Skip to the content
The Update Bureau

Windows 11

Windows 11 updates

All published releases for Windows 11, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

47 active known issues →

Latest build per version

Windows 11 updates

  • Windows 11 23H2 Windows 11 23H2 Out-of-band update
    Out-of-band

    KB5136483

    Windows licensing and activation failures fixed

    Some Windows licensing and activation tasks failed with error 0x80041008; the issue is fixed for affected organizations.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.
    • Fix Licensing and Activation: Some organizations can now run Windows licensing and activation tasks that previously failed with error 0x80041008.

    Read update Source: Microsoft

    Build
    22631.7714
    Restart
    Required
  • Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Security update
    Updated

    KB5132061

    Remote Desktop and USB audio fixes; NTLM signing strengthened

    Remote Desktop connections and some USB audio devices get fixes, while NTLM signing is enabled by default for more connections. The update also closes a publicly disclosed Brotli decoder flaw.

    Windows 11 version 24H2 Enterprise and Education editions are scheduled to stop receiving updates on October 12, 2027.
    Known issues: 1 open
    • November security update might fail to install on some devices

    Key changes 595 CVEs · 11 changes

    • Improved Secure Boot: More eligible devices can receive newer Secure Boot certificates automatically.
    • Improved Security: More connections use message signing by default, helping reduce exposure to relay attacks.
    • Improved Date and Time: Cuba's clocks follow its extended daylight-saving schedule for 2026–2027.

    Read update Source: Microsoft

    Builds
    26100.9974 · 26200.9974 · 26300.9974
    Security
    595 fixed · 34 critical
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update
    Updated

    KB5132059

    NTLM signing becomes the default for client connections

    Security fixes cover Windows components, while NTLM clients now offer message signing by default for non-anonymous connections. USB audio startup, printer setup, and Remote Desktop certificate errors also get fixes.

    Key changes 598 CVEs · 10 changes

    • Improved Update schedule: There is no non-security preview update in the second half of December 2026. Monthly security and preview updates resume in January 202...
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically. Certificate deployment continues over the coming months.
    • Improved Security: NTLM clients now offer message signing by default for non-anonymous connections. This helps reduce exposure to relay attacks.

    Read update Source: Microsoft

    Build
    28000.3501
    Security
    598 fixed · 33 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Final update for this version Updated

    KB5131087

    NTLM signing defaults for non-anonymous connections

    NTLM clients offer message signing by default for non-anonymous connections, helping reduce relay risks. The update also fixes printer setup and a Remote Desktop policy issue.

    Check the newer update, KB5136483
    This is the last update for version 23H2 Enterprise and Education. Those editions will no longer receive monthly security updates; move eligible devices to a supported Windows 11 version.

    Key changes 575 CVEs · 7 changes

    • Improved Secure Boot: More eligible devices can receive newer Secure Boot certificates automatically over the coming months.
    • Improved Security: NTLM connections are better protected against relay attacks.
    • Improved Date and Time: Cuba's clocks follow its extended daylight saving schedule for 2026–2027.

    Read update Source: Microsoft

    Build
    22631.7711
    Security
    575 fixed · 31 critical
    Restart
    Required
  • Windows 11 25H2 / 26H2 Windows 11 25H2 / 26H2 Optional preview
    Preview Updated

    KB5127936

    File Explorer gains a customizable menu; recovery adds cloud rebuild

    File Explorer gets a faster, customizable right-click menu, and Windows adds Cloud rebuild for recovery. The preview also fixes Remote Desktop failures for some non-admin users.

    Check the newer update, KB5132061

    Key changes 43 changes

    • New Context menu in File Explorer: The right-click menu opens faster and lets you choose which commands and app extensions it shows.
    • New Modernized AutoPlay experience: The AutoPlay dialog has a refreshed look, supports dark mode and text scaling, and keeps its alerts in notification center.
    • New File Explorer: File Explorer search results show file names, locations, and dates in a consistent layout.

