The Update Bureau
Some Windows licensing and activation tasks failed with error 0x80041008; the issue is fixed for affected organizations.
Key changes 2 changes
NTLM clients offer message signing by default for non-anonymous connections, helping reduce relay risks. The update also fixes printer setup and a Remote Desktop policy issue.
Check the newer update, KB5136483Key changes 575 CVEs · 7 changes
Windows 11 version 23H2 Enterprise and Education reach the end of updates on November 10, 2026.
Check the newer update, KB5131087An actively exploited Windows Shell security-feature bypass is addressed. The update also addresses File History backup and restore failures.
Check the newer update, KB5134130Key changes 1,021 CVEs · 6 changes
Addresses Remote Desktop instability, restores Plan9 host-folder access to Linux VMs, and resolves only 8-channel or 3D-mode symptoms for affected USB audio devices. Other USB audio symptoms remain.
Check the newer update, KB5126653Key changes 4 changes
An actively exploited Windows Update flaw could let attackers gain higher access. The update also addresses remote audio problems and adjusts Morocco's time zone.
Check the newer update, KB5129242Key changes 614 CVEs · 6 changes
A flaw in the WinSock support driver listed as exploited is addressed, and File History backups to network shares become more reliable.
Check the newer update, KB5122880Key changes 170 CVEs · 5 changes
An actively exploited Windows Shell spoofing flaw is addressed. Trusted Remote Desktop publishers can now use SHA-2 certificate thumbprints.
Check the newer update, KB5120240Key changes 20 CVEs · 10 changes
Critical code-execution flaws affect the Windows Kernel, DNS Client, Remote Desktop Client and other components. File Explorer search and Secure Boot also change.
Check the newer update, KB5099414Key changes 158 CVEs · 9 changes
Critical vulnerabilities include a DNS Client remote code execution flaw. Some managed PCs might ask for a BitLocker recovery key after the first restart.
Check the newer update, KB5093998Key changes 56 CVEs · 7 changes
Remote Desktop shows requested settings before connecting, and a Microsoft account sign-in error is fixed. The update also adds protections against vulnerable kernel drivers.
Check the newer update, KB5087420Key changes 114 CVEs · 8 changes
The update addresses 41 Important-severity vulnerabilities and broadens the rollout of new Secure Boot certificates. It also improves File History backups and stability for some graphics configurations.
Check the newer update, KB5082052Key changes 41 CVEs · 8 changes
Addresses 27 vulnerabilities, including exploited Windows Shell and MSHTML security feature bypasses, and fixes several Windows 11 23H2 issues. It also updates Secure Boot components and certificate rollout data.
Check the newer update, KB5078883Key changes 27 CVEs · 9 changes
Fixes file and Outlook problems affecting some cloud-storage users after the January 13 update. Devices with Virtual Secure Mode enabled might still restart instead of shutting down or hibernating; KB5075941 resolves that issue.
Check the newer update, KB5075941Key changes 3 changes
Some Remote Desktop sign-ins fail, and some Secure Launch devices restart instead of shutting down or hibernating. This out-of-band update addresses both problems.
Check the newer update, KB5078132Key changes 3 changes
An actively exploited Desktop Window Manager flaw gets a security fix. The update also removes several modem drivers and addresses Remote Desktop connection failures.
Check the newer update, KB5077797Key changes 80 CVEs · 7 changes
The update fixes 30 Important vulnerabilities, including an exploited Cloud Files driver flaw. PowerShell 5.1 now warns before running scripts from web content.
Check the newer update, KB5073455Key changes 30 CVEs · 3 changes
Addresses File Explorer mouse-click problems, TAR extraction failures with long Chinese names, and other issues. It is the final preview update for version 23H2; supported editions will receive only monthly security updates going forward.
Check the newer update, KB5071417Key changes 5 changes
Fixes an HTTP.sys request-parsing issue and addresses 33 vulnerabilities, including an actively exploited Windows Kernel flaw. It also includes improvements to the servicing stack.
Check the newer update, KB5070312Key changes 33 CVEs · 2 changes
Addresses touch-keyboard input failures after sleep, network loss from external virtual switches, and other issues. It also enables Personalized Offers during setup and in Settings.
Check the newer update, KB5068865Key changes 6 changes
The update addresses 109 vulnerabilities, including three exploited flaws, and disables File Explorer previews for files downloaded from the internet. It also removes a fax-modem driver and addresses PowerShell remoting timeouts.
Check the newer update, KB5067112Key changes 109 CVEs · 5 changes
Addresses SMB file-sharing failures and fixes a sign-in screen freeze after entering a SIM PIN.
Check the newer update, KB5066793Key changes 9 changes
Shared folders might stop opening over SMBv1 after installation. The update also reduces unexpected prompts during some MSI repairs and includes a fix for a publicly disclosed Windows SMB flaw.
Check the newer update, KB5065790Key changes 50 CVEs · 3 changes
Windows Backup for Organizations is generally available, and the preview fixes File Explorer, input, and other problems. Standard users might still see unexpected UAC prompts during MSI repairs; KB5065431 addresses the issue.
Check the newer update, KB5065431Key changes 15 changes
Attempts to reset or recover a device might fail after the August security update; this optional release addresses that problem. Standard users might still see unexpected prompts during app repairs.
Check the newer update, KB5064080Key changes 3 changes
.NET Framework is updated separately from Windows 11: each of these updates has its own KB and reaches Windows 11, version 23H2 through Windows Update.