Skip to the content
The Update Bureau

Windows 11 23H2

Windows 11, version 23H2

Every published release for Windows 11, version 23H2, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5136483 Nov 13, 2026
Build
22631.7714
Released
Oct 31, 2023
Enterprise and Education
no longer updated since Nov 10, 2026
Known issues
23 open

Build history

  • Windows 11 23H2 Windows 11 23H2 Security update

    KB5063875

    Fixes 47 vulnerabilities (4 critical)

    Security fixes cover a GDI+ code execution flaw and other Windows components. The Copilot key works more reliably, while Secure Boot certificates need attention before they expire.

    Check the newer update, KB5066189
    Support for Windows 11 version 23H2 Home and Pro ends November 11, 2025. Upgrade to a newer Windows 11 version to stay protected and up to date.
    Known issues: 2 open
    • Unexpected User Account Control (UAC) prompt when doing MSI repair operations
    • Reset and recovery issue

    Key changes 47 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Copilot: The Copilot key works more reliably, and using it no longer stops Copilot from restarting.
    • Critical CVE-2025-53766: GDI+ Remote Code Execution Vulnerability
    Build
    22631.5768
    Security
    47 fixed · 4 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5062663

    ReFS backup exhaustion and input method problems addressed

    Addresses problems with ReFS backups, Chinese and phonetic input, device responsiveness, and accessibility icons. It also warns that Secure Boot certificate expiration could affect certain devices if certificates are not updated in time.

    Check the newer update, KB5063875
    Secure Boot certificates began expiring in June 2026. Certain personal and business devices might be unable to boot securely if their certificates are not updated in time; review Microsoft's guidance and prepare.

    Key changes 10 changes

    • Improved Printer: Printer names are easier to identify during printer setup with IPP Directed Discovery.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Country and Operator Settings Asset (COSA): Profiles for certain mobile operators are brought up to date.
    Build
    22631.5699
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update

    KB5062552

    Changjie typing problems reported; display-change black screens addressed

    Traditional Chinese typing may fail after installation, and display-change black screens are addressed for Windows 11 22H2 Enterprise and Education. The update also covers critical security flaws.

    Check the newer update, KB5062663
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid boot problems.
    Known issues: 1 open
    • Microsoft Changjie Input Method Editor

    Key changes 79 CVEs · 3 changes

    • Improved Windows 11, version 23H2: Version 23H2 includes all improvements from version 22H2.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Graphics: Black screens during display changes, such as connecting or disconnecting a monitor, are addressed.
    Build
    22631.5624
    Security
    79 fixed · 5 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5060826

    Browser text clarity, PC migration preview and admin fixes

    Adds browser-default and sharing changes, starts a phased PC migration preview, and addresses several problems for Windows 11 22H2 Enterprise and Education. CJK text can still look blurry in Chromium browsers at 96 DPI.

    Check the newer update, KB5062552
    Windows 11 22H2 Enterprise and Education stops receiving non-security preview updates after June 26, 2025. Security updates continue until October 14, 2025, when servicing ends; Microsoft recommends upgrading to a later Windows 11 version.
    Known issues: 1 open
    • Noto fonts issue

    Key changes 14 changes

    • New App defaults: In the European Economic Area, setting a default browser can also set additional file and link types it supports and pin it to Start an...
    • New PC Migration: The Windows Backup app is beginning to show landing and pairing pages for PC-to-PC migration, giving you an early look at the feature....
    • New Windows Share: When you share a link or web content, the Windows share window shows a visual preview.
    Build
    22631.5549
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5060999

    Exploited Internet Shortcut flaw patched; Remote Desktop issue addressed

    The update fixes 35 security vulnerabilities, including the exploited Internet Shortcut Files remote-code-execution flaw CVE-2025-33053. It also addresses a Remote Desktop connection issue on Windows 11, version 22H2.

    Check the newer update, KB5060826
    Known issues: 2 open
    • Noto fonts issue
    • Update delay with deferral policies

    Key changes 35 CVEs · 3 changes

    • Improved Windows 11, version 23H2: This build includes the improvements from Windows 11, version 22H2.
    • Improved Servicing stack: The servicing stack, which installs Windows updates, receives quality improvements.
    • Fix Graphics: On Windows 11, version 22H2, the update addresses a graphics issue that could prevent some users from connecting through Remote Desktop...
    Build
    22631.5472
    Security
    35 fixed · 2 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Out-of-band update
    Out-of-band

    KB5062170

    Windows recovery error 0xc0000098 addressed; CJK text remains blurry

    Addresses recovery error 0xc0000098 during installation of the May security update. Blurry CJK text at 96 DPI in Chromium-based browsers remains a known issue.

