Security update for scripts, the SMS Provider, the Message Processing Engine, and Discovery Data Record processing - Configuration Manager

What changed

The update supersedes KB38982839 and KB38232642 and includes their fixes. It is offered directly to version 2603 and to versions 2509 and 2503 after their required update rollups are installed.

Technical details

• Script-processing security fix
• SMS Provider and Message Processing Engine security fixes
• Discovery Data Record processing security fix

Why it matters

The corrected components process administrative scripts, provider requests, site messages and discovery records, so affected sites require prompt validation and controlled deployment.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Confirm version 2603, or install the required update rollup for version 2509 or 2503 before applying KB39398030
• Install the update from Updates and Servicing and validate console, SMS Provider, message processing and DDR processing
• Manually recover preexisting secondary sites, then verify their update version matches the parent primary site