KB5093998

Microsoft has released cumulative update KB5093998 for Windows 11 version 23H2 (2023 Update) as part of the June 2026 Patch Tuesday. Cumulative update package KB5093998 with build 22631.7219 is intended for Windows 11 version 23H2 on x64 and ARM64 processors and is available for Enterprise and Education editions. The update includes all fixes and changes from the previous package KB5087420 with build 22631.7079.

• Secure Boot. As part of Windows quality updates, additional high-confidence targeting data has now been added — this expands the coverage of devices that automatically receive new Secure Boot certificates. Certificates are delivered only after sufficient successful installation signals are received, ensuring a controlled phased rollout. Added Group Policy and Mobile Device Management setting LimitSecureBootRequiredServiceData under Computer Configuration > Administrative Templates > Windows Components > Secure Boot. When enabled, Windows limits the amount of Secure Boot service data transmitted, suppressing an event normally sent to Microsoft. The policy is included in the Windows Restricted Traffic Limited Functionality Baseline. More details about the policy can be found in the document Manage connections from Windows 10 and Windows 11 operating system components to Microsoft services.
• Boot Manager Servicing. Fixed an issue where on some devices with certain TPM validation settings, including incorrect PCR7 configurations, after updating boot files the system could enter BitLocker recovery mode. The issue could occur after installing the April 2026 security update KB5082052.
• Country and Operator Settings Asset. Updated profiles for certain mobile operators.
• Device Management. Improved connectivity for devices enrolled simultaneously in Microsoft Management Platform Configuration and Secure Lifecycle Device Management — devices synchronize and update certificates more reliably. Also improved reliability of devices with dual enrollment managed by MDM platforms, including Modern Management Platform Connector. Devices synchronize and update certificates more successfully.
• File Explorer. File Explorer search now works better with Chinese text and UTF-8 encoded files without byte order mark. Text in search results, Content view, and tooltips appears sharper and more consistently.

Cumulative update KB5093998 is installed automatically through Windows Update for Enterprise and Education editions. To check for update availability, go to the Settings menu, then to Windows Update and click Check for updates.

How the new features work:

Secure Boot: As part of Windows quality updates, additional high-confidence targeting data has been added—this expands the coverage of devices that automatically receive new Secure Boot certificates. Certificates are delivered only after sufficient successful installation signals are received, ensuring a controlled phased rollout. Added Group Policy and Mobile Device Management setting LimitSecureBootRequiredServiceData under Computer Configuration > Administrative Templates > Windows Components > Secure Boot. When enabled, Windows limits the amount of Secure Boot service data transmitted, suppressing an event normally sent to Microsoft. The policy is included in the Windows Restricted Traffic Limited Functionality Baseline. More details about the policy can be found in the document Manage connections from Windows 10 and Windows 11 operating system components to Microsoft services.

Boot Manager Servicing: Fixed an issue where on some devices with certain TPM validation settings, including incorrect PCR7 configurations, after updating boot files the system could enter BitLocker recovery mode. The issue could occur after installing the April 2026 security update KB5082052.

Country and Operator Settings Asset (COSA): Updated profiles for certain mobile operators.

Device Management: Improved connectivity for devices enrolled simultaneously in Microsoft Management Platform Configuration and Secure Lifecycle Device Management—devices synchronize and update certificates more reliably. Also improved reliability of devices with dual enrollment managed by MDM platforms, including Modern Management Platform Connector. Devices synchronize and update certificates more successfully.

File Explorer: File Explorer search now works better with Chinese text and UTF-8 encoded files without byte order mark. Text in search results, Content view, and tooltips appears sharper and more consistently.

The last 10 Windows updates: