Microsoft Out-of-Band Update KB5078127 Fixes Windows 11 Cloud File Access and Outlook PST Freezes
Microsoft released a second January out-of-band Windows update, KB5078127, to remediate issues introduced by the January Patch Tuesday security update (KB5074109) that disrupted cloud-backed workflows on Windows 11. Reported impacts included applications being unable to open or save files to cloud storage providers such as OneDrive and Dropbox, with a common enterprise failure mode involving Outlook hanging when PST files were stored on OneDrive; users often had to terminate processes or reboot to recover.
KB5078127 is a cumulative OOB release that rolls up prior January fixes, including the earlier out-of-band update (KB5077744) and the security/quality improvements from KB5074109, and it also includes a bundled Servicing Stack Update (KB5071142) intended to improve update reliability. The update is available via Windows Update and the Microsoft Update Catalog; organizations with automatic updates enabled should receive it automatically, while IT teams can expedite deployment through standard Windows update management workflows.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
4 events from the most recent confirmed update back to the earliest known activity.
Microsoft releases emergency update KB5078127 for file system and Outlook freezes
On January 26, 2026, Microsoft released out-of-band cumulative update KB5078127 to fix file system compatibility bugs introduced by KB5074109. The update addressed application freezes, cloud storage failures involving OneDrive and Dropbox, and Outlook hangs when PST files were stored on OneDrive, while also including prior January security and quality fixes.
Microsoft investigates Windows boot failures tied to January updates
By January 26, 2026, Microsoft was investigating another issue linked to the January Windows updates that could leave some Windows 11 24H2 and 25H2 systems unable to boot, showing a black screen and an UNMOUNTABLE_BOOT_VOLUME stop code. Affected devices could require manual recovery through Windows Recovery.
Microsoft releases OOB update KB5077744 for cloud PC remote connection issues
On January 17, 2026, Microsoft issued an out-of-band update, KB5077744, to address problems with remote connections to Windows Cloud devices and Secure Launch. This fix was later bundled into a subsequent emergency update.
Microsoft ships January Patch Tuesday update KB5074109
On January 13, 2026, Microsoft released security update KB5074109 for Windows 11. The update later proved to introduce file system compatibility problems affecting cloud storage workflows and Outlook PST files stored on OneDrive.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
3 references tracked. Mallory keeps watching after this page renders.
Microsoft issues second emergency patch for Windows this month - update your PC today | ZDNET
zdnet.com
Open sourceMicrosoft Releases Out-of-Band Update KB5078127 to Fix Windows 11 File System and Outlook Freezes
cybersecuritynews.com
Open sourceMicrosoft releases second out-of-band fix for Windows in a week | CSO Online
csoonline.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Windows 11 January Security Update KB5074109 Triggers Widespread Stability and Remote Desktop Issues
Microsoft’s January 2026 Patch Tuesday release for Windows 11 (notably **KB5074109** for 24H2/25H2) delivered roughly 100+ security fixes (including reported **zero-days**) but also introduced significant reliability regressions. Reported impacts include **system lockups**, **black screens** on systems with Nvidia/AMD GPUs, graphics-related hangs in GPU/DirectX-intensive applications, and application failures such as **Outlook Classic** freezing or failing to launch; additional issues were reported with File Explorer behavior and cloud-backed storage workflows (e.g., OneDrive/Dropbox) causing apps to become unresponsive when saving or syncing data.
Mar 21, 2026
Microsoft 365 Service Incident and Separate Windows/Outlook Update Issues
Microsoft reported a service incident impacting **Microsoft 365** core services, with users experiencing connectivity issues and service degradation across **Exchange Online**, **Microsoft Teams**, and the broader M365 suite. The incident was tracked as `MO1220495`, with Microsoft stating it was still in the *investigating/diagnostic* phase and providing no estimated time to resolution; organizations were directed to monitor the Microsoft 365 Service Health Dashboard for tenant-specific impact details. Separately, Microsoft published guidance for a client-side stability issue where the classic **Outlook desktop** app can freeze/hang after installing recent Windows security updates (notably `KB5074109`, and also `KB5073724`), particularly affecting POP accounts and scenarios where Outlook `PST` files are stored on cloud-backed storage such as **OneDrive**. Recommended mitigations included using webmail, moving `PST` files off OneDrive, or uninstalling the problematic updates while Microsoft investigates. A third item describing “Microsoft data breach” and “zero-day vulnerabilities” is largely a repackaged Patch Tuesday/vulnerability roundup and does not substantively align with the M365 service incident or the Outlook-freeze regression.
Mar 21, 2026
Microsoft January Windows Updates Trigger Patch-Break-Patch Cycle and Emergency OOB Fixes
Microsoft’s January Windows security updates triggered an unusual **patch-break-patch** cycle that forced multiple out-of-band (OOB) releases after users reported significant regressions. Reporting indicates the Jan. 13 Patch Tuesday update (including `KB5074109`) was followed by an urgent Jan. 17 fix that introduced additional problems, leading to a second emergency OOB update on Jan. 24; impacts cited include Remote Desktop sign-in/authentication failures and broader stability issues such as Outlook freezing and file-system/compatibility problems affecting OneDrive and Dropbox integrations. Microsoft advised customers to move to the latest available update despite the disruption. Separate analysis highlighted that Windows’ long-standing commitment to **backwards compatibility** continues to create persistent exposure and operational risk: many exploited-in-the-wild Microsoft zero-days in 2025 were **elevation-of-privilege** issues rooted in legacy components, reinforcing that “traditional” exploit chains and accumulated Windows tech debt remain a primary driver of both security and patching complexity. Taken together, the coverage underscores that Windows defenders face a dual challenge: rapid deployment of security fixes to reduce exploitation risk, while managing the real possibility that emergency remediation can itself introduce enterprise-impacting outages.
Mar 21, 2026