Skip to the content
The Update Bureau

Windows 11

Windows 11 updates

All published releases for Windows 11, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

47 active known issues →

Windows 11 updates

  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview

    KB5101684

    Builds advance for 24H2 and 25H2

    Advances Windows 11, versions 25H2 and 24H2, to builds 26200.8973 and 26100.8973. Updates for 24H2 Home and Pro end October 13, 2026.

    Check the newer update, KB5121003
    Updates for Windows 11, version 24H2, Home and Pro editions end October 13, 2026.

    Key security notes

    • Other The preview updates version 25H2 to build 26200.8973 and version 24H2 to build 26100.8973.

    Read update Source: Microsoft

    Builds
    26100.8973 · 26200.8973
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Out-of-band update
    Out-of-band

    KB5121767

    Installation requires a restart

    Updates Windows 11 versions 25H2 and 24H2. Installing it requires a restart.

    Check the newer update, KB5101684
    Updates for Windows 11 version 24H2 Home and Pro end on October 13, 2026.

    Key security notes

    • Other The update installs build 26200.8894 on version 25H2 and build 26100.8894 on version 24H2, for x64 and Arm64 devices.
    • Security The dossier lists no vulnerabilities for this update.

    Read update Source: Microsoft

    Builds
    26100.8894 · 26200.8894
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update
    Zero-day Updated

    KB5101649

    Exploited Shell spoofing flaw; picture-password sign-up ends

    A Windows Shell spoofing flaw is already being exploited, and a BitLocker bypass flaw is public. New picture-password enrollment also ends.

    Check the newer update, KB5101681

    Key changes 384 CVEs · 10 changes

    • New Remote Desktop (RDP) Security: Trusted Remote Desktop publishers can use SHA-2 certificate thumbprints.
    • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically. Deployment continues over the coming months.
    • Improved Input: Some built-in Windows features might briefly stop responding to keyboard shortcuts in rare cases. Restarting the affected app can usual...

    Read update Source: Microsoft

    Build
    28000.2525
    Security
    384 fixed · 25 critical · 1 exploited
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update
    Zero-day Updated

    KB5101650

    Exploited Windows Shell spoofing flaw patched; picture passwords retired

    An actively exploited Windows Shell spoofing flaw is patched. New picture passwords can no longer be set up, and the update addresses problems with Office apps and Recycle Bin prompts.

    Check the newer update, KB5121767
    Windows 11 version 24H2 Home and Pro stop receiving updates on October 13, 2026. Enterprise and Education remain supported until October 12, 2027.

    Key changes 381 CVEs · 10 changes

    • New Remote Desktop (RDP) Security: Trusted Remote Desktop publishers can use stronger certificate thumbprints.
    • Improved Secure Boot: More eligible devices can receive the new Secure Boot certificates automatically.
    • Improved Input: In rare cases, some built-in Windows features might briefly stop responding to keyboard shortcuts.

    Read update Source: Microsoft

    Builds
    26100.8875 · 26200.8875
    Security
    381 fixed · 25 critical · 1 exploited
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day Updated

    KB5099414

    Windows Shell spoofing flaw exploited; RDP adds SHA-2 support

    An actively exploited Windows Shell spoofing flaw is addressed. Trusted Remote Desktop publishers can now use SHA-2 certificate thumbprints.

    Check the newer update, KB5120240
    Windows 11 version 23H2 Enterprise and Education reaches the end of updates on November 10, 2026. Plan to upgrade before then.

    Key changes 20 CVEs · 10 changes

    • New Remote Desktop (RDP) Security: Trusted Remote Desktop publishers can use SHA-2 certificate thumbprints. SHA-1 remains for backward compatibility but is planned for re...
    • Improved Secure Boot: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. More eligible devices can receive newer...
    • Improved Country and Operator Settings Asset (COSA): Profiles for certain mobile operators are brought up to date.