    Check the newer update, KB5060999
    Known issues: 1 open
    • Noto fonts issue

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Windows recovery: Some customers encountered a recovery error while installing the May 2025 Windows security update. This update addresses the issue; it...
    Build
    22631.5415
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5058502

    Copilot voice controls and Settings FAQs arrive; input issues addressed

    Adds Copilot voice controls, Settings FAQs, and other gradual changes. It also addresses input and system issues, while blurry CJK text at 96 DPI remains a known issue.

    Check the newer update, KB5062170
    Known issues: 1 open
    • Noto fonts issue

    Key changes 17 changes

    • New Copilot: You can open Copilot with Win + C and personalize the Copilot key or Win + C behavior in Settings.
    • New Copilot: Press and hold the Copilot key for two seconds to start Press to talk. If your keyboard has no Copilot key, hold Win + C for two second...
    • New Settings: A new FAQs section answers common questions about your PC and Windows 11.
    Build
    22631.5413
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5058405

    Scripting Engine flaw exploited; recovery errors hit virtual PCs

    An exploited Scripting Engine flaw is among the security fixes. Some virtual machines might fail to start during installation; affected IT teams should use KB5062170 instead if they have not deployed this update.

    Check the newer update, KB5058502
    Known issues: 2 open
    • Noto fonts issue
    • Recovery error with error code 0xc0000098

    Key changes 38 CVEs · 4 changes

    • Improved Windows 11, version 23H2: This build includes the improvements released for version 22H2.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux systems are detected more reliably during Secure Boot checks.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    Build
    22631.5335
    Security
    38 fixed · 3 critical · 5 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5055629

    File Explorer, Narrator and Widgets gain new features

    Adds new File Explorer, Narrator, Phone Link and Widgets features, and fixes several Start menu and taskbar problems. It also lists open issues affecting Citrix installations, WSUS upgrades and CJK text in some browsers.

    Check the newer update, KB5058405
    Known issues: 3 open
    • Noto fonts issue
    • Citrix
    • Windows 11, versions 24H2 might not download via Windows Server Updates Services

    Key changes 16 changes

    • New File Explorer: File Explorer Home gains curated views that make Microsoft 365 content easier to access.
    • New Narrator: Narrator gains speech recap, so you can review spoken content, follow live transcription and copy what it last said.
    • New Phone Link: The Start menu provides direct access to Phone Link features such as calls, text messages, photos and content sharing.
    Build
    22631.5262
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Out-of-band update
    Out-of-band

    KB5058919

    Local policy audit settings show enabled logon events correctly

    A display problem could make enabled logon auditing look turned off in local policy; this out-of-band update addresses it. It also improves the component that installs Windows updates.

    Check the newer update, KB5055629
    Known issues: 3 open
    • Noto fonts issue
    • Citrix
    • Windows 11, versions 24H2 might not download via Windows Server Updates Services

    Key changes 3 changes

    • Improved Windows 11, version 23H2: This build includes the improvements released for Windows 11, version 22H2.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Local audit policies: The update addresses a display problem that made enabled logon auditing appear turned off in local policy.
    Build
    22631.5192
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5055528

    Actively exploited CLFS driver flaw patched; face sign-in tightened

    Fixes an actively exploited flaw in the Common Log File System driver. It also changes Windows Hello facial recognition to require a visible face.

    Check the newer update, KB5058919
    Known issues: 5 open
    • Noto fonts issue
    • Citrix
    • and 3 more

    Key changes 68 CVEs · 5 changes

    • New OS Security: A new %systemdrive%\inetpub folder is created after installation. Do not delete it, even if Internet Information Services is not enable...
    • Improved Daylight Saving Time (DST): Daylight-saving-time support is updated for the Aysen region in Chile to follow the government's 2025 change.
    • Improved Windows Hello: Facial recognition requires a color camera to see a visible face when you sign in.
    Build
    22631.5189
    Security
    68 fixed · 5 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5053657

    Gamepad typing and PC-spec cards arrive; Suggested actions retire

    Adds gamepad typing and PC-spec cards, and changes Windows Search in the EEA. Suggested actions are being removed; blurry CJK text at 96 DPI remains a known issue.

    Check the newer update, KB5055528
    Known issues: 2 open
    • Noto fonts issue
    • Citrix

    Key changes 14 changes

    • New Input: The touch keyboard now has a Gamepad layout with button shortcuts and keys arranged to make controller navigation easier.
    • New Input: A new taskbar system tray icon makes the emoji and more panels easier to find.
    • New Settings: Settings > System > About now shows cards with key PC specifications, including processor, RAM, storage, and GPU.
    Build
    22631.5126
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5053602

    Exploited MMC, NTFS and FAT flaws patched

    Attackers are exploiting flaws in MMC, NTFS, and FAT, alongside critical remote-code risks. Some enterprise USB printers may print random text; KB5053657 addresses that issue.

