logo

Microsoft confirms April Windows updates cause backup failures

ID: eb2ed1c9-e388-5842-af30-d6016f986bbc

STIX ID: report--eb2ed1c9-e388-5842-af30-d6016f986bbc

Feed Name: Bleeping Computer

Threat Score
60/100

Date Published: 2026-05-04

Date Updated: 2026-05-05

Author: Sergiu Gatlan

...
...

Microsoft's April 2026 security update added the kernel driver psmounterex.sys to its Vulnerable Driver Blocklist to mitigate CVE-2023-43896, a high-severity buffer overflow; as a result, backup products that rely on that driver (including Macrium Reflect, Acronis Cyber Protect Cloud, UrBackup Server, and NinjaOne Backup) may fail to mount or restore image backups on Windows 10/11 and Windows Server systems, with VSS timeouts and Code Integrity (Event ID 3077) entries observed — Microsoft advises installing updated application versions whose drivers include the required protections rather than uninstalling the security update.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.