Windows 11, version 26H1

Build history

• Windows 11 26H1 Windows 11 26H1 Security update

  Updated Nov 12

  KB5132059 Nov 10, 2026

  NTLM signing becomes the default for client connections

  Security fixes cover Windows components, while NTLM clients now offer message signing by default for non-anonymous connections. USB audio startup, printer setup, and Remote Desktop certificate errors also get fixes.

  Key changes 598 CVEs · 10 changes

  • Improved Update schedule: There is no non-security preview update in the second half of December 2026. Monthly security and preview updates resume in January 202...
  • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically. Certificate deployment continues over the coming months.
  • Improved Security: NTLM clients now offer message signing by default for non-anonymous connections. This helps reduce exposure to relay attacks.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview Updated Nov 10

  KB5127653 Oct 28, 2026

  DPAPI prompt warning and new touchpad gestures

  A warning flags the planned April 2027 retirement of prompt-based DPAPI protection. New touchpad gestures, Emoji 17.0, and other Windows features also arrive in this optional preview.

  Check the newer update, KB5132059

  A new DPAPI warning says prompt-based protection will be retired in April 2027. Apps and users that rely on it should move to another protection flow and migrate existing data.

  Key changes 60 changes

  • New File Explorer: The preview pane lets you choose to preview downloaded HTML files. Other files, such as PDFs, preview automatically.
  • New File Explorer: File Explorer Home remembers which sections you expanded or collapsed.
  • New File Explorer: Cloud file thumbnails are more reliable in the Details pane. File properties are also easier to find.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Out-of-band update

  Out-of-band

  KB5134134 Oct 26, 2026

  Offline devices receive updated trusted root certificates

  Devices that miss automatic certificate trust updates get an updated trusted-root payload. The package also updates AI components and improves update installation reliability.

  Check the newer update, KB5127653

  Key changes 3 changes

  • Improved Certificates: Devices that cannot get certificate trust updates receive an updated trusted-root list in the Windows update.
  • Improved AI components: Four built-in AI components get a version update. These components apply only to Copilot+ PCs.
  • Improved Servicing stack: The Windows update installation process gets a reliability improvement.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  Zero-day Updated Nov 10

  KB5127646 Oct 13, 2026

  Exploited Windows Shell bypass patched; Explorer crashes fixed

  Attackers are exploiting a Windows Shell security bypass, and the update fixes Explorer crashes after sign-in on some multi-user systems.

  Check the newer update, KB5134134

  Key changes 1,055 CVEs · 7 changes

  • New ReFS security: ReFS volumes on external storage gain audit logging and optional security controls.
  • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically.
  • Improved AI components: Image Search, Content Extraction, Semantic Analysis, and Settings Model update to version 1.2608.951.0.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview Updated Nov 8

  KB5124006 Sep 22, 2026

  Remote Desktop failures reported; taskbar moves to four screen edges

  Adds taskbar and Start menu customization, while some non-admin Remote Desktop connections can fail on devices with Administrator protection enabled.

  Check the newer update, KB5127646

  Key changes 40 changes

  • New Taskbar: You can place the taskbar at the bottom, top, left, or right of the screen. Search and the smaller taskbar option are supported only at...
  • New Taskbar: A smaller taskbar option reduces the taskbar height and icon size while keeping Start, Search, and the system tray available.
  • New Start menu: You can choose a small or large Start menu, in addition to the Automatic size.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Out-of-band security update

  Out-of-band Updated Nov 11

  KB5129194 Sep 14, 2026

  Secure Kernel protections and fixes for Remote Desktop and USB audio

  Secure Kernel protections address a critical elevation-of-privilege flaw. The release also fixes Remote Desktop failures and some USB audio modes, while other USB audio problems remain.

  Check the newer update, KB5124006

  Key changes 2 CVEs · 7 changes

  • Improved Security: Adds protection against a flaw that could let someone gain higher access to the PC.
  • Improved Security: Adds protection against a critical flaw that could let someone gain higher access to the PC.
  • Improved AI components: Updates four AI components. These updates apply only to Copilot+ PCs.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  Zero-day Updated Nov 10

  KB5124012 Sep 8, 2026

  An exploited Windows Update Stack flaw is closed

  An actively exploited Windows Update Stack flaw gets a security fix, and Teams and Outlook crashes on Arm64 PCs are addressed. The update also changes Morocco time and improves remote-session audio.