    Check the newer update, KB5053657
    Known issues: 3 open
    • Citrix
    • USB Printer Issue
    • Microsoft Copilot

    Key changes 33 CVEs · 3 changes

    • Improved Windows 11, version 23H2: Version 23H2 includes all the improvements in version 22H2.
    • Improved Internal OS functionality: Internal operating system functions get security improvements.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    Build
    22631.5039
    Security
    33 fixed · 3 critical · 5 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5052094

    Taskbar file sharing arrives alongside File Explorer fixes

    Share files from taskbar jump lists, with new Spotlight and Narrator features and several File Explorer fixes. The USB printer issue has a fix in KB5053657.

    Check the newer update, KB5053602
    Known issues: 2 open Organizations and IT administrators
    • Citrix
    • USB Printer Issue

    Key changes 18 changes

    • New Taskbar: You can share files from an app’s taskbar jump list.
    • New Windows Spotlight: You can hover over a desktop background image or select its icon to learn more about it.
    • New Lock screen: You can learn more about the lock screen image by selecting the Like icon.
    Build
    22631.4974
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5051989

    Exploited Storage and Winsock flaws patched; Hyper-V backups fixed

    Attackers are exploiting flaws in Windows Storage and the Winsock driver. The update also fixes delays that could disrupt Hyper-V backups.

    Check the newer update, KB5052094
    Known issues: 3 open
    • Citrix
    • USB Printer Issue
    • Open Secure Shell service

    Key changes 32 CVEs · 2 changes

    • Improved Servicing stack: The servicing stack, which installs Windows updates, gets quality improvements.
    • Fix Hyper-V: Hyper-V backup delays that might stop backups from running smoothly are fixed.
    • Exploited CVE-2025-21418: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
    Build
    22631.4890
    Security
    32 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5050092

    USB printers may print random data; File Explorer fixes arrive

    Adds File Explorer and sharing features and fixes problems with USB audio, cameras, and more. Some USB-connected dual-mode printers may print random data; KB5053657 later resolves that issue.

    Check the newer update, KB5051989

    Key changes 31 changes

    • New Windows Studio Effects: On devices with an NPU, an icon appears when an app uses Windows Studio Effects. Select it to open Studio Effects in Quick Settings, or...
    • New Fonts: The new simplified Chinese font Simsun-ExtG includes the Biangbiang noodles character. Some apps might not display its new extension ch...
    • New File Explorer: The New Folder command appears when you right-click items in File Explorer’s left pane.
    Build
    22631.4830
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5050021

    Exploited Hyper-V flaws and critical remote-code vulnerabilities addressed

    Addresses 121 security vulnerabilities, including three exploited Hyper-V elevation-of-privilege flaws and five critical vulnerabilities. It also adds vulnerable drivers to the Windows kernel blocklist.

    Check the newer update, KB5050092
    Support for Windows 11, version 23H2 Enterprise and Education editions ends November 10, 2026.

    Key changes 121 CVEs · 2 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist includes more drivers that could put devices at risk from attacks using vulnerable drivers.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Exploited CVE-2025-21333: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
    Build
    22631.4751
    Security
    121 fixed · 5 critical · 3 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5048685

    Exploited log-file driver flaw patched among 10 critical fixes

    The update patches an actively exploited Windows Common Log File System Driver flaw and addresses 46 vulnerabilities, including 10 rated critical.

    Check the newer update, KB5050021

    Key changes 46 CVEs · 1 change

    • Improved Servicing stack: The component that installs Windows updates receives reliability improvements to help devices receive and install updates.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
    • Critical CVE-2024-49112: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
    Build
    22631.4602
    Security
    46 fixed · 10 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5046732

    File Explorer sharing reaches Android; Bluetooth audio fixed

    Adds Android sharing in File Explorer and new input settings, while fixing several taskbar, File Explorer, Bluetooth audio, and other issues. It applies to Windows 11 23H2 and 22H2 Enterprise and Education editions.