    Read update Source: Microsoft

    Build
    22631.7376
    Security
    20 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview

    KB5095091

    Point-in-time recovery and NPU details arrive; Office launch issue remains

    Adds point-in-time PC recovery and new Task Manager details for NPU use, alongside broad reliability improvements. Some third-party apps might still fail to open Office applications; a later update resolves the issue.

    Check the newer update, KB5101649
    Known issues: 1 open
    • Microsoft Office applications might fail to open from certain third-party apps

    Key changes 38 changes

    • New Point-in-time restore for Windows: You can roll your PC back to a recent automatic restore point, including its apps, settings, and personal files.
    • New Magnifier in Windows: Magnifier gives clearer screen-reader announcements when you zoom, change views, toggle color inversion, or turn Magnifier on or off.
    • New Magnifier in Windows: Magnifier can enlarge permitted protected content.

    Read update Source: Microsoft

    Build
    28000.2340
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview

    KB5095093

    New recovery tools, accessibility controls, and Bluetooth changes

    Adds recovery and update-pause features, expands accessibility and voice controls, and includes many reliability fixes. An Office-launch issue remains for some third-party apps; Microsoft says a later update resolves it.

    Check the newer update, KB5101650
    Windows 11, version 24H2 Home and Pro reaches end of updates on October 13, 2026; Enterprise and Education remain supported until October 12, 2027. Secure Boot certificates continue to arrive through Windows Update.
    Known issues: 1 open
    • Microsoft Office applications might fail to open from certain third-party apps

    Key changes 53 changes

    • New Point-in-time restore for Windows: A recovery feature can roll your PC back to a recent automatic restore point, including apps, settings, and personal files.
    • New Windows Update: You can pause updates by choosing an end date, for up to 35 days, and extend the pause by choosing another date.
    • New Accessibility: A screen tint can apply a full-screen color overlay to help reduce eye strain and improve readability.

    Read update Source: Microsoft

    Builds
    26100.8737 · 26200.8737
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update

    KB5095051

    BitLocker testing improves; custom folder icons may disappear

    Custom folder icons or localized names might be missing for files from downloaded or remote locations, though folder access is unchanged. The update also improves BitLocker Drive Encryption testing.

    Check the newer update, KB5095091
    Known issues: 1 open
    • Microsoft Office applications might fail to open from certain third-party apps

    Key changes 124 CVEs · 4 changes

    • Improved BitLocker: BitLocker Drive Encryption testing is more reliable because the files needed for the USB BIOS logo test are available.
    • Improved Folder customization: Custom folder icons or localized names might be missing for content from downloaded or remote locations. Folder access is not affected.
    • Improved AI components: Four AI components get updated versions on Copilot+ PCs.

    Read update Source: Microsoft

    Build
    28000.2269
    Security
    124 fixed · 21 critical
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update

    KB5094126

    Critical Remote Desktop flaws patched; Hyper-V crashes fixed

    Critical Remote Desktop flaws get security fixes, and crashes after KB5089573 are addressed. Some folder icons may disappear in downloaded or remote locations.

    Check the newer update, KB5095093
    Windows 11, version 24H2, Home and Pro editions stop receiving updates on October 13, 2026. Enterprise and Education editions remain supported until October 12, 2027.
    Known issues: 1 open
    • Microsoft Office applications might fail to open from certain third-party apps

    Key changes 107 CVEs · 6 changes

    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, in a phased rollout.
    • Improved Folder customization: Some downloaded or remote folders might lose custom icons or localized names. Folder access is not affected.
    • Improved AI components: Four AI components receive updates on Copilot+ PCs.

    Read update Source: Microsoft

    Builds
    26100.8655 · 26200.8655
    Security
    107 fixed · 17 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update

    KB5093998

    Fixes 158 vulnerabilities (22 critical)

    Critical code-execution flaws affect the Windows Kernel, DNS Client, Remote Desktop Client and other components. File Explorer search and Secure Boot also change.

