All updates

Updated trusted-root certificates for disconnected devices

Devices that miss automatic certificate trust updates get an updated trusted-root certificate payload. This out-of-band release is intended for systems that cannot reach Microsoft's certificate service or have automatic updates disabled.

Offline devices get updated trusted certificates

Devices that cannot reach Microsoft’s certificate service get updated trusted certificate data. Support for this edition ended October 13, 2026.

Offline servers get updated trusted root certificates

Devices that cannot reach Microsoft's certificate-update service get an updated trusted root certificate payload. Hotpatch-enrolled devices that install this update will not receive hotpatch updates until after they install the January 2027 baseline.

Root certificates updated for isolated servers; Exchange mail can fail

An updated trusted root certificate list helps servers that cannot reach Microsoft's certificate service. Some on-premises Exchange servers might also have trouble with sign-in and mail delivery.

Updated root certificate payload for disconnected devices

Devices that cannot get certificate updates from Microsoft receive an updated trusted root certificate payload. Some Exchange servers might still have sign-in and email problems.

Certificate trust updates for isolated devices; Exchange issues remain

Devices that cannot get certificate trust updates receive a refreshed trusted root certificate list. Some on-premises Exchange servers might still have OWA sign-in or email delivery problems.

Magnifier contrast themes and VMware green-screen fix

Adds a lower-glare contrast theme in Magnifier and fixes several network, virtual machine, and VMware issues. Recall may be missing or unable to launch on some Copilot+ PCs after a clean install.

Customizable Start menu and per-screen Magnifier controls

Adds Start menu options, desktop-app privacy controls, and new Magnifier features. A clean install might leave Recall missing or unable to launch on some Copilot+ PCs.

Unicode 17.0 text support and a Recall install issue

Build 28020.3292 gradually adds support for Unicode 17.0 text shaping for Beta Channel Insiders. Recall may be missing or fail to launch on some Copilot+ PCs after a clean install.

Phone controls and internet speed tests in Quick Settings

Experimental Channel Insiders are testing phone controls and internet speed tests in Quick Settings, alongside changes to Magnifier, subscriptions, and several Windows components.

File Explorer gets a customizable context menu

Build 26220.9757 is rolling out to Beta Channel Insiders with a customizable File Explorer context menu and a first-time tip; the Settings home page should load faster in some scenarios.

Recovery checks can trigger access violations

Queries against `sys.dm_exec_requests` during database recovery can trigger access violations and dump files. CU10 also leaves open an issue where parallel `SESSION_CONTEXT` queries can return wrong results.

Search controls and a new Pointer Indicator setting

Build 28120.3272 is rolling out Search changes, Pointer Indicator, and other improvements to the Experimental Channel. It also fixes crashes in some apps and games.

Clearer Family Safety messages and an app crash fix

Beta Channel Insiders get clearer messages when parental controls block apps and a fix for crashes in some apps and games.

Gaming controls, passwordless sign-in, and Windows Hello brightness

Adds easier-to-reach gaming controls, expands passwordless web sign-in to hybrid-joined devices, and can brighten the screen for Windows Hello. It also includes File Explorer, Search, Run, and shutdown changes.

Independent Magnifier views and easier gaming controls

Adds independent Magnifier zoom and screen locking, refreshes Gaming Task View controls, and includes changes to Settings, File Explorer, family safety, and shutdown reliability.