    Check the newer update, KB5048685

    Key changes 22 changes

    • New Settings: Tailored Experiences is renamed Personalized offers in the out-of-box experience. You can turn off the setting that sends device data t...
    • New Taskbar: The system tray can show a shortened date and time. With Do not disturb on, the notification bell might be hidden; you can change the d...
    • New Input Method Editor (IME): The IME toolbar hides when an app is full screen while you type Chinese or Japanese characters.
    Build
    22631.4541
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5046633

    Exploited Task Scheduler and NTLM flaws patched

    Fixes 34 vulnerabilities, including the actively exploited Task Scheduler flaw CVE-2024-49039 and NTLM hash disclosure flaw CVE-2024-43451, plus critical VMSwitch flaw CVE-2024-43625.

    Check the newer update, KB5046732

    Key changes 34 CVEs · 3 changes

    • Improved Windows 11, version 23H2: This build includes all the improvements in Windows 11, version 22H2.
    • Improved Windows 11, version 22H2: Internal Windows functionality receives miscellaneous security improvements.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates.
    Build
    22631.4460
    Security
    34 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5044380

    Notification controls and Narrator features added; battery drain fixed

    Adds notification and Narrator features and fixes excess battery use in Modern Standby, plus several other issues. The OpenSSH service issue listed on the page is resolved by KB5052094.

    Check the newer update, KB5046633

    Key changes 18 changes

    • New Notifications: You can turn off suggestions to disable notifications from certain apps, either from a notification or in Settings.
    • New Start menu: The “All apps” section is renamed “All.”
    • New Narrator: A new shortcut copies what Narrator last spoke to the clipboard.
    Build
    22631.4391
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5044285

    Exploited MMC and MSHTML flaws patched; 22H2 restart failures fixed

    The update patches exploited MMC and MSHTML flaws and fixes repeated restarts, hangs, blue or green screens, and BitLocker recovery on Windows 11 version 22H2.

    Check the newer update, KB5044380
    Windows 11 version 22H2 Home and Pro reached end of service on October 8, 2024. Enterprise and Education editions continue to be supported; Home and Pro users need to update to the latest version to keep receiving updates.

    Key changes 64 CVEs · 4 changes

    • Improved Windows security: Addresses security issues in Windows.
    • Improved Windows 11 version 23H2: This build includes the improvements listed for Windows 11 version 22H2.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.
    Build
    22631.4317
    Security
    64 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5043145

    IE mode freezes and repeated email PIN prompts addressed

    Addresses several problems, including Edge becoming unresponsive in IE mode and repeated PIN prompts for encrypted email. Some devices may restart repeatedly or show blue or green screens; KB5044285 resolves that issue.

    Check the newer update, KB5044285
    Windows 11, version 22H2 Home and Pro editions reach end of service on October 8, 2024; Microsoft recommends updating to the latest version to continue receiving updates.

    Key changes 14 changes

    • New Taskbar: You can share local files directly from search results in the taskbar search box.
    • New Lock screen: When media is playing, its controls appear in the lower center of the lock screen.
    • New Start menu: The account manager in Start now has a Sign out command. Select the ellipses (...) to see other users and switch accounts.
    Build
    22631.4249
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day

    KB5043076

    Exploited MSHTML spoofing flaw and Installer repair change

    Fixes 31 security vulnerabilities, including three that attackers are exploiting, and changes how Windows Installer repairs prompt for administrator credentials. Linux might also fail to start on some Windows-and-Linux dual-boot devices.

    Check the newer update, KB5043145
    Windows 11, version 22H2 Home and Pro editions reach end of service on October 8, 2024. Microsoft recommends updating to the latest Windows version to continue receiving updates.

    Key changes 31 CVEs · 3 changes

    • Improved Windows Installer: When Windows Installer repairs an application, a prompt now asks for administrator credentials.
    • Improved Dual boot of Windows and Linux: Linux might fail to start on a device set up to dual boot Windows and Linux.
    • Improved Servicing stack: The package includes an update to the component that installs Windows updates.
    Build
    22631.4169
    Security
    31 fixed · 1 critical · 3 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview

    KB5041587

    Android sharing and File Explorer fixes; Linux dual-boot issue noted

    Adds Android sharing from Windows Share and fixes several File Explorer problems. A separate Linux dual-boot issue is linked to the August 2024 Windows security update’s SBAT setting.

    Check the newer update, KB5043076
    Windows 11 version 22H2 Home and Pro receive only security updates until October 8, 2024; Microsoft recommends upgrading to continue receiving non-security updates. Enterprise and Education support continues after that date.
    Known issues: 1 open
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 22 changes

    • New Windows Share: You can share content from Windows to a paired Android device.
    • Improved Narrator: Narrator scan mode responds faster, especially when you read large documents in Microsoft Edge.
    • Improved Voice access: Voice access lets you dictate spelled characters faster and gives you more editing options for selecting, deleting, and moving through...
    Build
    22631.4112
    Restart
    Required