KB5089573: Cumulative update for Windows 11, versions 24H2 and 25H2, May 2026. Shared Audio arrives; Secure Boot coverage expands

For: Magnifier users

• Magnifier moves more smoothly in lens mode.¹

• The CPU speed display on Task Manager's Performance page for virtual machines is improved after resuming from hibernation.²
  The display no longer shows higher-than-expected numbers after resuming from hibernate.

• Apps and core features such as Start, Search, and Action Center launch faster.³

• Automatic accent-color selection more accurately matches your wallpaper.⁴
  Applies when automatic accent color selection is enabled in Personalization settings.
• Wallpapers are more likely to remain in place after restarts and upgrades, including high-resolution wallpapers.⁵
  Improves wallpaper persistence to prevent fallback to a solid-color wallpaper.

• Devices resume more quickly from Modern Standby.⁶
  Optimizes the Windows Biometric service (WinBio).
• When face or fingerprint sign-in is available, Windows Hello uses it by default at sign-in. If you use your PIN three times in a row, Windows stays with PIN until you switch sign-in methods.⁷
  Applies on the lock screen and sign-in screen.

• Windows Search can find and prioritize files with names as short as two characters.⁸

• When creating a Dev Drive or resizing a volume in Settings, you can specify its size in gigabytes instead of only megabytes.⁹
• Settings asks for User Account Control permission only when you choose to view temporary files, rather than as soon as you open the Storage page.¹⁰
  The prompt is in Settings > System > Storage.

• Displays connected through USB4 docks and hubs light up more consistently, especially after standby.¹¹
• USB devices are more reliable when certain unexpected hardware faults or conditions occur.¹²
  The USB3 stack adds resiliency and recovery measures.

For: Devices using a sensor hub

• The update improves protection against apps keeping the sensor hub powered on and draining battery.¹³

• Battery life improves when HID devices fail, and applications are less likely to drain power by initiating HID transfers during standby.¹⁴
  Improves power hygiene in the HID and Input stack.

• The touch keyboard works more reliably on the sign-in screen, including when entering or changing a password.¹⁵
• File Explorer is more reliable when closing the input switcher.¹⁶
  Improves reliability of explorer.exe when closing the input switcher.
• Clipboard history opens and responds more quickly when you navigate to it.¹⁷

For: People using Greek or Cyrillic text

• Greek and Cyrillic text using combining diacritical marks is more readable and consistent.¹⁸
  Updates the Times New Roman font family to improve rendering and mark positioning for combining diacritical marks across Greek and Cyrillic scripts.

For: Task Scheduler users

• Task Scheduler keeps task-list column width changes between sessions.¹⁹

• Desktop app shortcuts load more reliably.²⁰

• Downloads use bandwidth more efficiently and perform better.²¹
  Includes underlying changes to improve download performance and bandwidth usage.
• Download failures caused by enabled Windows Update group policy settings are reported more clearly.²²

For: Touchscreen devices and everyone using the named Windows features

• Windows is more reliable on sign-in and lock screens, in File Explorer, during touchscreen gestures, and when changing themes in Settings.²³

For: Devices eligible for automatic Secure Boot certificate updates

• More eligible devices can receive new Secure Boot certificates automatically, through a controlled rollout that checks for successful update signals first.²⁴
  Windows quality updates include additional high-confidence device-targeting data. Devices receive new certificates only after demonstrating sufficient successful update signals.

For: Windows devices receiving this update

• The component that installs Windows updates receives quality improvements.²⁵
  Includes servicing stack update KB5092734, version 26100.8519.

• The update includes updates to four AI components; these components apply only to Copilot+ PCs.²⁶
  Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2605.856.0. The AI components do not install on Windows PC or Windows Server.

• Two people can listen to the same audio from one PC at the same time using supported Bluetooth audio devices.²⁷
  Uses Bluetooth LE Audio broadcast technology. Start it from Quick settings by selecting Shared Audio, choosing two supported, paired, and connected devices, and selecting Start sharing.

• Magnifier gives clearer announcements when you zoom, change views, toggle color inversion, or turn Magnifier on or off.²⁸
  The announcements are designed to help screen-reader users stay oriented.
• Magnifier can magnify permitted protected content.²⁹

For: Devices with an NPU; Task Manager users

• Task Manager adds optional columns for NPU activity and memory, and an Isolation column showing which apps run in an AppContainer.³⁰
  NPU and NPU Engine columns are available on Processes, Users, and Details; NPU Dedicated Memory and NPU Shared Memory are available on Details. Isolation is available on Processes and Details. Neural engines that are part of a GPU also appear on Performance.

For: Camera users; enterprise administrators

• Multiple applications can access the camera stream at the same time, and Basic Camera mode offers simplified camera functionality for troubleshooting or stability.³¹
  Enterprise administrators can set Multi-App Camera mode or Basic Camera mode through Group Policy at Computer Configuration > Administrative Templates > Windows Components > Camera > Configure Camera Options.

For: People setting up Windows

• During setup, you can choose a custom name for your user folder. If you skip this step, Windows uses the default name and continues setup.³²
  The custom name is chosen on the Device Name page and must follow standard Windows naming requirements.

• Administrators can limit the Secure Boot service data that Windows sends to Microsoft.³³
  Adds the LimitSecureBootRequiredServiceData Group Policy and MDM setting under Computer Configuration > Administrative Templates > Windows Components > Secure Boot. When enabled, it suppresses the event normally sent to Microsoft. The policy is included in the Windows Restricted Traffic Limited Functionality Baseline.

• Windows Hello Enhanced Sign-in Security is less likely to block authentication unexpectedly.³⁴
  Resolves missing secure enrollment metadata.

• Addresses an installation failure with error 0x800f0922 on some devices, which can happen when the EFI System Partition has little free space, especially 10 MB or less.³⁵
  The issue might occur after installing the May 2026 security update KB5089549.