Microsoft Releases Cumulative Update for Windows 11, Version 25H2 and 24H2

Microsoft has officially released its May 2026 Patch Tuesday updates, delivering critical security fixes and system improvements for multiple Windows 11 versions.

According to Microsoft release notes, the deployment includes cumulative update KB5089549 for Windows 11 versions 25H2 and 24H2, bringing the operating system builds to 26200.8457 and 26100.8457, respectively.

For users operating on Windows 11 version 23H2, the company has rolled out cumulative update KB5087420, which advances the system to build 22631.7079.

These mandatory updates address a variety of security vulnerabilities documented in the May 2026 Security Updates guide while seamlessly integrating non-security enhancements from previous optional preview releases.

Windows 11 Cumulative Update

A primary focus of this month’s release is expanding the coverage of devices eligible to receive new Secure Boot certificates automatically.

Microsoft notes that Windows quality updates now leverage high-confidence device-targeting data to ensure these certificates are distributed through a controlled, phased rollout, provided devices demonstrate sufficient successful update signals.

Security researchers at Tenable report that the KB5089549 update resolves severe vulnerabilities, including a heap-based buffer overflow in Microsoft Windows DNS (CVE-2026-41096) and a similar flaw in Windows Message Queuing (CVE-2026-34329).

Additionally, in Windows 11 version 23H2, Microsoft Defender SmartScreen has been upgraded to send file hashes for unsigned files in the Windows shell, allowing the system to leverage newer reputation models for enhanced application safety checks.

Beyond security patches, these cumulative updates introduce several critical quality-of-life improvements to stabilize enterprise and consumer environments.

The KB5089549 update specifically addresses a known issue affecting the boot manager, where certain devices were inadvertently forced into BitLocker recovery after updating boot files on systems with specific Trusted Platform Module validation settings.

Microsoft’s release documentation confirms that this update improves startup reliability and resolves connectivity issues by stabilizing Simple Service Discovery Protocol notifications to prevent service unresponsiveness.

Meanwhile, the KB5087420 update for version 23H2 resolves a rendering issue with the Remote Desktop Connection security warning dialog on multi-monitor setups. It introduces native management for Enterprise State Roaming through Windows Backup for organization policies.

To ensure seamless patch delivery, both releases combine the latest Servicing Stack Updates with the cumulative update packages.

Windows 11 versions 25H2 and 24H2 integrate SSU version 26100.8456, while version 23H2 includes SSU version 22621.6937, ensuring a robust framework for future on-premises deployments.

Furthermore, Microsoft continues to refine its integration of artificial intelligence by updating core AI components in the 25H2 and 24H2 builds.

The release specifically advances Image Search, Content Extraction, Semantic Analysis, and Settings Model components to version 1.2604.515.0.

Administrators are advised to allow these updates to download and install automatically via Windows Update or Microsoft Update Business channels to maintain optimal endpoint protection against emerging threats.

Follow us on Google News, LinkedIn, and X to Get More Instant Updates.