KB5082052

Microsoft released cumulative update KB5082052 for Windows 11, version 23H2 (2023 Update) as part of the April 2026 Patch Tuesday. The cumulative update package KB5082052 (Build 22631.6936) is intended for Windows 11, version 23H2 (Windows 11 2023 Update) on x64 (amd64) and ARM64 processors for Enterprise and Education editions. This security update includes fixes and quality improvements from KB5078883 (released March 10, 2026). How to download and install update KB5082052.

• Secure Boot (new features). The status of Secure Boot certificate updates on the device may be displayed in the Windows Security app (Settings > Privacy & security > Windows Security). Additional information about status alerts using icons and notifications. These improvements are disabled by default on commercial devices. With this update, Windows quality updates include additional high-confidence data targeting devices, increasing the coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive new certificates only after demonstrating a sufficient number of successful update signals, supporting a managed and phased rollout.
• Network. This update improves reliability when Windows uses SMB compression over QUIC. After installing this update, SMB over QUIC compression requests perform more consistently, reducing the likelihood of timeouts and supporting smoother, more reliable performance.
• Remote Desktop. This update enhances protection against phishing attacks using Remote Desktop (RDP) files. When opening an RDP file, Remote Desktop displays all requested connection settings before connecting, each disabled by default. A one-time security warning also appears when opening an RDP file for the first time on a device. For more information, see the article Overview of security warnings when opening Remote Desktop (RDP) files.

This update addresses an issue where the device could enter BitLocker recovery after a Secure Boot update. Also fixes a sign-in issue: after installing Windows updates released March 10, 2026 or later, some users may experience problems signing into applications with a Microsoft account. Even if the device has an active internet connection, an error message appears during sign-in: No Internet, preventing access to Microsoft services and applications such as Microsoft Teams.

Cumulative update KB5082052 for PCs is installed automatically through Windows Update for Enterprise and Education editions. To check, go to Settings > Windows Update and click Check for updates.

How the new features work:

Secure Boot (new features): The status of Secure Boot certificate updates may now be shown in the Windows Security app. The mechanism works via local checking of revoked and trusted certificate lists in UEFI. On commercial devices, these improvements are disabled by default. The system analyzes the history of successful updates on the device — new certificates are applied only after accumulating a threshold number of "success signals," enabling a phased rollout.

Network: Reliability is improved when using SMB compression over QUIC. The SMB driver (mrxsmb.sys) now negotiates compression parameters based on current channel bandwidth and QUIC buffer state. This reduces timeout risk via dynamic compression ratio adjustment and avoids deadlocks during data transfer under packet loss or high latency.

Remote Desktop: Phishing protection via RDP files is enhanced. When opening an .rdp file, the Remote Desktop client (mstsc.exe) parses its content and displays all requested connection settings (disk, printer, clipboard redirections), which are disabled by default. A one-time warning also appears on first launch. The system does not perform automatic connection without explicit confirmation of each redirection.

The last 10 Windows updates: