Skip to the content
The Update Bureau
Windows 11 26H1 Windows 11 26H1 Security update
Patch Tuesday

KB5095051

KB5095051: Cumulative update for Windows 11, version 26H1, June 2026. BitLocker testing improves; custom folder icons may disappear

In short

Custom folder icons or localized names might be missing for files from downloaded or remote locations, though folder access is unchanged. The update also improves BitLocker Drive Encryption testing.

Does it affect you? Applies to: Devices running Windows 11, version 26H1, on x64 or Arm64. The updated AI components apply only to Copilot+ PCs.

Build
28000.2269
Security
124 fixed · 21 critical
Restart
Required

What changes

Improvements 4 changes

BitLocker

  • BitLocker Drive Encryption testing is more reliable because the files needed for the USB BIOS logo test are available.1

Folder customization

  • Custom folder icons or localized names might be missing for content from downloaded or remote locations. Folder access is not affected.2
    The security hardening change affects how Windows processes desktop.ini files.

AI components

Verified in package
  • Four AI components get updated versions on Copilot+ PCs.3
    Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2604.515.0.

Servicing stack

  • The component that installs Windows updates gets quality improvements.4
    The update includes servicing stack update KB5101277, build 28000.2263.

Known issues

  1. Open Affects: Everyone

    Microsoft Office applications might fail to open from certain third-party apps

    Some third-party apps might fail to open Office apps or documents. Microsoft lists this issue for Windows updates released on or after June 9, 2026.5

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Open Affects: Everyone

    Deleting from Recycle Bin displays an internal file name

    When you permanently delete one item, the confirmation box might show an internal file name instead of the original. Microsoft lists this issue for this update.6

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-06-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5089570, KB5089548, KB5083806, KB5083768
+4 earlier KB5079489, KB5079466, KB5077239, KB5077179
Replaced by
KB5101649
VersionBuildChannel
26H1 28000.2269 General availability
26H1 28000.2269 Release Preview Channel

Security

124 vulnerabilities fixed
21 critical 103 important
VulnerabilitySeverityCVSS
CVE-2026-45657
Windows Kernel Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-47291
HTTP.sys Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-10263
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
 Critical 9.3
CVE-2026-42985
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-47289
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-44810
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
 Critical 8.4
CVE-2026-45607
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.4
CVE-2026-45641
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.4
CVE-2026-47652
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.2
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49123
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49132
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-33828
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
 Critical 7.8
CVE-2026-42982
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Critical 7.8
CVE-2026-44803
Windows Graphics Component Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-44812
Windows Graphics Component Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-48574
Windows Media Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-42992
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-44799
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-44801
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-48563
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-45586
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-49160
HTTP.sys Denial of Service Vulnerability
 Important 7.5
CVE-2026-45585
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8
CVE-2026-50507
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8

The table lists the 25 exploited, publicly disclosed or critical vulnerabilities. See all 124 vulnerabilities →

Updated components

27,604 files changed since the previous update for the same versions.

Top changed componentsFiles
Settings162
Networking96
Graphics and display92
Audio82
Bluetooth82
Remote Desktop76
Printing68
Search64
Security and sign-in62
File Explorer and shell45
.NET networking38
Hyper-V and virtualization38

Verified in package: changed files confirm AI components.

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. [BitLocker] This update improves the reliability of BitLocker Drive Encryption testing by ensuring that all required files are available for the USB BIOS logo test. support.microsoft.com
  2. 2. [Folder customization] This update introduces a security hardening change to how Windows processes desktop.ini files. As a result, some users might notice missing custom folder icons or localized folder names for content from downloaded or remote locations. support.microsoft.com
  3. 3. Image Search 1.2604.515.0 Content Extraction 1.2604.515.0 Semantic Analysis 1.2604.515.0 Settings Model 1.2604.515.0 support.microsoft.com
  4. 4. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  5. 5. This issue is resolved in Windows updates released on and after July 14, 2026 such as KB5101649. support.microsoft.com
  6. 6. This issue is addressed in KB5095091. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake