April 19, 2026—Hotpatch KB5091576 (OS Build 20348.5029) Out-of-band

Improvements and fixes

The following summary outlines key issues addressed by this out-of-band update. The bold text within the brackets indicates the item or area of the change.

• [Domain controllers (known issue)] Fixed: After installing the April 14, 2026, (KB5082142) Windows security update and restarting, domain controllers with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might stop responding, leading to repeated restarts, and preventing authentication and directory services, which can make the domain unavailable.
  
  Note: The update is only offered to devices that already installed KB5082142.

If you've already installed previous updates, your device will download and install only the new updates included in this package.

To view the latest updates about this release, visit the Windows release health dashboard or the update history page for Windows Server 2022. 

Known issues in this update

How to get this update

Before you install this update

Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Hotpatch update. For general information about SSUs, see Servicing stack updates.

If you are using Windows Update or Windows Server Update Services (WSUS), the latest SSU installs with this update.

Install this update

To install this update, use one of the following Windows and Microsoft release channels.

File information

For a list of the files provided in this update, download the file information for cumulative update 5091576.

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5082137) - version 20348.5021.