    Read update Source: Microsoft

    Builds
    26200.9818 · 26300.9818
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview Updated

    KB5127653

    DPAPI prompt warning and new touchpad gestures

    A warning flags the planned April 2027 retirement of prompt-based DPAPI protection. New touchpad gestures, Emoji 17.0, and other Windows features also arrive in this optional preview.

    Check the newer update, KB5132059
    A new DPAPI warning says prompt-based protection will be retired in April 2027. Apps and users that rely on it should move to another protection flow and migrate existing data.

    Key changes 60 changes

    • New File Explorer: The preview pane lets you choose to preview downloaded HTML files. Other files, such as PDFs, preview automatically.
    • New File Explorer: File Explorer Home remembers which sections you expanded or collapsed.
    • New File Explorer: Cloud file thumbnails are more reliable in the Details pane. File properties are also easier to find.

    Read update Source: Microsoft

    Build
    28000.3365
    Restart
    Required
  • Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Out-of-band update
    Out-of-band Updated

    KB5134133

    Offline PCs get trusted certificate updates; Smart App Control can fail

    Devices that miss automatic certificate updates receive updated trusted root certificates. Some devices might be unable to turn Smart App Control back on after it was disabled.

    Check the newer update, KB5127936
    Support for Windows 11 version 24H2 Home and Pro ended on October 13, 2026.

    Key changes 3 changes

    • Improved Certificates: Devices that cannot get automatic certificate updates receive an updated set of trusted root certificates.
    • Improved AI components: Four AI components receive updated versions.
    • Improved Servicing stack update: The Windows update installation process becomes more reliable.

    Read update Source: Microsoft

    Builds
    26100.9725 · 26200.9725 · 26300.9725
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Out-of-band update
    Out-of-band

    KB5134134

    Offline devices receive updated trusted root certificates

    Devices that miss automatic certificate trust updates get an updated trusted-root payload. The package also updates AI components and improves update installation reliability.

    Check the newer update, KB5127653

    Key changes 3 changes

    • Improved Certificates: Devices that cannot get certificate trust updates receive an updated trusted-root list in the Windows update.
    • Improved AI components: Four built-in AI components get a version update. These components apply only to Copilot+ PCs.
    • Improved Servicing stack: The Windows update installation process gets a reliability improvement.

    Read update Source: Microsoft

    Build
    28000.3237
    Restart
    Required
  • Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Security update
    Zero-day Final update for this version Updated

    KB5127648

    Exploited Shell bypass addressed; 24H2 Home and Pro reach end of updates

    Addresses an actively exploited Windows Shell security feature bypass and fixes several problems, including Explorer startup failures and game input stuttering. It is the final update for 24H2 Home and Pro.

    Check the newer update, KB5134133
    Windows 11, version 24H2 Home and Pro have reached end of updates; the October 2026 security update is their last. Microsoft recommends upgrading to the latest version.

    Key changes 1,067 CVEs · 12 changes

    • New Date and Time: The time-zone list includes (UTC-05:00) Manitoba for the region’s November 1, 2026 time-zone change.
    • Improved Secure Boot: Eligible devices continue to receive newer Secure Boot certificates through Windows Update. Devices that have not received them can sti...
    • Improved ReFS security: ReFS volumes on externally attached storage devices gain auditing and optional security controls. Auditing is on by default; enforcemen...

    Read update Source: Microsoft

    Builds
    26100.9711 · 26200.9711 · 26300.9711
    Security
    1,067 fixed · 25 critical · 1 exploited
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update
    Zero-day Updated

    KB5127646

    Exploited Windows Shell bypass patched; Explorer crashes fixed

    Attackers are exploiting a Windows Shell security bypass, and the update fixes Explorer crashes after sign-in on some multi-user systems.

    Check the newer update, KB5134134

    Key changes 1,055 CVEs · 7 changes

    • New ReFS security: ReFS volumes on external storage gain audit logging and optional security controls.
    • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically.
    • Improved AI components: Image Search, Content Extraction, Semantic Analysis, and Settings Model update to version 1.2608.951.0.

    Read update Source: Microsoft

    Build
    28000.3231
    Security
    1,055 fixed · 25 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day Updated

    KB5126653

    Exploited Windows Shell bypass flaw addressed; File History issue addressed

    An actively exploited Windows Shell security-feature bypass is addressed. The update also addresses File History backup and restore failures.

    Check the newer update, KB5134130
    Windows 11 23H2 Enterprise and Education reach end of updates on November 10, 2026. The November security update is their last.

    Key changes 1,021 CVEs · 6 changes

    • New Date and Time: A new Manitoba time zone is available.
    • Improved Secure Boot: Updated Secure Boot certificates continue to reach eligible devices through Windows Update.
    • Improved Date and Time: British Columbia and Alberta get permanent daylight saving time support starting in November 2026.

    Read update Source: Microsoft

    Build
    22631.7652
    Security
    1,021 fixed · 25 critical · 1 exploited
    Restart
    Required
  • Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Optional preview
    Preview Final update for this version Updated

    KB5124010

    New touchpad gestures, emoji and Widgets; Remote Desktop issue remains

    Adds Windows features and fixes several problems, but non-admin Remote Desktop connections might still fail on managed devices with Administrator protection enabled. It is the final preview for version 24H2.

    Check the newer update, KB5127648
    This is the final preview for version 24H2. Home and Pro updates end October 13, 2026; Enterprise and Education updates continue until October 12, 2027.

    Key changes 49 changes

    • New File Explorer: For downloaded HTML files, the preview pane offers a Preview anyway button after the warning. Other files, such as PDFs, preview automa...
    • New File Explorer: File Explorer Home remembers whether its sections were expanded or collapsed.
    • New Emoji: The emoji panel adds Emoji 17.0 characters, including distorted face, fight cloud, and hairy creature.

    Read update Source: Microsoft

    Builds
    26100.9550 · 26200.9550 · 26300.9550
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview Updated

    KB5124006

    Remote Desktop failures reported; taskbar moves to four screen edges

    Adds taskbar and Start menu customization, while some non-admin Remote Desktop connections can fail on devices with Administrator protection enabled.

    Check the newer update, KB5127646

    Key changes 40 changes

    • New Taskbar: You can place the taskbar at the bottom, top, left, or right of the screen. Search and the smaller taskbar option are supported only at...
    • New Taskbar: A smaller taskbar option reduces the taskbar height and icon size while keeping Start, Search, and the system tray available.
    • New Start menu: You can choose a small or large Start menu, in addition to the Automatic size.

    Read update Source: Microsoft

    Build
    28000.3086
    Restart
    Required
  • Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Out-of-band security update
    Out-of-band Updated

    KB5129195

    Remote Desktop failures and USB multichannel audio fixed

    Protects against a Windows User-Mode Power Service elevation-of-privilege flaw and addresses Remote Desktop instability and USB multichannel audio failures. Other USB Audio Class 1.0 problems remain.

    Check the newer update, KB5124010
    Windows 11 version 24H2 Home and Pro editions are scheduled to stop receiving updates on October 13, 2026.

    Key changes 1 CVE · 5 changes

    • Improved Security: Adds protection against a vulnerability that could let an attacker gain elevated privileges.
    • Improved Windows servicing stack: The component that installs Windows updates receives quality improvements to help devices reliably receive and install updates.
    • Fix Remote Desktop Services: Remote Desktop connections and sign-ins work more reliably in affected environments; servers and related tools are less likely to becom...

    Read update Source: Microsoft

    Builds
    26100.9457 · 26200.9457 · 26300.9457
    Security
    1 vulnerability fixed
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Out-of-band security update
    Out-of-band Updated

    KB5129194

    Secure Kernel protections and fixes for Remote Desktop and USB audio

    Secure Kernel protections address a critical elevation-of-privilege flaw. The release also fixes Remote Desktop failures and some USB audio modes, while other USB audio problems remain.

