Full Report
Microsoft has released an emergency update to address a major issue that breaks sign-ins with Microsoft accounts across multiple Microsoft apps, including Teams and OneDrive. [...]
Analysis Summary
# Vulnerability: Microsoft Account Authentication Failure (Internet Connectivity Bug)
## CVE Details
*Note: This specific issue is categorized as a functional regression/bug and has not been assigned a CVE identifier for security vulnerability, as it primarily impacts availability and service access.*
- **CVE ID:** N/A (Functional Regression)
- **CVSS Score:** N/A
- **CWE:** CWE-404: Improper Resource Shutdown or Release (Internal logic failure causing service denial)
## Affected Systems
- **Products:** Windows 11
- **Versions:** Versions 24H2 and 25H2
- **Configurations:** Systems that installed the March 2026 Patch Tuesday cumulative update (KB5079473) and utilize **Microsoft Accounts** (MSA).
- **Note:** This issue does **not** affect businesses using Entra ID (formerly Azure Active Directory).
## Vulnerability Description
Following the installation of update KB5079473, a logic flaw in the Windows authentication component causes Microsoft account sign-in attempts to fail. The system incorrectly reports a lack of internet connectivity, returning the error: *"You'll need the Internet for this. It doesn't look like you're connected to the Internet."* This occurs even when the underlying network connection is stable. The flaw breaks the authentication handshake between local applications and Microsoft identity servers.
## Exploitation
- **Status:** Not exploited (Functionality bug)
- **Complexity:** Low (Triggered by standard user sign-in)
- **Attack Vector:** Local (Triggered by software update installation)
## Impact
- **Confidentiality:** None
- **Integrity:** None
- **Availability:** High (Prevents access to core productivity tools including Teams, OneDrive, Microsoft 365 Copilot, Edge, Word, and Excel)
## Remediation
### Patches
- **KB5085516:** An emergency Out-of-Band (OOB) update released on March 21, 2026.
- Deployment: Available via Windows Update or the Microsoft Update Catalog.
### Workarounds
- **System Restart:** Microsoft suggests that restarting the PC may temporarily resolve the connectivity check failure for some users.
- **Update Rollback:** If the OOB update cannot be applied, users can uninstall the March Patch Tuesday update (KB5079473), though this will also remove security patches included in that bundle.
## Detection
- **Indicators:**
- Error message: "You'll need the Internet for this" during sign-in.
- Error Code: `Safe-Location-8839`.
- **Detection Methods:**
- Monitor Event Viewer for authentication failures originating from Microsoft Account providers.
- Verify Windows version and installed KBs using `systeminfo` or `Get-HotFix`.
## References
- **Microsoft Release Health:** [https[://]learn.microsoft.com/en-us/windows/release-health/status-windows-11-25h2]
- **Microsoft Support KB:** [https[://]support.microsoft.com/help/5085516]
- **BleepingComputer Technical Report:** [https[://]www.bleepingcomputer.com/news/microsoft/new-kb5085516-emergency-update-fixes-microsoft-account-sign-in/]