Microsoft Windows 11 26H1 Update Version OS Build 28000.2525

KB5101649 for Windows 11 version 26H1 (OS Build 28000.2525) includes July 2026 security updates, non-security improvements from KB5095051 and KB5095091, and servicing stack update KB5121292. It also adds RDP SHA-2 thumbprint support and security hardening for TDI transport registration.

• Includes the July 2026 security updates and documented security vulnerability fixes.
• Adds additional high-confidence device targeting data to expand automatic deployment of new Secure Boot certificates.
• Enforces TDI transport registration requirements; apps using sockets over unregistered third-party TDI transports might stop working.
• Remote Desktop security: adds support for SHA-2 certificate thumbprints for trusted RDP publishers and recommends migrating away from SHA-1 to reduce phishing risk.

• Fixes an issue where certain third-party apps using OLE Automation with Microsoft Office might fail to launch Office or open documents after KB5095091.
• Fixes a Recycle Bin issue where the confirmation dialog might show an internal file name instead of the original file name when permanently deleting a file.
• Changes hotkey unregister and cleanup behavior to address rare cases where built-in Windows experiences stop responding to certain keyboard shortcuts.

• Adds support for SHA-2 certificate thumbprints for trusted RDP publishers.
• Introduces additional high-confidence device targeting data for Secure Boot certificate deployment.

• AT.exe and schedcli.dll can no longer be used to administer AT Time or ATSvc servers; Microsoft recommends using schtasks.exe, PowerShell ScheduledTasks commands, or the ITaskSchedulerService interface.
• ATServer has been disabled by default since Windows Server 2012 and is expected to be removed in future Windows versions.
• Microsoft recommends migrating RDP file trust management to SHA-256 thumbprints or stronger algorithms as soon as possible.
• If previous updates are already installed, only the new updates in this package will be downloaded and installed.
• Includes servicing stack update KB5121292 (Build 28000.2524) to improve Windows Update installation reliability.
• AI components are updated to version 1.2605.856.0 for Image Search, Content Extraction, Semantic Analysis, and Settings Model.

• Servicing stack update guidance
  https://learn.microsoft.com/windows/deployment/update/servicing-stack-updates#simplifying-on-premises-deployment-of-servicing-stack-updates

Product Information

Vendor: Microsoft

Product: Windows 11

Product type: Software

Application category: Utilities

Platform: Windows

Variant: 26H1

Version: OS Build 28000.2525

Vendor release date: Jul 14, 2026

Original release notes: View on vendor site

Published on updatealert.io: Jul 16, 2026

Description: Client operating system for modern desktop and enterprise environments.