KB5078943 — Service Update 1.44 for Microsoft Dynamics 365 (on-premises) 9.0

Overview

KB5078943 is Service Update 1.44 for Microsoft Dynamics 365 (on-premises) version 9.0, released in April 2026. This comprehensive update addresses critical security vulnerabilities, improves system performance, and enhances overall platform stability. The update is essential for maintaining security compliance and optimal system performance in enterprise environments.

Security Enhancements

This service update includes fixes for two critical security vulnerabilities that could potentially compromise system security:

CVE-2026-0847 addresses an authentication bypass vulnerability in the web application layer. Attackers could exploit this vulnerability by sending specially crafted API requests to bypass authentication mechanisms and gain unauthorized access to organization data. The fix implements enhanced input validation and strengthens authentication token verification processes.

CVE-2026-0848 resolves a privilege escalation vulnerability in the plugin execution framework. This vulnerability could allow standard users to execute code with administrative privileges through malicious plugin configurations. The update introduces improved security context isolation and enhanced validation of plugin registration parameters.

Performance Improvements

KB5078943 delivers significant performance enhancements across multiple system components. Database operations receive substantial optimization through improved SQL query execution plans and enhanced connection pooling mechanisms. Organizations can expect up to 35% improvement in response times for common CRM operations, particularly during high-volume data processing scenarios.

The update also addresses memory management issues that previously caused gradual performance degradation over time. Enhanced garbage collection routines and optimized memory allocation patterns ensure consistent performance during extended system operation periods.

Web Client Stability

Web client stability receives major improvements through resolution of JavaScript memory leaks and enhanced event handler management. These fixes prevent browser crashes during extended user sessions and eliminate unresponsive interface elements that previously required page refreshes to resolve.

Compatibility with modern web browsers is enhanced, ensuring optimal performance with the latest versions of Chrome, Edge, Firefox, and Safari. The update also includes improvements to the client-side caching mechanism, resulting in faster page load times and reduced server load.

Workflow and Plugin Enhancements

Background processing reliability is significantly improved through enhanced error handling and retry logic for workflow operations. The update increases default timeout values for long-running processes and implements better isolation between plugin executions to prevent cascading failures.

Asynchronous job processing receives updates to eliminate race conditions that could cause duplicate job executions or incomplete processing. These improvements ensure more reliable automation and reduce the need for manual intervention in workflow management.

Installation Requirements

Before installing KB5078943, administrators must ensure their environment meets the following prerequisites:

• Microsoft Dynamics 365 (on-premises) version 9.0 with minimum build 9.0.2.0000
• Windows Server 2016 or later with current security updates
• SQL Server 2016 SP2 or SQL Server 2019 with latest cumulative updates
• Minimum 2 GB available disk space on the system drive
• Administrative privileges for the installation account

The installation process requires stopping all Dynamics 365 services and may take 30-60 minutes depending on system configuration and database size. A system restart is required to complete the installation.

Deployment Considerations

For enterprise environments, administrators should plan the deployment carefully to minimize business impact. The update can be deployed using automated tools such as System Center Configuration Manager or Windows Server Update Services for large-scale implementations.

Testing in a development or staging environment is strongly recommended before production deployment, particularly for organizations with extensive customizations or third-party integrations. Custom plugins and workflows should be thoroughly tested to ensure compatibility with the updated platform components.

Post-Installation Verification

After successful installation, administrators should verify the update using the following methods:

• Check the system version using the Get-CrmVersion PowerShell cmdlet
• Review the Windows Event Log for any installation-related errors
• Verify that all Dynamics 365 services are running properly
• Test critical business processes to ensure functionality
• Monitor system performance for the first 24-48 hours after installation