Skip to the content
The Update Bureau
Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Out-of-band update
Out-of-band

KB5134133

KB5134133: Cumulative update for Windows 11, versions 24H2, 25H2 and 26H2, October 2026. Offline PCs get trusted certificate updates; Smart App Control can fail

In short

Devices that miss automatic certificate updates receive updated trusted root certificates. Some devices might be unable to turn Smart App Control back on after it was disabled.

Does it affect you? Applies to: Windows 11 versions 24H2, 25H2, and 26H2. This out-of-band update is intended for devices that do not receive current certificate trust list updates, such as disconnected devices or devices with automatic updates disabled.

Builds
26100.9725 · 26200.9725 · 26300.9725
Restart
Required
Review notes Additional details from the official release notes (2) Read notes
  • In detail Windows 11 version 24H2 Enterprise and Education updates end on October 12, 2027.
  • Does it affect you? This update is intended for devices that do not receive current certificate trust list updates, including devices where automatic CTL updates are disabled.

The official sources are linked at the end of the page.

What changes

Improvements 3 changes

Certificates

For: Devices that do not receive current certificate trust list updates

  • Devices that cannot get automatic certificate updates receive an updated set of trusted root certificates.1
    The cumulative update includes an updated trusted root certificate payload for devices that cannot access Microsoft’s certificate-update service or have automatic certificate trust list (CTL) updates disabled.

AI components

For: Copilot+ PCs

  • Four AI components receive updated versions.2
    Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2608.951.0. These components apply only to Copilot+ PCs.

Servicing stack update

  • The Windows update installation process becomes more reliable.3
    Includes KB5127647 (Build 26100.9703), which improves the reliability of the Windows update installation process.

Known issues

  1. Resolved Affects: Organizations and IT administrators

    Remote Desktop connections might fail for non-admin users with error 0xC000000D

    Non-admin users might fail to connect to Remote Desktop hosts with Administrator protection enabled, with error 0xC000000D. It primarily affects enterprise-managed hosts; updates from October 27, 2026, including KB5127653, resolve it.4

    How to apply the workaround Group Policy / Intune

    For affected devices still using an update released before October 27, 2026, temporarily turn off Administrator protection through the User Account Control Type Of Admin Approval Mode policy.4

  2. Resolved Affects: Everyone Resolved by KB5129195

    USB audio devices might fail to start or produce no sound

    Some USB Audio Class 1.0 devices might fail to start or produce no sound. KB5129195 fixed 8-channel and 3D audio symptoms, but other symptoms remain.5

    How to apply the workaround Workaround

    Some customers report that switching to 2-channel mode restores audio. For other symptoms, IT administrators can contact Microsoft Support for Business.5

  3. Resolved Affects: Everyone

    You might be unable to turn on Smart App Control

    Some devices cannot turn Smart App Control back on after it was turned off; its setting might be grayed out.6

    How to apply the workaround Registry / GPO

    The values restore the ability to turn on Smart App Control.6

    Step-by-step instructions, command & download kit
    3 steps cmd.exe · Administrator Power-User Kit (.zip)
    Show steps & kit Hide steps & kit
    Step-by-step procedure
    1. Back up the registry before making changes.
    2. Open Command Prompt as an administrator and run both commands.
    3. Restart the device.
    cmd.exe · Administrator 
    > reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2883193997 /t REG_DWORD /d 1 /f> reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2850574478 /t REG_DWORD /d 1 /f

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-10-26
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5127648, KB5124010, KB5129195, KB5124008
+63 earlier KB5120998, KB5121003, KB5101684, KB5121767, KB5101650, KB5095093, KB5094126, KB5089573, KB5089549, KB5083631, KB5083769, KB5086672, KB5079391, KB5085516, KB5079473, KB5077241, KB5077181, KB5074105, KB5078127, KB5077744, KB5074109, KB5072033, KB5070311, KB5068861, KB5067036, KB5070773, KB5066835, KB5065789, KB5068221, KB5065426, KB5064081, KB5063878, KB5062660, KB5064489, KB5062553, KB5060829, KB5063060, KB5060842, KB5058499, KB5061977, KB5058411, KB5055627, KB5059087, KB5055523, KB5053656, KB5053598, KB5052093, KB5051987, KB5050094, KB5050009, KB5048667, KB5046740, KB5046617, KB5044384, KB5044284, KB5043178, KB5043080, KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239
Replaced by
KB5132061
VersionBuildChannel
24H2 26100.9725 General availability
25H2 26200.9725 General availability
26H2 26300.9725 General availability

Security

No vulnerabilities are listed for this update.

Updated components

42 files changed since the previous update for the same versions.

Top changed componentsFiles
Security and sign-in4

Page history

  1. Known issue resolved: You might be unable to turn on Smart App Control

    Known issue resolved: USB audio devices might fail to start or produce no sound (KB5129195)

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. This update includes an updated trusted root certificate payload in the Windows cumulative update for devices that cannot access Microsoft’s certificate-update service support.microsoft.com
  2. 2. This release updates the following AI components to version 1.2608.951.0: Image Search, Content Extraction, Semantic Analysis, and Settings Model. support.microsoft.com
  3. 3. Includes KB5127647 (Build 26100.9703), which improves the reliability of the Windows update installation process. support.microsoft.com
  4. 4. This issue is addressed by Windows updates released on and after October 27, 2026 (KB5127653). support.microsoft.com
  5. 5. Some customers have reported that they're able to restore audio in these cases by switching to 2-channel mode. support.microsoft.com
  6. 6. After installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Nov 14, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 3/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake