Update KB5101649 (build 28000.2525) for Windows 11 version 26H1 has been released as part of the July 2026 Patch Tuesday. The cumulative package contains various security improvements for internal OS functions and fixes 570 security issues, including three zero-day vulnerabilities. The build also includes all fixes and changes from the preliminary update KB5095091 (Build 28000.2340).
- Magnifier. Clearer Narrator announcements have been implemented, the ability to magnify protected content has been added, and the smoothness of the Lens mode has been improved.
- Task Manager. Tracking of NPU and GPU neural engines has been expanded.
- Camera. Support for Multi-App Camera and Basic Camera mode has been added.
- Windows Setup. The ability to choose a custom user folder name during the system installation stage has been introduced.
- Shell Performance. Launching apps and core interface elements — Start menu, Search, and Notification Center — has been accelerated.
- Personalization. Wallpaper retention has been improved.
- Windows Hello. The sign-in method, which is now used by default, has been refined.
- Search. File prioritization now triggers after typing just two characters.
- Dev Drive. The ability to specify the size in gigabytes has been added.
- USB and Docking Stations. The reliability of USB4 docks and the USB3 stack has been enhanced.
- Fonts. Times New Roman fonts for the Greek and Cyrillic alphabets have been updated.
- Emoji Panel. As part of standard deployment, the GIF image source has been updated (GIPHY instead of Tenor).
- Recycle Bin. Fixed the display of the file name upon deletion.
- Push Notifications. Resolved an issue causing apps using the Windows Push Notification Service (WNS) to freeze.
- Third-party Apps. Fixed an issue that appeared after installing the June 2026 security update KB5095091. Some apps using OLE Automation to interact with Microsoft Office were unable to launch Office or open documents.
- Secure Boot. The list of devices that can automatically receive new Secure Boot certificates has been expanded. Their deployment via Windows Update will continue over the coming months on supported PCs and unmanaged enterprise devices.
Known issues and important changes:
- Hotkeys. Behavior has changed when unregistering and clearing key combinations. In rare cases, some built-in Windows functions may temporarily stop responding to certain combinations. Restarting the app usually helps.
- Task Management. at.exe and schedcli.dll can no longer be used to manage AT Time and ATSvc servers. Microsoft recommends abandoning ATServer, which is disabled by default in Windows Server 2012. AT.exe and ATServer will be removed in future versions of Windows. Use schtasks.exe, PowerShell ScheduledTasks commands, or the TaskSchedulerService interface instead.
- Network. Security requirements for TDI transport registration have been strengthened. Apps using sockets via unregistered third-party TDI transports may stop working after installing the update. Registered transports are not affected by this change.
- RDP Security. Support for SHA-2 certificate thumbprints has been added for trusted RDP publishers. SHA-1 is retained for compatibility, but will be removed in the future. Microsoft recommends migrating to SHA-256 or a stronger algorithm as soon as possible.
To install the update, go to Settings > Windows Update and click Check for updates. A system restart will be required to complete the installation.
| Feature / Change | Performance Gain or Loss | Optimization | PC Speed | Gaming Optimization |
|---|---|---|---|---|
| Magnifier: clearer announcements, protected content magnification, smoother Lens mode | ⚪ No direct impact | 🟢 Minor — Lens mode rendering pipeline smoothed | 🟡 Slightly smoother Lens interaction | ⚪ No impact |
| Task Manager: NPU and GPU neural engine tracking | ⚪ No impact | 🟢 Medium — better observability of AI workloads | ⚪ No direct change | 🟡 Low — helps monitor GPU compute usage |
| Camera: Multi-App Camera and Basic Camera mode | ⚪ No impact | 🟢 Medium — shared camera stream efficiency improved | ⚪ No direct change | 🟡 Low — reduces camera contention during streaming |
| Windows Setup: custom user folder name | ⚪ No impact | ⚪ Not applicable | ⚪ No change | ⚪ No impact |
| Shell Performance: faster Start, Search, Notification Center launch | 🟢 Medium — app and shell element launch accelerated | 🟢 High — core UI responsiveness improved | 🟢 Medium — faster desktop interaction | 🟡 Low — less background UI lag during gaming |
| Personalization: improved wallpaper retention | ⚪ No impact | 🟡 Low — reduces unnecessary wallpaper reloads | ⚪ No direct change | ⚪ No impact |
| Windows Hello: refined default sign-in method | ⚪ No impact | 🟡 Low — faster authentication flow | 🟡 Low — quicker login | ⚪ No impact |
| Search: file prioritization after two characters | ⚪ No impact | 🟢 Medium — instant indexing response | 🟡 Low — reduced wait for results | ⚪ No impact |
| Dev Drive: size specification in gigabytes | ⚪ No impact | 🟡 Low — easier dev environment provisioning | ⚪ No change | ⚪ No impact |
| USB and Docking Stations: USB4 dock and USB3 stack reliability | 🟡 Low — fewer dropped connections | 🟢 Medium — more stable I/O path | 🟡 Low — less device re-enumeration lag | 🟢 Medium — stable external SSD/GPU dock throughput |
| Fonts: updated Times New Roman for Greek and Cyrillic | ⚪ No impact | ⚪ Not applicable | ⚪ No change | ⚪ No impact |
| Emoji Panel: GIF source switched to GIPHY | ⚪ No impact | 🟡 Low — lighter media fetching | ⚪ No direct change | ⚪ No impact |
| Recycle Bin: fixed file name display on deletion | ⚪ No impact | ⚪ Not applicable | ⚪ No change | ⚪ No impact |
| Push Notifications: WNS app freeze resolved | 🟢 Low — eliminates hanging background processes | 🟡 Low — fewer blocked threads | 🟡 Low — less system unresponsiveness | 🟡 Low — fewer background interruptions |
| Third-party Apps: OLE Automation fix for Office interaction | 🟡 Low — prevents app launch failures | 🟡 Low — restores automation reliability | ⚪ No direct change | ⚪ No impact |
| Secure Boot: expanded auto-certificate deployment | ⚪ No impact | 🟢 Medium — hands-off certificate renewal | ⚪ No change | ⚪ No impact |
| Known: Hotkey unregistration may temporarily block built-in shortcuts | 🔴 Low — rare loss of input responsiveness | 🔴 Low — unexpected shortcut breakage | 🔴 Low — temporary slow-down in workflow | 🔴 Low — possible game shortcut interference |
| Known: at.exe/schedcli.dll deprecation, ATServer removal announced | ⚪ No impact | 🟡 Low — migration required for legacy tasks | ⚪ No change | ⚪ No impact |
| Known: TDI transport registration security strengthened | 🔴 Medium — unregistered transports blocked | 🟢 Medium — tighter network stack integrity | ⚪ No change | 🔴 Low — niche multiplayer/anti-cheat drivers may break |
| Known: RDP SHA-2 thumbprint support added, SHA-1 to be removed | ⚪ No impact | 🟢 Medium — stronger publisher verification | ⚪ No change | ⚪ No impact |
Official announcement on the Microsoft website.
The last 10 Windows updates:
| Update | Build | Version | Windows | Channel | Date |
|---|---|---|---|---|---|
| KB5126657 | 19045.7807 | 22H2 (ESU) | Windows 10 | Stable | 2026-10-13 |
| KB5126653 | 22631.7652 | 23H2 | Windows 11 | Stable | 2026-10-13 |
| KB5127646 | 28000.3231 | 26H1 | Windows 11 | Stable | 2026-10-13 |
| KB5127648 | 26300.9711 | 26H2 | Windows 11 | Stable | 2026-10-13 |
| KB5127757 | 28120.3181 | 26H1 | Windows 11 | Experimental | 2026-10-07 |
| KB5127758 | 26220.9606 | 25H2 | Windows 11 | Beta | 2026-10-07 |
| KB5127754 | 28020.3172 | 26H1 | Windows 11 | Beta | 2026-10-07 |
| KB5127753 | 26340.9616 | 26H2 | Windows 11 | Experimental | 2026-10-07 |
| KB5124192 | 28120.3151 | 26H1 | Windows 11 | Experimental | 2026-10-02 |
| KB5124196 | 28020.3142 | 26H1 | Windows 11 | Beta | 2026-10-02 |