Microsoft has released cumulative update KB5099414 for Windows 11 version 23H2 (2023 Update) as part of the July 2026 Patch Tuesday. The build number is 22631.7376. The main goal of the release is to address 570 security issues, including three zero-day vulnerabilities, along with several internal OS feature improvements. If you have previous updates installed, only the new components of this package will be downloaded and installed.
- Security. The built-in Windows curl tool has been updated to version 8.21.0. The update also includes various security improvements for internal OS functions for July 2026 and helps protect your device. In total, during the July 2026 Patch Tuesday, Microsoft fixed 570 security issues, including three zero-day vulnerabilities.
- Secure Boot. The list of devices that can automatically obtain new Secure Boot certificates has been expanded. Their deployment via Windows Update will continue in the coming months on supported PCs and unmanaged corporate devices.
- Third-party applications. Fixed an issue introduced after installing the June security update KB5093998. Some applications using OLE Automation to interact with Microsoft Office were unable to launch Office or open documents.
- File Explorer. Fixed an issue where the OneDrive shortcut did not work when launching File Explorer as an administrator.
- Country and operator settings. Updated profiles for some mobile operators.
- Hotkeys. Changed behavior when unregistering and clearing key combinations. In rare cases, some built-in Windows functions may temporarily stop responding to certain combinations. Usually, restarting the application helps.
- Network. Strengthened security requirements for TDI transport registration. Applications using sockets through unregistered third-party TDI transports may stop working after installing the update. Registered transports are not affected by this change.
- Recycle Bin. Fixed an error where the permanent deletion confirmation dialog displayed the internal file name from the Recycle Bin instead of the original name.
- RDP Security. Added support for SHA-2 certificate fingerprints for trusted RDP publishers. SHA-1 is still retained for compatibility, but will be removed in the future. Microsoft recommends migrating to SHA-256 or a stronger algorithm as soon as possible.
No known issues have been recorded at this time. To install update KB5099414, open Settings, go to Windows Update, and click Check for updates. The package installs automatically. What did not fit into the main text: this cumulative update is mandatory and is downloaded through the standard Windows servicing mechanism; for Home and Pro editions, deployment may follow the standard schedule, while Enterprise and Education editions have immediate availability.
| Feature / Change | Performance Increase or Decrease | Optimization | PC Speed Impact | Gaming Optimization |
|---|---|---|---|---|
| curl tool update to version 8.21.0 | 🟢 Minor increase (faster network operations) | 🟢 Improved networking stack efficiency | ⚪ Negligible (tool-specific improvement) | ⚪ No direct impact |
| Fix for 570 security issues (incl. 3 zero-days) | ⚪ No measurable change | 🟢 Critical security hardening | ⚪ No impact (defensive patches) | 🟢 Reduced exploit risk during online gaming |
| Secure Boot certificate auto-deployment expansion | ⚪ No performance change | 🟢 Boot integrity optimization | 🟡 Minimal (slightly longer first boot) | 🟢 Better anti-cheat compatibility |
| OLE Automation / Office launch fix | 🟢 Restored performance (bug regression fixed) | 🟢 COM/OLE interop stability restored | 🟢 Fix for noticeable slowdown in affected apps | ⚪ No direct gaming relevance |
| OneDrive shortcut fix in admin File Explorer | ⚪ No performance change | 🟡 Shell namespace optimization | ⚪ No speed impact | ⚪ Not applicable |
| Mobile operator profile updates | 🟡 Minor improvement (cellular connectivity) | 🟢 Network selection logic refined | 🟡 Faster carrier reconnection possible | 🟡 Marginal latency reduction on cellular |
| Hotkey unregistration behavior change | 🟡 Slight decrease in rare edge cases | 🟡 Input stack hardening (temporary hangs possible) | 🔴 Temporary unresponsiveness for some shortcuts | 🟡 Minor disruption if hotkeys clash during gameplay |
| TDI transport registration security hardening | 🔴 Potential breakage for unregistered 3rd-party transports | 🟢 Network driver security enforced | 🔴 Apps using unregistered TDI may stop working | 🟡 Some game overlays/VPNs may be affected |
| Recycle Bin deletion dialog display fix | ⚪ No performance change | 🟡 UI correctness improvement | ⚪ No speed impact | ⚪ Not applicable |
| RDP SHA-2 certificate fingerprint support | ⚪ No performance change | 🟢 Cryptographic agility for RDP | ⚪ No local speed impact | 🟡 Better remote gaming stream security |
Official announcement on the Microsoft website.
The last 10 Windows updates:
| Update | Build | Version | Windows | Channel | Date |
|---|---|---|---|---|---|
| KB5126657 | 19045.7807 | 22H2 (ESU) | Windows 10 | Stable | 2026-10-13 |
| KB5126653 | 22631.7652 | 23H2 | Windows 11 | Stable | 2026-10-13 |
| KB5127646 | 28000.3231 | 26H1 | Windows 11 | Stable | 2026-10-13 |
| KB5127648 | 26300.9711 | 26H2 | Windows 11 | Stable | 2026-10-13 |
| KB5127757 | 28120.3181 | 26H1 | Windows 11 | Experimental | 2026-10-07 |
| KB5127758 | 26220.9606 | 25H2 | Windows 11 | Beta | 2026-10-07 |
| KB5127754 | 28020.3172 | 26H1 | Windows 11 | Beta | 2026-10-07 |
| KB5127753 | 26340.9616 | 26H2 | Windows 11 | Experimental | 2026-10-07 |
| KB5124192 | 28120.3151 | 26H1 | Windows 11 | Experimental | 2026-10-02 |
| KB5124196 | 28020.3142 | 26H1 | Windows 11 | Beta | 2026-10-02 |