    Check the newer update, KB5124006

    Key changes 2 CVEs · 7 changes

    • Improved Security: Adds protection against a flaw that could let someone gain higher access to the PC.
    • Improved Security: Adds protection against a critical flaw that could let someone gain higher access to the PC.
    • Improved AI components: Updates four AI components. These updates apply only to Copilot+ PCs.

    Read update Source: Microsoft

    Build
    28000.2956
    Security
    2 fixed · 1 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Out-of-band update
    Out-of-band

    KB5129242

    Remote Desktop failures and Linux shared-folder access fixed

    Addresses Remote Desktop instability, restores Plan9 host-folder access to Linux VMs, and resolves only 8-channel or 3D-mode symptoms for affected USB audio devices. Other USB audio symptoms remain.

    Check the newer update, KB5126653
    Windows 11, version 23H2, Enterprise and Education editions reach the end of updates on November 10, 2026.

    Key changes 4 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Remote Desktop Services: In affected environments, Remote Desktop connections and sign-ins might fail, servers might become unresponsive during Remote Desktop c...
    • Fix Hyper-V: Folders shared from a Windows host might now appear and be accessible in Linux virtual machines.

    Read update Source: Microsoft

    Build
    22631.7584
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update
    Zero-day Updated

    KB5124012

    An exploited Windows Update Stack flaw is closed

    An actively exploited Windows Update Stack flaw gets a security fix, and Teams and Outlook crashes on Arm64 PCs are addressed. The update also changes Morocco time and improves remote-session audio.

    Check the newer update, KB5129194

    Key changes 640 CVEs · 7 changes

    • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically as deployment continues over the coming months.
    • Improved Date and Time: Morocco local time reflects the country's move to permanent UTC+00:00 on September 20, 2026.
    • Improved OMA-DM Client Logging: Device management logs include more details to help administrators troubleshoot connection problems.

    Read update Source: Microsoft

    Build
    28000.2954
    Security
    640 fixed · 54 critical · 1 exploited
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update
    Zero-day Updated

    KB5124008

    Windows Update flaw exploited; mouse and desktop display fixes

    An actively exploited flaw in the Windows Update stack gets a security fix, alongside fixes for mouse settings, black desktop backgrounds, and app crashes on Arm64 PCs.

    Check the newer update, KB5129195
    Windows 11, version 24H2 Home and Pro editions stop receiving updates on October 13, 2026. Upgrade to a newer version to keep receiving fixes and security updates.

    Key changes 642 CVEs · 9 changes

    • Improved Secure Boot: More eligible PCs can automatically receive new Secure Boot certificates over the coming months.
    • Improved Date and Time: Clocks show Morocco’s correct local time after the country moves to permanent UTC+00:00 on September 20, 2026.
    • Improved OMA-DM Client Logging: More diagnostic details are available to help find device management server connection problems.

    Read update Source: Microsoft

    Builds
    26100.9445 · 26200.9445
    Security
    642 fixed · 54 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day Updated

    KB5122880

    An exploited Windows Update flaw gets an access fix

    An actively exploited Windows Update flaw could let attackers gain higher access. The update also addresses remote audio problems and adjusts Morocco's time zone.

    Check the newer update, KB5129242
    Windows 11, version 23H2, Enterprise and Education editions stop receiving updates on November 10, 2026. Upgrade to a newer Windows version to stay protected.

    Key changes 614 CVEs · 6 changes

    • Improved Secure Boot: More eligible devices can automatically receive new Secure Boot certificates. Delivery continues over the coming months.
    • Improved Date and Time: Morocco's local time reflects its move to UTC+00:00, effective September 20, 2026.
    • Improved Cellular: Cellular settings get updated profiles for Telavox and Swisscom.

    Read update Source: Microsoft

    Build
    22631.7582
    Security
    614 fixed · 53 critical · 1 exploited
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview

    KB5120996

    Voice isolation and external fingerprint sign-in arrive

    Adds Voice Isolation and Korean support to Voice Access, plus support for external fingerprint readers with Windows Hello. It also improves File Explorer, power settings and other Windows features.

