KB5089573


Microsoft has released preview update KB5089573 (build 26200.8514) for Windows 11 version 25H2 (2025 Update). The cumulative package is intended for devices based on x64 (amd64) and ARM64 processors.

The update is delivered in two phases — gradual rollout and normal rollout. In gradual rollout, the update is delivered in parts, and features do not reach devices simultaneously — their availability depends on the specific device. Normal rollout is a broad release to all compatible devices at the same time, typically when general availability (GA) is reached.

Below are the improvements and fixes included in KB5089573. Some of them are distributed gradually and may not be available immediately on all devices. The following is a list of new features and updates, followed by known issues and installation instructions.

As part of normal rollout, this non-security update includes quality improvements. Key change: additional high-confidence targeting data for Secure Boot has now been added to Windows quality updates — this expands the scope of devices that automatically receive new Secure Boot certificates. Certificates are delivered only after receiving sufficient successful installation signals, ensuring controlled gradual rollout.

If you have installed previous updates, only the new updates contained in this package will be downloaded and installed. To install KB5089573, go to Settings > Windows Update and click Check for updates. A system restart is required to complete installation. After the update, the Windows 11 build number will change to 26200.8514.


How the new features work:

Shared audio listening: The feature implements simultaneous transmission of an audio stream from a single PC to two Bluetooth devices via the Bluetooth LE Audio stack using Connected Isochronous Stream (CIS) isochronous channels. The system mixer routes a unified audio session to the A2DP/LE Audio profile, where an audio codec (e.g., LC3) encodes the stream, and the Bluetooth controller multiplexes it into two independent logical transport channels to synchronized receivers, minimizing desynchronization. Activation is performed via Quick Settings, initiating a broadcast session through Windows.Devices.Bluetooth.Background.

Screen magnifier: The screen magnifier mechanism has been extended with integration into the UI Automation API to generate voiced LiveRegionChanged events when zooming, switching modes, or inverting colors. In Lens mode, frame interpolation has been improved: motion smoothing is achieved through an increased cursor position polling rate and double buffering of the resulting screen buffer fragment. Protected content rendering now leverages the protected overlay mechanism (protected media path), allowing secure frame capture from the DRM sandbox without breaking the trust chain.

Task Manager: NPU monitoring has been added via the WMI provider Win32_PerfRawData and NpuTraceSession, which reads neural engine utilization metrics as a percentage, as well as dedicated (DedicatedMemory) and shared (SharedMemory) memory. The Performance tab now displays GPU neural blocks by polling KMD (Kernel-Mode Driver) counters via DxgKrnl. The Isolation column identifies processes in application containers by checking the IsAppContainer flag in EPROCESS->Win32Process. An issue with inflated CPU frequency in VMs after hibernation has been fixed: Task Manager now resets cached % Processor Time values upon detecting an S4 exit event.

Camera: Multi-App Camera uses a system proxy driver DevProxy that multiplexes the video stream from a physical device into multiple virtual channels. Each client process receives an isolated IMFCaptureSource instance, while the proxy layer performs frame buffer copying in userspace to avoid race conditions. Basic Camera mode forcibly restricts the capture pipeline to basic Media Foundation transforms, disabling advanced processing such as HDR, stabilization, or background blur. Mode management via Group Policy sets the registry key HKLM\Software\Policies\Microsoft\Windows\Camera, configuring MultiAppAccess and BasicMode.

General performance: Faster launch is achieved through pre-compilation of XAML markup into native structures via XamlDirect and aggressive caching of ready-made UI trees in Standby List memory. For Search, indexer initialization time has been reduced by deferred loading of ISearchCatalogManager providers. The Notification Center uses a background thread rendering technique with subsequent DirectComposition compositing, reducing first-frame latency.

Windows Hello: WinBio service optimization aims to reduce latency when resuming from Modern Standby: the biometric stack now caches the Secure Device Connector (SDC) session, avoiding a full TPM authentication cycle upon resume. For Enhanced Sign-in Security, a bug involving missing SECURE_REGISTRATION_METADATA in the NGC store, which caused unscheduled blocks, has been fixed. Validation now occurs through key synchronization with Azure AD.

Storage: In the Dev Drive creation dialog and Storage Settings page, the size field now accepts values in gigabytes, automatically converting them to megabytes with rounding to ReFS cluster boundaries (64K). Volume parameters are modified through IVdsVolume. The UAC prompt for the "Temporary files" section is now deferred: instead of elevating privileges upon page opening, an administrator token is requested only when attempting to access the protected Win32_VolumeCache branch via Shell::Execute with the runas verb.

