Views
4

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

Update Summary

KB5089549 updates Windows 11 version 25H2 and 24H2 to OS Builds 26200.8457 and 26100.8457 with the latest security fixes, quality improvements, Secure Boot rollout changes, and a servicing stack update. It also addresses BitLocker recovery after boot file updates and includes a known install issue fixed by KB5089573. Reference IDs: KB5083769, KB5083631, KB5092762.

Update Details

Security

  • Includes the latest security fixes and addresses vulnerabilities documented in the May 2026 Security Updates guide.
  • Improves Secure Boot certificate deployment by adding higher-confidence device targeting data and phased rollout controls.
  • Adds a new C:\Windows\SecureBoot folder on eligible devices with scripts for Secure Boot certificate status detection and automated deployment.
  • Fixes a boot manager servicing issue that could cause BitLocker Recovery after boot file updates on systems with certain TPM validation settings and invalid PCR7 configurations.

Bug Fixes

  • Improves startup reliability after boot file updates so devices start normally without entering BitLocker recovery.
  • Improves reliability of SSDP notifications to help prevent the service from becoming unresponsive.
  • Adds support for the 2023 daylight saving time change for the Arab Republic of Egypt.

New Features

  • Adds a new C:\Windows\SecureBoot folder on eligible devices containing example scripts for Secure Boot certificate management.
  • Introduces additional high-confidence device targeting data to expand automatic Secure Boot certificate coverage.
  • Includes AI component updates for Image Search, Content Extraction, Semantic Analysis, and Settings Model.

Known Issues

  • Some devices may fail to install the update with error 0x800f0922 when the EFI System Partition has very limited free space, especially 10 MB or less.
  • The installation may fail during restart at about 35–36% completion and roll back with the message 'Something didn’t go as planned. Undoing changes.'

Hints

  • This update includes changes from April 14, 2026—KB5083769 and April 30, 2026—KB5083631 Preview.
  • If previous updates are already installed, only the new changes in this package will be downloaded and installed.
  • The servicing stack update included is KB5092762 for OS Build 26100.8456.
  • Microsoft notes that Secure Boot certificates used by most Windows devices are set to expire starting in June 2026; administrators should review the certificate update guidance.
  • The known install issue is addressed in KB5089573.

Links

Product Information

Vendor: Microsoft

Product: Windows 11

Version: OS Builds 26200.8457 and 26100.8457

Release date: May 12, 2026