  Check the newer update, KB5129194

  Key changes 640 CVEs · 7 changes

  • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically as deployment continues over the coming months.
  • Improved Date and Time: Morocco local time reflects the country's move to permanent UTC+00:00 on September 20, 2026.
  • Improved OMA-DM Client Logging: Device management logs include more details to help administrators troubleshoot connection problems.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5120996 Aug 27, 2026

  Voice isolation and external fingerprint sign-in arrive

  Adds Voice Isolation and Korean support to Voice Access, plus support for external fingerprint readers with Windows Hello. It also improves File Explorer, power settings and other Windows features.

  Check the newer update, KB5124012

  Key changes 41 changes

  • New File Explorer: Middle-clicking a folder in the Address Bar or Home page opens it in a new tab.
  • New Voice Access: Voice Access adds Voice Isolation, which reduces interference from other speakers and background noise. It requires a one-time voice se...
  • New Voice Access: Voice Access adds Korean language support.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  Zero-day Updated Nov 10

  KB5121000 Aug 11, 2026

  Exploited WinSock flaw patched; Drop Tray removed

  An actively exploited flaw in the WinSock driver is patched, and Drop Tray and its Settings control are removed.

  Check the newer update, KB5120996

  Key changes 196 CVEs · 5 changes

  • Improved Device: TPM maintenance reports the status of EK certificates more accurately.
  • Improved Secure Boot: More devices qualify to receive new Secure Boot certificates automatically.
  • Improved AI components: Four AI components are updated to version 1.2605.856.0.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5101681 Jul 28, 2026

  Preview moves version 26H1 to build 28000.2608

  Advances version 26H1 to OS build 28000.2608. Windows may request a restart.

  Check the newer update, KB5121000

  Key security notes

  • Other The preview advances version 26H1 to OS build 28000.2608.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  Zero-day Updated Nov 10

  KB5101649 Jul 14, 2026

  Exploited Shell spoofing flaw; picture-password sign-up ends

  A Windows Shell spoofing flaw is already being exploited, and a BitLocker bypass flaw is public. New picture-password enrollment also ends.

  Check the newer update, KB5101681

  Key changes 384 CVEs · 10 changes

  • New Remote Desktop (RDP) Security: Trusted Remote Desktop publishers can use SHA-2 certificate thumbprints.
  • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically. Deployment continues over the coming months.
  • Improved Input: Some built-in Windows features might briefly stop responding to keyboard shortcuts in rare cases. Restarting the affected app can usual...

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5095091 Jun 23, 2026

  Point-in-time recovery and NPU details arrive; Office launch issue remains

  Adds point-in-time PC recovery and new Task Manager details for NPU use, alongside broad reliability improvements. Some third-party apps might still fail to open Office applications; a later update resolves the issue.

  Check the newer update, KB5101649

  Known issues: 1 open

  • Microsoft Office applications might fail to open from certain third-party apps

  Key changes 38 changes

  • New Point-in-time restore for Windows: You can roll your PC back to a recent automatic restore point, including its apps, settings, and personal files.
  • New Magnifier in Windows: Magnifier gives clearer screen-reader announcements when you zoom, change views, toggle color inversion, or turn Magnifier on or off.
  • New Magnifier in Windows: Magnifier can enlarge permitted protected content.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  KB5095051 Jun 9, 2026

  BitLocker testing improves; custom folder icons may disappear

  Custom folder icons or localized names might be missing for files from downloaded or remote locations, though folder access is unchanged. The update also improves BitLocker Drive Encryption testing.

  Check the newer update, KB5095091

  Known issues: 1 open

  • Microsoft Office applications might fail to open from certain third-party apps

  Key changes 124 CVEs · 4 changes

  • Improved BitLocker: BitLocker Drive Encryption testing is more reliable because the files needed for the USB BIOS logo test are available.
  • Improved Folder customization: Custom folder icons or localized names might be missing for content from downloaded or remote locations. Folder access is not affected.
  • Improved AI components: Four AI components get updated versions on Copilot+ PCs.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5089570 May 26, 2026

  Shared Audio arrives; File Explorer and system reliability improve

  Adds Shared Audio, Xbox mode, new input and taskbar features, and improves several Windows components. It also fixes a File Explorer dark-mode flash and reduces Microsoft Store download and install errors.

  Check the newer update, KB5095051

  Key changes 37 changes

  • New Shared Audio: Two people can listen to the same audio from one PC using supported Bluetooth audio devices.
  • New Gaming: Xbox mode provides a full-screen interface for games on PCs, laptops, and tablets.
  • New File Explorer: File Explorer can work with more archive formats, including uu, cpio, xar, and NuGet packages.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  KB5089548 May 12, 2026

  Critical DNS and graphics flaws addressed

  The update addresses 62 security vulnerabilities, including four critical ones, and improves network-device discovery and compatibility in some games.

  Check the newer update, KB5089570

  Key changes 62 CVEs · 4 changes

  • Improved Connectivity: Notifications used to discover devices on a network are more reliable, helping prevent the service from becoming unresponsive.
  • Improved Gaming: Some games that use embedded web content have improved compatibility, and JavaScript errors have less impact on in-game features.
  • Improved AI components: AI component updates apply only to Copilot+ PCs.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5083806 Apr 30, 2026

  Narrator adds Copilot image descriptions; Remote Desktop warning fixed

  Adds Copilot-powered image descriptions in Narrator and fixes a Remote Desktop security warning that could render incorrectly across monitors with different scaling.

  Check the newer update, KB5089548

  Key changes 28 changes

  • New Narrator: Narrator can use Copilot to describe a focused image or the full screen. Copilot+ PCs also get instant, on-device image descriptions.
  • New Smart App Control: You can turn Smart App Control on or off without reinstalling Windows.
  • New Account Settings: Microsoft 365 Family subscribers can upgrade to a different Microsoft 365 plan from Settings > Accounts.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  KB5083768 Apr 14, 2026

  Fixes 119 vulnerabilities (3 critical)

  Remote code execution flaws in Remote Desktop, IKE and TCP/IP are among the security fixes. Secure Boot certificates and Remote Desktop warnings also get changes.

  Check the newer update, KB5083806

  Known issues: 1 open

  • Warnings related to Remote Desktop might not display correctly

  Key changes 119 CVEs · 7 changes

  • New Secure Boot: Windows Security can show the status of Secure Boot certificate updates.
  • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates. The rollout is controlled and happens in phases.
  • Improved Networking: SMB compression over QUIC completes more reliably, reducing the chance of timeouts.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5079489 Mar 26, 2026

  New taskbar network test, emoji, and recovery features arrive

  Adds features such as a taskbar network speed test, new emojis, and expanded recovery options, alongside reliability and performance improvements. It may require a restart.

  Check the newer update, KB5083768

  Key changes 32 changes

  • New Emoji: The emoji panel includes a small set of new emojis, one from each major category.
  • New Backup & Restore: The first-sign-in restore experience can restore user settings and Microsoft Store apps on more kinds of organization-managed devices.
  • New Quick Machine Recovery: Quick Machine Recovery turns on automatically on eligible Windows Professional PCs that are not joined to a domain or enrolled in enter...

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  KB5079466 Mar 10, 2026

  Secure Boot certificate rollout expands; COM allowlisting works as expected

  The update expands the phased delivery of new Secure Boot certificates and improves COM allowlisting in Windows Defender Application Control. It also includes 40 Important-severity security fixes.

  Check the newer update, KB5079489

  Key changes 40 CVEs · 5 changes

  • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, after showing enough successful update signals.
  • Improved Windows Defender Application Control: COM objects are allowed as expected when the endpoint security policy is set higher than the allowlisting policy.
  • Improved Windows System Image Manager: A warning dialog helps you check that a catalog file you select comes from a trusted source.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Optional preview

  Preview

  KB5077239 Feb 24, 2026

  New camera, accessibility and gaming features; recovery hangs fixed

  Adds features across Windows 11 26H1, including camera effects, cross-device activities and handheld gaming. It also addresses issues such as BitLocker recovery and Windows Sandbox hangs.

  Check the newer update, KB5079466

  Key changes 60 changes

  • New Agent in Settings: The Settings Agent supports more languages, including German, Portuguese, Spanish, Korean, Japanese, Hindi, Italian and Simplified Chin...
  • New Agent in Settings: The Settings search results menu shows more results and adds a scroll bar so you can browse them.
  • New Agent in Settings: Recommended settings can show an inline agent option for settings you changed recently.

  Read update → Source: Microsoft ↗

• Windows 11 26H1 Windows 11 26H1 Security update

  Zero-day

  KB5077179 Feb 10, 2026

  Exploited Shell and MSHTML bypasses patched; startup failure fixed

  The update addresses five actively exploited vulnerabilities, including security-feature bypasses in Windows Shell and MSHTML. It also addresses a problem that could prevent Windows from starting.

  Check the newer update, KB5077239

  Key changes 26 CVEs · 7 changes

  • Improved AI components: Four AI components receive updates on Copilot+ PCs.
  • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
  • Fix Graphics: An issue that could cause a system error on certain GPU configurations is addressed.

  Read update → Source: Microsoft ↗