Personalization: The automatic accent color selection algorithm analyzes wallpapers using a k-means clustering method in the LAB color space, isolating dominant and complementary shades with improved accuracy thanks to noise filtering and color contrast consideration. The wallpaper preservation mechanism has been modernized: instead of writing a path to the registry (WallPaper key), the system creates a cached copy of both resolutions in %AppData%\Microsoft\Windows\Themes\CachedFiles, preventing fallback to a solid color when the source file is unavailable during a reboot.

USB: USB4 display stability has been enhanced by implementing DisplayPort Alt Mode initialization retries via DP packet tunneling in the USB4 router. When resuming from sleep, the UcmCx driver now waits for full USB4 link recovery before sending a hot-plug event to the graphics subsystem. The USB3 stack received additional failure handlers: for transaction errors, a multi-level recovery mechanism is implemented — from transparent TD retry to endpoint reset via ClearFeature.

Sensors: The sensor power management system now more aggressively transitions the Sensor Hub to D3 (off) by monitoring, through DevicePowerStates, the activity of applications holding a wake-lock via ISensor interfaces. A timeout heuristic is introduced: if an application does not request new reports within a set period while the screen is locked, the sensor API forcibly powers down the hub, ignoring the client's ref-count.

HID devices: For malfunctioning HID devices that cyclically trigger interrupts, a suppression mechanism has been introduced: the HidClass driver monitors the error frequency and, upon exceeding a threshold, places the device into a "quiet" mode, resetting the PDO stack without continuous retries to read descriptors. A sleep-mode power filter has been implemented: the InputSuppression component blocks application attempts to exchange data with HID devices when the system transitions to S3/S0ix.

Input: Invocation of the touch keyboard on the login screen is forced via the ITextInputPanel API with a CredUI context check, ensuring reliable appearance even during a cold session start. Explorer.exe stability has been improved by fixing a race condition in the input switcher: calling Deactivate() on a closed language bar host window no longer leads to a double resource release. Clipboard history has been accelerated by caching recent items in the ClipboardServer process memory with asynchronous loading of the rest.

Fonts: In the Times New Roman font, the logic for forming combined diacritical marks has been corrected: mark anchor positioning in GPOS tables has been adjusted, enabling correct positioning of superscript and subscript diacritics for Cyrillic (e.g., Ӝ, Ҿ) and Greek characters. Rendering now performs glyph composition via Uniscribe/DirectWrite with correct offset calculated based on the updated vectors in the GDEF table.

Task Scheduler: Task Scheduler now saves column widths in the list view, serializing ListViewColumnWidths states into a binary registry block at the path HKCU\Software\Microsoft\Windows NT\CurrentVersion\Schedule\View. Upon loading the MMC snap-in, the console reads the values, restoring user preferences.

Desktop icons: The reliability of desktop shortcut loading has been increased by introducing asynchronous integrity verification of .lnk files via IShellLink with retries for target path resolution. If the target executable is temporarily unavailable at shell startup, instead of removing the shortcut, the system places it in a queue for deferred Shell cache refresh.

Microsoft Store: The download mechanism has been optimized by switching to parallel chunking with an adaptive block size, dynamically adjusted based on channel bandwidth measured through BackgroundTransfer. Error diagnostics have been improved: when downloads are blocked by Group Policy DisableOSUpgrade or TurnOffStore, the Store now translates the exact error code 0x80070422 with a failure reason message in the UI.

Reliability: Fault tolerance in sign-in scenarios has been increased through refactoring of LogonUI initialization: critical authentication components have been isolated into a separate host process, the crash of which does not destroy the session. In File Explorer, COM object handle leaks occurring during frequent navigation have been eliminated. Touchscreen gesture processing has been stabilized by correcting timestamps in the WM_TOUCH/WM_GESTURE chain. Theme changes systemically dampen the broadcast change notification queue, eliminating race conditions when updating all UI elements.


Official announcement on the Microsoft website.

The last 10 Windows updates:

Update Build Version Windows Channel Date
KB5089570 28000.2173 26H1 Windows 11 Preview 2026-05-14
KB5089573 26200.8514 25H2 Windows 11 Preview 2026-05-14
KB5087420 22631.7079 23H2 Windows 11 Stable 2026-05-12
KB5089548 28000.2113 26H1 Windows 11 Stable 2026-05-12
KB5087544 19045.7291 22H2 (ESU) Windows 10 Stable 2026-05-12
KB5089549 26200.8457 24H2/25H2 Windows 11 Stable 2026-05-12
KB5089417 26220.8370 25H2 Windows 11 Beta 2026-05-08
KB5089414 26300.8376 25H2 Windows 11 Experimental 2026-05-08
KB5089416 28020.2075 26H1 Windows 11 Experimental 2026-05-08
KB5083810 26220.8340 25H2 Windows 11 Beta 2026-05-01