    Check the newer update, KB5099414
    Windows 11, version 23H2 Enterprise and Education reaches end of updates on November 10, 2026. These editions will then stop receiving security and other updates.
    Known issues: 2 open
    • Microsoft Office applications might fail to open from certain third-party apps
    • OneDrive shortcut in File Explorer might not work in administrator mode

    Key changes 158 CVEs · 9 changes

    • New Secure Boot: A new setting lets organizations limit Secure Boot data sent to Microsoft.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, in a phased rollout.
    • Improved Country and Operator Settings Asset (COSA): Profiles for some mobile operators are brought up to date.

    Read update Source: Microsoft

    Build
    22631.7219
    Security
    158 fixed · 22 critical
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview

    KB5089570

    Shared Audio arrives; File Explorer and system reliability improve

    Adds Shared Audio, Xbox mode, new input and taskbar features, and improves several Windows components. It also fixes a File Explorer dark-mode flash and reduces Microsoft Store download and install errors.

    Check the newer update, KB5095051

    Key changes 37 changes

    • New Shared Audio: Two people can listen to the same audio from one PC using supported Bluetooth audio devices.
    • New Gaming: Xbox mode provides a full-screen interface for games on PCs, laptops, and tablets.
    • New File Explorer: File Explorer can work with more archive formats, including uu, cpio, xar, and NuGet packages.

    Read update Source: Microsoft

    Build
    28000.2179
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview

    KB5089573

    Shared Audio arrives; Secure Boot coverage expands

    Adds features including Shared Audio and camera controls, and addresses an installation failure for devices with little free EFI System Partition space. It also improves automatic delivery of updated Secure Boot certificates.

    Check the newer update, KB5094126
    Secure Boot certificates used by most Windows devices started expiring in June 2026. Windows updates continue to deliver new certificates; devices without them continue to start and operate normally.

    Key changes 35 changes

    • New Shared Audio: Two people can listen to the same audio from one PC at the same time using supported Bluetooth audio devices.
    • New Magnifier: Magnifier gives clearer announcements when you zoom, change views, toggle color inversion, or turn Magnifier on or off.
    • New Magnifier: Magnifier can magnify permitted protected content.

    Read update Source: Microsoft

    Builds
    26100.8524 · 26200.8524
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update

    KB5089548

    Critical DNS and graphics flaws addressed

    The update addresses 62 security vulnerabilities, including four critical ones, and improves network-device discovery and compatibility in some games.

    Check the newer update, KB5089570

    Key changes 62 CVEs · 4 changes

    • Improved Connectivity: Notifications used to discover devices on a network are more reliable, helping prevent the service from becoming unresponsive.
    • Improved Gaming: Some games that use embedded web content have improved compatibility, and JavaScript errors have less impact on in-game features.
    • Improved AI components: AI component updates apply only to Copilot+ PCs.

    Read update Source: Microsoft

    Build
    28000.2113
    Security
    62 fixed · 4 critical
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update

    KB5089549

    Critical DNS Client flaw patched; BitLocker startup risk reduced

    A critical DNS Client code-execution flaw is among the security fixes, and boot-file updates are less likely to trigger BitLocker recovery. Devices with little EFI partition space might fail installation.

    Check the newer update, KB5089573
    Secure Boot certificates began expiring in June 2026, but devices without newer certificates continue to start and receive standard updates. Support for Windows 11 version 24H2 Home and Pro ends October 13, 2026.
    Known issues: 1 open
    • May 2026 security update fails to install with error 0x800f0922

    Key changes 61 CVEs · 8 changes

    • New Secure Boot: Eligible devices get a new folder with example scripts for organizations that manage updates across many devices.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates through a phased rollout.
    • Improved Boot manager servicing update: Devices are more likely to start normally after boot file updates, without entering BitLocker recovery.

    Read update Source: Microsoft

    Builds
    26100.8457 · 26200.8457
    Security
    61 fixed · 4 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update

    KB5087420

    Critical DNS Client flaw patched; BitLocker recovery prompt remains

    Critical vulnerabilities include a DNS Client remote code execution flaw. Some managed PCs might ask for a BitLocker recovery key after the first restart.

