Skip to the content
The Update Bureau
Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update
Patch Tuesday Zero-day

KB5121003

KB5121003: Cumulative update for Windows 11, versions 24H2 and 25H2, August 2026. Secure Boot targeting expands; Drop Tray is removed

In short

Secure Boot updates reach more eligible PCs, while Drop Tray and its Multitasking setting are removed. The update also closes an actively exploited WinSock driver flaw.

Does it affect you? Applies to: Devices running Windows 11, versions 25H2 and 24H2, on x64 or Arm64. Windows 11, version 24H2 Home and Pro editions reach end of updates on October 13, 2026; Enterprise and Education editions remain supported until October 12, 2027.

Builds
26100.9168 · 26200.9168
Security
195 fixed · 7 critical · 1 exploited
Restart
Required

What changes

Improvements 4 changes

Security updates

  • Security protections address vulnerabilities in Windows.1

Secure Boot

Gradual rollout Verified in package

For: supported PCs and non-managed business devices

  • More eligible devices can automatically receive new Secure Boot certificates.2
    Adds high-confidence device-targeting data. Certificate deployment continues across supported PCs and non-managed business devices.

AI components

Verified in package
  • AI components are updated to version 1.2605.856.0. They apply only to Copilot+ PCs.3
    Updates Image Search, Content Extraction, Semantic Analysis, and Settings Model. These components do not install on other Windows PCs or Windows Server.

Servicing stack update

  • The update includes a component that improves the reliability of Windows update installation.4
    Includes KB5123304, build 26100.9156.

Fix 1 change

Games

  • A block prevents a driver linked to some RGB-lighting parts from loading, mitigating reported game failures.5
    The block prevents the inpoutx64 driver from loading. It is available automatically on consumer and business devices not managed by IT; it does not propagate automatically to enterprise-managed devices.

Removal 1 change

Sharing

Verified in package

For: devices where Drop Tray was available

  • Drop Tray and its related setting are removed.6
    The setting was under Settings > System > Multitasking. Drop Tray was previously named Drag Tray.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5124008

    Microsoft Teams and Outlook might fail to launch on ARM-based devices

    On ARM-based devices, Teams and new Outlook might fail to launch or close unexpectedly after Windows security updates released on or after August 11, 2026. KB5124008 resolves the issue.7

    How to apply the workaround Workaround

    Install Auto Super Resolution Package version 1.0.19.0 or later from Microsoft Store.7

    Step-by-step workaround instructions
    3 steps
    Show steps Hide steps
    Step-by-step procedure
    1. Open Microsoft Store.
    2. Select Downloads > Check for updates.
    3. Install the latest Auto Super Resolution Package update, version 1.0.19.0 or later.
  2. Mitigated Affects: Everyone

    Reports of certain games becoming unresponsive

    Some games might freeze, close, show an error, or restart the PC on devices with certain RGB-lighting parts. A block that prevents a related driver from loading mitigates the issue; it does not reach enterprise-managed devices automatically.5

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-08-11
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5101684, KB5121767, KB5101650, KB5095093
+57 earlier KB5094126, KB5089573, KB5089549, KB5083631, KB5083769, KB5086672, KB5079391, KB5085516, KB5079473, KB5077241, KB5077181, KB5074105, KB5078127, KB5077744, KB5074109, KB5072033, KB5070311, KB5068861, KB5067036, KB5070773, KB5066835, KB5065789, KB5068221, KB5065426, KB5064081, KB5063878, KB5062660, KB5064489, KB5062553, KB5060829, KB5063060, KB5060842, KB5058499, KB5061977, KB5058411, KB5055627, KB5059087, KB5055523, KB5053656, KB5053598, KB5052093, KB5051987, KB5050094, KB5050009, KB5048667, KB5046740, KB5046617, KB5044384, KB5044284, KB5043178, KB5043080, KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239
Replaced by
KB5124008
VersionBuildChannel
24H2 26100.9168 General availability
25H2 26200.9168 General availability

Security

195 vulnerabilities fixed
1 exploited 7 critical 187 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2026-68820 Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-62815
Microsoft QUIC Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-62816
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-62822
Windows GDI+ Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-62819
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-62889
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2026-62890
Windows GDI+ Elevation of Privilege Vulnerability
 Critical 7.8
CVE-2026-66799
Windows Key Guard Elevation of Privilege Vulnerability
 Critical 7.8
CVE-2026-62832
Windows User Profile Service Elevation of Privilege Vulnerability
 Important 7.8

The table lists the 9 exploited, publicly disclosed or critical vulnerabilities. See all 195 vulnerabilities →

Updated components

2,425 files changed since the previous update for the same versions.

Top changed componentsFiles
Security and sign-in32
Graphics and display30
Remote Desktop26
Networking22
File Explorer and shell13
Search13
Kernel11
Hyper-V and virtualization10
Secure Boot7
Settings7
Storage and file systems6
Printing5

Verified in package: changed files confirm Secure Boot, AI components, Sharing.

Page history

  1. Added 13 vulnerabilities (13 important)

  2. Removed CVE-2026-61346

    Removed CVE-2026-61359

    Removed CVE-2026-62688

    Removed CVE-2026-62740

    Removed CVE-2026-62752

    Removed CVE-2026-62800

    Removed CVE-2026-62877

    Removed CVE-2026-66804

    Removed CVE-2026-70344

Sources

Updated
Cited passages from Microsoft's official notes (7)
  1. 1. This update provides security improvements. support.microsoft.com
  2. 2. This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. support.microsoft.com
  3. 3. This release updates the following AI components to version 1.2605.856.0: Image Search, Content Extraction, Semantic Analysis, and Settings Model. support.microsoft.com
  4. 4. Includes KB5123304 (Build 26100.9156), which improves the reliability of the Windows update installation process. support.microsoft.com
  5. 5. This issue is resolved by a block that prevents the inpoutx64 driver from loading on affected devices. support.microsoft.com
  6. 6. This update removes the Drop Tray experience (previously named Drag Tray) for devices where it was available. It also removes the associated setting under Settings > System > Multitasking. support.microsoft.com
  7. 7. This issue is resolved in Windows updates released on and after September 8, 2026 such as KB5124008. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake