Skip to the content
The Update Bureau
Windows 11 23H2 Windows 11 23H2 Security update
Patch Tuesday

KB5078883

KB5078883: Cumulative update for Windows 11, version 23H2, March 2026. Secure Boot coverage expands; File History handles more filenames

In short

The update addresses 41 Important-severity vulnerabilities and broadens the rollout of new Secure Boot certificates. It also improves File History backups and stability for some graphics configurations.

Does it affect you? Applies to: Devices running Windows 11, version 23H2, on x64 or Arm64.

Build
22631.6783
Security
41 fixed
Restart
Required

What changes

Improvements 7 changes

Secure Boot

Gradual rollout Verified in package
  • More eligible devices can receive new Secure Boot certificates automatically, through a controlled, phased rollout.1
    Windows quality updates include additional high confidence device targeting data. New certificates are delivered only after sufficient successful update signals.

File History

  • File History in Control Panel now backs up files with names that include Chinese characters and Private Use Area characters.2

Graphics

2 items
  • Devices with certain GPU configurations shut down more reliably.3
    Improves stability affecting certain GPU configurations.
  • Games and 3D apps run more reliably during intensive graphics use on certain GPU configurations.4
    Improves stability for certain GPU configurations during intensive graphics use.

Texts and Fonts

  • Windows fonts include the new Saudi Riyal currency symbol.5

Windows System Image Manager

  • A warning dialog helps you confirm that a catalog file you select comes from a trusted source.6
    Improves the reliability of choosing trusted catalog files.

Servicing stack

  • The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates reliably.7
    Includes servicing stack update KB5079275, build 22621.6773.

New feature 1 change

Secure Boot

Verified in package
  • Two new PowerShell features help you check Secure Boot keys and certificates and whether your device follows the latest Secure Boot policy.8
    Get-SecureBootUEFI supports the -Decoded option to display keys and certificates in a readable format. Get-SecureBootSVN reports the Secure Boot Security Version Number of the UEFI firmware and bootloader.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Security

41 vulnerabilities fixed
41 important
VulnerabilitySeverityCVSS

The table lists the 0 exploited, publicly disclosed or critical vulnerabilities. See all 41 vulnerabilities →

Updated components

1,398 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display27
File Explorer and shell14
Networking11
Secure Boot11
Storage and file systems9
Kernel7
Printing6
Security and sign-in6
Hyper-V and virtualization3
Remote Desktop3
Settings3
Audio2

Verified in package: changed files confirm Secure Boot.

Sources

Updated
Cited passages from Microsoft's official notes (8)
  1. 1. With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. support.microsoft.com
  2. 2. Files with names that include Chinese characters and Private Use Area characters now back up successfully, helping keep your files protected and available when you need them. support.microsoft.com
  3. 3. This update improves stability affecting certain GPU configurations, helping devices shut down more reliably. support.microsoft.com
  4. 4. This update improves stability for certain GPU configurations. It helps games and 3D apps run more reliably during intensive graphics use. support.microsoft.com
  5. 5. This update improves Windows fonts by adding the new Saudi Riyal currency symbol. support.microsoft.com
  6. 6. It adds a warning dialog that helps you confirm that the file you select comes from a trusted source. support.microsoft.com
  7. 7. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  8. 8. This update introduces two new PowerShell features to help you manage the ongoing Secure Boot key rollout. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 8 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake