KB5079491


Microsoft released cumulative update KB5079491 for Windows 11, version 25H2 for insiders on the Beta channel – Windows 11 Insider Preview Quality Update (26220.8138). Users of the Beta channel will now receive Windows 11, version 25H2 updates, which are available through the enablement package KB5066383 (build 26220.xxx).

Known issues: resolved an issue affecting the use of Braille font support in previous builds (Accessibility). Also fixed a bug where some Windows Insider participants had their system displayed in English instead of the selected language interface.

Installation via Windows Update: go to Settings > Windows Update and click Check for updates. A computer restart is required to complete the installation.


How the new features work:

Administrator protection: When enabled, the system creates an isolated access token with minimal privileges for each trusted application instead of a full administrator token. When protected operations are accessed, the system invokes UCI (User Consent Interface) via Secure Desktop. Requirements: reboot to register policies in lsass.exe and update markers in secdll.

Touchpad right‑click zone adjustment: The feature dynamically redefines the lower‑right corner zone of the touchpad via the HID‑class driver. On physical click, coordinates are compared against the configured zone size (default/small/medium/large) in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Touchpad. For proprietary drivers, a Custom option appears — the setting persists via the manufacturer’s API.

Task Manager NPU performance columns: New columns use Windows.AI.MachineLearning API and WMI class Win32_NPUUsage. Task Manager polls the NPU through the MCDM (Microsoft Compute Driver Model) driver to retrieve engine load, dedicated and shared memory. Columns are added via the table header context menu — data updates at ~1 second intervals.

Task Manager isolation column: The column displays the process isolation container type: AppContainer, FullTrust, or None. Task Manager calls GetAppContainerNamedObjectPath and checks the isolation SID token. If a process runs in a lightweight container (e.g., UWP or isolated Win32 app), the column shows “Yes” plus the container name. Useful for security analysis.


Official announcement on the Microsoft website.

The last 10 Windows updates:

Update Build Version Windows Channel Date
KB5083778 28020.1873 26H1 Windows 11 Experimental 2026-04-24
KB5083780 26300.8289 25H2 Windows 11 Experimental 2026-04-24
KB5083781 26220.8283 25H2 Windows 11 Beta 2026-04-24
KB5083631 26200.8313 25H2/24H2 Windows 11 Preview 2026-04-17
KB5083725 28020.1863 26H1 Windows 11 Canary 2026-04-17
KB5083726 26300.8276 25H2 Windows 11 Dev 2026-04-17
KB5083728 26220.8271 25H2 Windows 11 Beta 2026-04-17
KB5082052 22631.6936 23H2 Windows 11 Stable 2026-04-14
KB5083768 28000.1836 26H1 Windows 11 Stable 2026-04-14
KB5082200 19045.7184 22H2 (ESU) Windows 10 Stable 2026-04-14