addresses the elevation of privilege vulnerability described in CVE-2026-70049.
- An issue with Discovery Data Record (DDR) processing.
Note
For Configuration Manager version 2603, this update is included with the update rollup for Configuration Manager version 2603 KB 39169655. A separate out of band hotfix isn't required after you install the update rollup.
Hotfixes that are included in this update
- KB 38982839: Security update for the SMS Provider and administration service
Release history
- October 2026: Added inclusion information for KB 39169655
- August 2026: Initial hotfix release
References
@@ -17,7 +17,7 @@ ms.reviewer: - hugowu - qiani description: Security update for scripts, the SMS Provider, the Message Processing Engine, and Discovery Data Record processing-ms.date: 2026-08-27T00:00:00.0000000Z+ms.date: 2026-10-13T00:00:00.0000000Z ms.subservice: core-infra ms.topic: reference locale: en-us@@ -58,6 +58,10 @@ This update supersedes [KB 38982839](38982839) and [KB 38232642](38232642) and i - An issue with the Message Processing Engine. This update addresses the elevation of privilege vulnerability described in [CVE-2026-70049](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049).
- An issue with Discovery Data Record (DDR) processing.
+Note
+
+For Configuration Manager version 2603, this update is included with the update rollup for Configuration Manager version 2603 [KB 39169655](39169655). A separate out of band hotfix isn't required after you install the update rollup.
+
## Hotfixes that are included in this update
- KB [38982839](38982839): Security update for the SMS Provider and administration service
@@ -102,6 +106,7 @@ File information is available in the following downloadable text files:
## Release history
+- October 2026: Added inclusion information for KB 39169655
- August 2026: Initial hotfix release
## References