Microsoft has released cumulative update KB5093998 for Windows 11 version 23H2 (2023 Update) as part of the June 2026 Patch Tuesday. Cumulative update package KB5093998 with build 22631.7219 is intended for Windows 11 version 23H2 on x64 and ARM64 processors and is available for Enterprise and Education editions. The update includes all fixes and changes from the previous package KB5087420 with build 22631.7079.
- Secure Boot. As part of Windows quality updates, additional high-confidence targeting data has now been added — this expands the coverage of devices that automatically receive new Secure Boot certificates. Certificates are delivered only after sufficient successful installation signals are received, ensuring a controlled phased rollout. Added Group Policy and Mobile Device Management setting LimitSecureBootRequiredServiceData under Computer Configuration > Administrative Templates > Windows Components > Secure Boot. When enabled, Windows limits the amount of Secure Boot service data transmitted, suppressing an event normally sent to Microsoft. The policy is included in the Windows Restricted Traffic Limited Functionality Baseline. More details about the policy can be found in the document Manage connections from Windows 10 and Windows 11 operating system components to Microsoft services.
- Boot Manager Servicing. Fixed an issue where on some devices with certain TPM validation settings, including incorrect PCR7 configurations, after updating boot files the system could enter BitLocker recovery mode. The issue could occur after installing the April 2026 security update KB5082052.
- Country and Operator Settings Asset. Updated profiles for certain mobile operators.
- Device Management. Improved connectivity for devices enrolled simultaneously in Microsoft Management Platform Configuration and Secure Lifecycle Device Management — devices synchronize and update certificates more reliably. Also improved reliability of devices with dual enrollment managed by MDM platforms, including Modern Management Platform Connector. Devices synchronize and update certificates more successfully.
- File Explorer. File Explorer search now works better with Chinese text and UTF-8 encoded files without byte order mark. Text in search results, Content view, and tooltips appears sharper and more consistently.
Cumulative update KB5093998 is installed automatically through Windows Update for Enterprise and Education editions. To check for update availability, go to the Settings menu, then to Windows Update and click Check for updates.
| Feature / Change | Performance Increase or Decrease | Optimization | PC Speed | Gaming Optimization |
|---|---|---|---|---|
| Secure Boot – expanded certificate targeting data | ⚪ No direct impact (boot process unchanged) | 🟢 Improved rollout logic (controlled phased delivery) | ⚪ No measurable change | ⚪ Not applicable |
| Secure Boot – LimitSecureBootRequiredServiceData policy | 🟢 Negligible network reduction (less telemetry sent when enabled) | 🟢 Network traffic optimization for restricted environments | ⚪ No change | ⚪ Not applicable |
| Boot Manager Servicing – TPM/BitLocker recovery fix | 🟢 Prevents boot-time delays (avoids unnecessary BitLocker recovery ~30–120 sec per incident) | 🟢 Startup reliability improvement | 🟢 Eliminates recovery-mode slowdown on affected devices | ⚪ No direct impact |
| Country and Operator Settings Asset – profile updates | ⚪ No impact | 🟡 Minor network configuration optimization for specific carriers | ⚪ No change | ⚪ Not applicable |
| Device Management – dual enrollment certificate sync | 🟢 Reduced sync failures (fewer retries, lower CPU/network overhead) | 🟢 Certificate synchronization reliability improved | ⚪ Negligible foreground impact | ⚪ Not applicable |
| File Explorer – Chinese text & UTF-8 search fix | 🟢 Marginally faster search result rendering (no re-encoding fallback) | 🟢 Text handling optimization for BOM-less UTF-8 | ⚪ No change | ⚪ Not applicable |
Find and Change Settings
| Setting | Where to find | How to change |
|---|---|---|
| Secure Boot Certificate Rollout Control | Computer Configuration > Administrative Templates > Windows Components > Secure Boot | Open Group Policy Editor or MDM console. Enable the policy "LimitSecureBootRequiredServiceData" to limit the amount of Secure Boot service data transmitted to Microsoft, suppressing certain events. Set to Disabled or Not Configured to allow full data transmission and automatic certificate rollout. |
| Boot Manager Servicing (BitLocker Recovery) |
Settings > Windows Update > Update history (Security update KB5082052 installation) |
Install the April 2026 security update KB5082052 via Windows Update to fix the issue where updating boot files on devices with certain TPM validation settings caused BitLocker recovery mode entry. No additional configuration is required after installation. |
| Country and Operator Settings Asset |
Settings > Network & internet > Cellular (Updated automatically via Windows Update) |
These profile updates for certain mobile operators are delivered automatically through Windows Update. No manual action is required. To check updates, go to Settings > Windows Update and click Check for updates. |
| Device Management Dual Enrollment |
Settings > Accounts > Access work or school (Enrollment via Microsoft Management Platform Configuration and Secure Lifecycle Device Management) |
Dual enrollment connectivity improvements are applied automatically via Windows Update. Devices enrolled simultaneously in MMP-C and Secure Lifecycle Device Management will synchronize and update certificates more reliably. To verify enrollment status, check Settings > Accounts > Access work or school. |
| File Explorer Search (Chinese/UTF-8) |
File Explorer > Search box Settings > Time & language > Language & region > Administrative language settings |
Improved search for Chinese text and UTF-8 files without BOM is available after installing the update. To benefit, ensure the Chinese language pack is installed under Settings > Time & language > Language & region. In File Explorer, use the search box normally — results, Content view, and tooltips will appear sharper. |
Official announcement on the Microsoft website.
The last 10 Windows updates:
| Update | Build | Version | Windows | Channel | Date |
|---|---|---|---|---|---|
| KB5124006 | 28000.3086 | 26H1 | Windows 11 | Preview | 2026-09-22 |
| KB5124010 | 26200.9550 | 26H2 | Windows 11 | Preview | 2026-09-22 |
| KB5124138 | 28120.3032 | 26H1 | Windows 11 | Experimental | 2026-09-18 |
| KB5124140 | 26220.9492 | 25H2 | Windows 11 | Beta | 2026-09-18 |
| KB5124137 | 26340.9502 | 26H2 | Windows 11 | Experimental | 2026-09-18 |
| KB5129242 | 22631.7584 | 23H2 | Windows 11 | Stable | 2026-09-14 |
| KB5129236 | 19045.7727 | 22H2 | Windows 10 | Stable | 2026-09-14 |
| KB5129195 | 26300.9457 | 26H2 | Windows 11 | Stable | 2026-09-14 |
| KB5129194 | 28000.2956 | 26H1 | Windows 11 | Stable | 2026-09-14 |
| KB5124115 | 26220.9472 | 25H2 | Windows 11 | Beta | 2026-09-11 |