    Check the newer update, KB5093998
    Windows 11, version 23H2 Enterprise and Education editions reach the end of updates on November 10, 2026.
    Known issues: 1 open Organizations and IT administrators
    • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key

    Key changes 56 CVEs · 7 changes

    • New Secure Boot: Eligible devices get a folder with example scripts for organizations that manage Secure Boot updates.
    • New Enterprise State Roaming (ESR): IT administrators can manage Enterprise State Roaming through Windows Backup for Organizations policies.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates through a phased rollout.

    Read update Source: Microsoft

    Build
    22631.7079
    Security
    56 fixed · 5 critical
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview

    KB5083806

    Narrator adds Copilot image descriptions; Remote Desktop warning fixed

    Adds Copilot-powered image descriptions in Narrator and fixes a Remote Desktop security warning that could render incorrectly across monitors with different scaling.

    Check the newer update, KB5089548

    Key changes 28 changes

    • New Narrator: Narrator can use Copilot to describe a focused image or the full screen. Copilot+ PCs also get instant, on-device image descriptions.
    • New Smart App Control: You can turn Smart App Control on or off without reinstalling Windows.
    • New Account Settings: Microsoft 365 Family subscribers can upgrade to a different Microsoft 365 plan from Settings > Accounts.

    Read update Source: Microsoft

    Build
    28000.1896
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview

    KB5083631

    Xbox mode brings a full-screen gaming view to PCs

    A full-screen Xbox mode and new input features arrive alongside File Explorer changes and fixes for Remote Desktop and notification hangs. This optional preview also has a BitLocker recovery-key issue on some managed devices.

    Check the newer update, KB5089549
    Support for Windows 11, version 24H2, Home and Pro editions ends October 13, 2026.
    Known issues: 1 open Organizations and IT administrators
    • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key

    Key changes 38 changes

    • New Gaming: Xbox mode adds a full-screen view that puts your games front and center.
    • New File Explorer: File Explorer can work with more archive formats.
    • New Input: Compatible pens and other input devices can give haptic feedback for some actions.

    Read update Source: Microsoft

    Builds
    26100.8328 · 26200.8328
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Security update

    KB5083768

    Fixes 119 vulnerabilities (3 critical)

    Remote code execution flaws in Remote Desktop, IKE and TCP/IP are among the security fixes. Secure Boot certificates and Remote Desktop warnings also get changes.

    Check the newer update, KB5083806
    Known issues: 1 open
    • Warnings related to Remote Desktop might not display correctly

    Key changes 119 CVEs · 7 changes

    • New Secure Boot: Windows Security can show the status of Secure Boot certificate updates.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates. The rollout is controlled and happens in phases.
    • Improved Networking: SMB compression over QUIC completes more reliably, reducing the chance of timeouts.

    Read update Source: Microsoft

    Build
    28000.1836
    Security
    119 fixed · 3 critical
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update

    KB5083769

    Critical IKE and TCP/IP flaws; Secure Boot status added

    Critical remote-code flaws affect Windows IKE and TCP/IP. The update also adds Secure Boot certificate status in Windows Security and hardens the blocklist for vulnerable drivers.

    Check the newer update, KB5083631
    Secure Boot certificates began expiring in June 2026. Devices without newer certificates will still start and receive standard Windows updates.
    Known issues: 2 open
    • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key
    • Warnings related to Remote Desktop might not display correctly

    Key changes 120 CVEs · 9 changes

    • New Secure Boot: Windows Security can show whether Secure Boot certificate updates have reached your device. The status feature is off by default on com...
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, through a controlled, phased rollout.
    • Improved Networking: SMB compression over QUIC completes more reliably, with fewer timeouts.

    Read update Source: Microsoft

    Builds
    26100.8246 · 26200.8246
    Security
    120 fixed · 2 critical
    Restart
    Required
  • Windows 11 23H2 Windows 11 23H2 Security update

    KB5082052

    Remote Desktop shows connection settings; Microsoft sign-in fixed

    Remote Desktop shows requested settings before connecting, and a Microsoft account sign-in error is fixed. The update also adds protections against vulnerable kernel drivers.

    Check the newer update, KB5087420
    Secure Boot certificates have started expiring. Devices without newer certificates continue to start and receive Windows updates; version 23H2 Enterprise and Education editions receive updates through November 10, 2026.
    Known issues: 2 open
    • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key
    • Warnings related to Remote Desktop might not display correctly

    Key changes 114 CVEs · 8 changes

    • New Secure Boot: Secure Boot certificate update status may appear in the Windows Security app.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, in a controlled, phased rollout.
    • Improved Networking: SMB compression over QUIC completes more consistently, reducing the chance of timeouts.

    Read update Source: Microsoft

    Build
    22631.6936
    Security
    114 fixed · 2 critical
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Out-of-band update
    Out-of-band

    KB5086672

    Setup error 0x80073712 fixed for March preview installs

    Fixes error 0x80073712 that stopped some Windows 11 24H2 and 25H2 devices from installing the March preview update. It also carries forward quality improvements from earlier releases.

    Check the newer update, KB5083769

    Key changes 4 changes

    • Improved Windows: Includes quality improvements carried forward from earlier updates.
    • Improved AI components: Copilot+ PCs receive updates to four AI components.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Builds
    26100.8117 · 26200.8117
    Restart
    Required
  • Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview

    KB5079489

    New taskbar network test, emoji, and recovery features arrive

    Adds features such as a taskbar network speed test, new emojis, and expanded recovery options, alongside reliability and performance improvements. It may require a restart.

    Check the newer update, KB5083768

    Key changes 32 changes

    • New Emoji: The emoji panel includes a small set of new emojis, one from each major category.
    • New Backup & Restore: The first-sign-in restore experience can restore user settings and Microsoft Store apps on more kinds of organization-managed devices.
    • New Quick Machine Recovery: Quick Machine Recovery turns on automatically on eligible Windows Professional PCs that are not joined to a domain or enrolled in enter...

    Read update Source: Microsoft

    Build
    28000.1764
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview

    KB5079391

    Installation error pauses rollout; Narrator adds Copilot descriptions

    Adds Narrator image descriptions through Copilot and other Windows changes, but Microsoft has stopped offering it to new devices after some installations failed. KB5086672 includes these changes and fixes the installation problem.

    Check the newer update, KB5086672
    Secure Boot certificates used by most Windows devices started expiring in June 2026. Windows 11, version 24H2 Home and Pro receive updates through October 13, 2026.

    Key changes 30 changes

    • New Narrator: Narrator can use Copilot to describe a focused image or the full screen. Copilot+ PCs also get instant on-device image descriptions.
    • New Smart App Control: You can turn Smart App Control on or off without reinstalling Windows.
    • New Account Settings: Microsoft 365 Family subscribers can upgrade to a different Microsoft 365 plan from Settings.

    Read update Source: Microsoft

    Builds
    26100.8116 · 26200.8116
    Restart
    Required
  • Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Out-of-band update
    Out-of-band

    KB5085516

    Microsoft account sign-ins recover from false “no Internet” errors

    Fixes sign-in failures for Microsoft account users after the March 10 update. Devices enrolled in Hotpatch receive the fix through KB5085518 without a restart.

    Check the newer update, KB5079391
    Support for Windows 11, version 24H2 Home and Pro editions ends on October 13, 2026.

    Key changes 3 changes

    • Improved AI Components: AI components receive updates on Copilot+ PCs.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates reliably.
    • Fix Microsoft account sign in: Some users can sign in to apps with a Microsoft account again instead of seeing a “no Internet” error despite having a working internet...

    Read update Source: Microsoft

    Builds
    26100.8039 · 26200.8039
    Restart
    Required