    Check the newer update, KB5124012

    Key changes 41 changes

    • New File Explorer: Middle-clicking a folder in the Address Bar or Home page opens it in a new tab.
    • New Voice Access: Voice Access adds Voice Isolation, which reduces interference from other speakers and background noise. It requires a one-time voice se...
    • New Voice Access: Voice Access adds Korean language support.

    Read update Source: Microsoft

    Build
    28000.2804
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview

    KB5120998

    Taskbar moves to four edges; WMIC utility removed

    Adds extensive taskbar, Start menu, and Search customization. It also removes the WMIC utility from versions 24H2 and 25H2, while Secure Boot certificates for most devices have been expiring since June 2026.

    Check the newer update, KB5124008
    Secure Boot certificates used by most Windows devices expire starting in June 2026. Updated certificates are being delivered through Windows Update; devices without them continue to start and receive standard updates. Version 24H2 Home and Pro reaches end of updates on October 13, 2026; Enterprise and Education remain supported until October 12, 2027.

    Key changes 42 changes

    • New Taskbar: You can place the taskbar at the bottom, top, left, or right of the screen. Search and the smaller taskbar option are supported only at...
    • New Taskbar: A smaller taskbar option reduces taskbar height and icon size while keeping access to Start, Search, and the system tray.
    • New Taskbar: The Taskbar behaviors section in Taskbar settings is expanded by default, making its settings easier to find.

    Read update Source: Microsoft

    Builds
    26100.9278 · 26200.9278
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update
    Zero-day Updated

    KB5121000

    Exploited WinSock flaw patched; Drop Tray removed

    An actively exploited flaw in the WinSock driver is patched, and Drop Tray and its Settings control are removed.

    Check the newer update, KB5120996

    Key changes 196 CVEs · 5 changes

    • Improved Device: TPM maintenance reports the status of EK certificates more accurately.
    • Improved Secure Boot: More devices qualify to receive new Secure Boot certificates automatically.
    • Improved AI components: Four AI components are updated to version 1.2605.856.0.

    Read update Source: Microsoft

    Build
    28000.2704
    Security
    196 fixed · 8 critical · 1 exploited
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update
    Zero-day Updated

    KB5121003

    Secure Boot targeting expands; Drop Tray is removed

    Secure Boot updates reach more eligible PCs, while Drop Tray and its Multitasking setting are removed. The update also closes an actively exploited WinSock driver flaw.

    Check the newer update, KB5120998
    Updates for 24H2 Home and Pro end on October 13, 2026; upgrade to keep receiving security and other updates.
    Known issues: 1 with a workaround Workaround
    • Reports of certain games becoming unresponsive

    Key changes 195 CVEs · 5 changes

    • Improved Secure Boot: More eligible devices can automatically receive new Secure Boot certificates.
    • Improved AI components: AI components are updated to version 1.2605.856.0. They apply only to Copilot+ PCs.
    • Improved Servicing stack update: The update includes a component that improves the reliability of Windows update installation.

    Read update Source: Microsoft

    Builds
    26100.9168 · 26200.9168
    Security
    195 fixed · 7 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day Updated

    KB5120240

    WinSock driver flaw patched; File History backups improve

    A flaw in the WinSock support driver listed as exploited is addressed, and File History backups to network shares become more reliable.

    Check the newer update, KB5122880
    Windows 11 version 23H2 Enterprise and Education reach the end of updates on November 10, 2026. They will no longer receive security and preview updates or other support.

    Key changes 170 CVEs · 5 changes

    • New Emoji Panel: The emoji panel now supports GIPHY after Google's Tenor API was deprecated.
    • Improved Connectivity: Mobile settings for SolNet-Mobile are refreshed to support the operator's latest settings.
    • Improved Device Management: The update helps managed devices keep working normally when an MDM certificate expires.

    Read update Source: Microsoft

    Build
    22631.7517
    Security
    170 fixed · 7 critical · 1 exploited
    Restart
    Required