The Update BureauKB5089548: Cumulative update for Windows 11, version 26H1, May 2026. Critical DNS and graphics flaws addressed
The update addresses 62 security vulnerabilities, including four critical ones, and improves network-device discovery and compatibility in some games.
Does it affect you? Applies to: Devices running Windows 11, version 26H1, on x64 or Arm64. The AI component updates apply only to Copilot+ PCs.
What changes
Improvements 4 changes
Connectivity
-
Notifications used to discover devices on a network are more reliable, helping prevent the service from becoming unresponsive.1
Improves Simple Service Discovery Protocol (SSDP) notification reliability.
Gaming
- Some games that use embedded web content have improved compatibility, and JavaScript errors have less impact on in-game features.2
AI components
-
AI component updates apply only to Copilot+ PCs.3
Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2603.377.0.
Servicing stack
-
The component that installs Windows updates receives quality improvements.4
Includes servicing stack update KB5092761, build 28000.2103.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-05-12
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5083806, KB5083768, KB5079489, KB5079466
- Replaced by
- KB5095051
| Version | Build | Channel |
|---|---|---|
| 26H1 | 28000.2113 | General availability |
| 26H1 | 28000.2113 | Release Preview Channel |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Windows DNS Client Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Windows Graphics Component Remote Code Execution Vulnerability
|
Critical | 8.8 |
|
Windows GDI Remote Code Execution Vulnerability
|
Critical | 7.8 |
|
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
|
Critical | 7.5 |
The table lists the 4 exploited, publicly disclosed or critical vulnerabilities. See all 62 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
1,787 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 36 |
| Networking | 17 |
| Printing | 10 |
| File Explorer and shell | 5 |
| Kernel | 5 |
| Remote Desktop | 5 |
| Storage and file systems | 4 |
| Hyper-V and virtualization | 3 |
| Secure Boot | 3 |
| Audio | 2 |
| Security and sign-in | 2 |
| Settings | 2 |
Verified in package: changed files confirm AI components.
Sources
Cited passages from Microsoft's official notes (4)
-
1.
This update improves the reliability of Simple Service Discovery Protocol (SSDP) notifications to help prevent the service from becoming unresponsive.
support.microsoft.com -
2.
This update improves compatibility for some games that use embedded web content and helps reduce the impact of JavaScript errors on in‑game features.
support.microsoft.com -
3.
| Image Search | 1.2603.377.0 | | Content Extraction | 1.2603.377.0 | | Semantic Analysis | 1.2603.377.0 | | Settings Model | 1.2603.377.0 |
support.microsoft.com -
4.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake