Updated October 24, 2026
The latest Windows 11 cumulative security updates were released on October 13, 2026. KB5127648 covers versions 26H2, 25H2 and 24H2, moving them to OS builds 26300.9711, 26200.9711 and 26100.9711. KB5127646 moves version 26H1 to OS build 28000.3231, and KB5126653 moves version 23H2 to OS build 22631.7652. Version 24H2 Home and Pro editions stopped receiving updates on October 13, 2026, and version 23H2 Enterprise and Education editions stop on November 10, 2026. The build numbers and dates come from Microsoft's Windows 11 release information and the KB5127648 release notes.
Current Windows 11 updates at a glance
The table lists the latest monthly security update for each supported Windows 11 version, following Microsoft's Windows 11 release information and the official KB history for each branch. Optional preview updates are not listed here. It keeps 26H2, 26H1, 25H2, 24H2, and the supported 23H2 editions visible so a new release cannot silently displace an older branch.
| Windows version | Latest security update | OS build | Release type and date |
|---|---|---|---|
| 26H2 | KB5127648 | 26300.9711 | Security, October 13, 2026 |
| 26H1 | KB5127646 | 28000.3231 | Security, October 13, 2026 |
| 25H2 | KB5127648 | 26200.9711 | Security, October 13, 2026 |
| 24H2 Enterprise and Education | KB5127648 | 26100.9711 | Security, October 13, 2026 |
| 23H2 Enterprise and Education | KB5126653 | 22631.7652 | Security, October 13, 2026 |
Version 26H2 became generally available on September 29, 2026. Version 24H2 Home and Pro editions reached end of updates on October 13, 2026, and Microsoft recommends moving those devices to version 26H2 or 25H2, according to Microsoft's 24H2 release-health page. Version 23H2 Enterprise and Education editions reach end of updates on November 10, 2026, according to Microsoft's 23H2 release-health page. Check the edition under Settings, System, About, in Windows specifications, before using the 24H2 or 23H2 row, as Microsoft's device information page shows.
Current Windows 11 issue statuses
Microsoft can revise an issue after a KB page is published. The table is derived only from the official release-health pages fetched for all five supported Windows branches: 26H2, 26H1, 25H2, 24H2, 23H2. The Microsoft release-health guide explains the status labels.
| Issue | Status | Originating update | Last Microsoft update |
|---|---|---|---|
| Remote Desktop connections might fail for non-admin users with error 0xC000000D | Mitigated | KB5124010 for 26H2, 25H2 and 24H2, and KB5124006 for 26H1, September 22, 2026 | October 13, 2026 |
| USB audio devices might fail to start or produce no sound | Mitigated | KB5124008 for 25H2 and 24H2, KB5124012 for 26H1 and KB5122880 for 23H2, September 8, 2026 | September 29, 2026 |
| Devices might experience a black screen or desktop loading issues after sign-in | Resolved by KB5127648 and KB5127646 | KB5120998 for 25H2 and 24H2, and KB5120996 for 26H1, August 27, 2026 | October 13, 2026 |
| Applications which require AC-3 audio decoding might close unexpectedly | Resolved by KB5127648 | KB5124010 for 26H2, 25H2 and 24H2, September 22, 2026 | October 13, 2026 |
| Domain-joined devices might lose their secure trust relationship with the domain | Resolved by KB5124010 and KB5124006 | KB5124008 for 25H2 and 24H2, and KB5124012 for 26H1, September 8, 2026 | October 8, 2026 |
| Incorrect notifications that "Microsoft Defender Antivirus is turned off" | Resolved | No originating update listed | September 30, 2026 |
The KB5127648 release notes also list a known issue that the release-health dashboards do not show. After the update, some devices might be unable to turn on Smart App Control in the Windows Security app if it was turned off, because the option is grayed out. Devices where Smart App Control is already on are not affected. Microsoft gives a registry change and a Group Policy as workarounds in the same notes.
What the October 13 updates change
KB5127648 includes the improvements from the September security update KB5124008, the out-of-band KB5129195 and the KB5124010 preview, so a device that skipped those updates gets their fixes with this one. A device that already installed them downloads only the new parts, according to the KB5127648 release notes.
Microsoft lists fixes for a black screen after sign-in when Explorer fails to start in multi-user setups such as Azure Virtual Desktop and FSLogix, AC-3 audio playback in some applications, printing failures with RAW or Generic Text Only printer drivers after the August 2026 security update, mouse input that stutters in some games, and fingerprint sign-in after a cold boot on some devices. The update also adds the new UTC-05:00 Manitoba time zone for the province's November 1, 2026 change and continues the rollout of updated Secure Boot certificates. The 26H1 update KB5127646 carries the Explorer, Storage Spaces Direct and game input fixes as well.
One change can affect network sign-in on some business devices. Where Credential Guard is turned off and the BlockNtlmv1SSO registry value is not set, Windows now blocks NTLMv1-derived credentials for single sign-on by default, which might affect Wi-Fi, Ethernet, and VPN connections that use MS-CHAPv2 authentication. Microsoft points to KB5066470 for details in the KB5127648 notes.
Microsoft also says the September preview KB5124010 was the final non-security preview update for version 24H2. Supported 24H2 editions keep receiving monthly security updates, and readers who want preview updates need a newer version.
Recent update history for 26H2, 25H2 and 24H2
This reverse-chronological list follows Microsoft's release information for the three versions that share the KB5127648 security update.
| Release date | Update type | KB and builds |
|---|---|---|
| October 13 | Security update | KB5127648, 26300.9711, 26200.9711 and 26100.9711 |
| September 29 | 26H2 release | 26H2 at build 26300.9457, and KB5124010 at 26300.9550 the same day, as Microsoft's release information lists it for 26H2 |
| September 22 | Optional preview | KB5124010, 26200.9550 and 26100.9550 |
| September 14 | Out-of-band update | KB5129195, 26200.9457 and 26100.9457 |
| September 8 | Security update | KB5124008, 26200.9445 and 26100.9445 |
| August 27 | Optional preview | KB5120998, 26200.9278 and 26100.9278 |
| August 11 | Security update | KB5121003, 26200.9168 and 26100.9168 |
Fix Windows Update installation problems
Start with the error shown in Settings and avoid making several changes at once. If Windows Update displays 0x80070643, use the focused Windows Update error 0x80070643 guide. If the scan never finishes, follow the stuck checking for updates guide.
For persistent download or installation failures, the Windows Update components reset guide explains the broader repair sequence. Restart and test after each bounded step so you know which action changed the result.
Windows 11 update questions
What is the latest Windows 11 security update
For versions 26H2, 25H2, and 24H2, it is KB5127648 from October 13, 2026, with builds 26300.9711, 26200.9711, and 26100.9711. For version 26H1, it is KB5127646, build 28000.3231. Version 23H2 Enterprise and Education use KB5126653, build 22631.7652. All three updates shipped on October 13, 2026.
Does Windows 11 version 24H2 still get updates
Not on Home and Pro editions. As of October 13, 2026, version 24H2 Home and Pro no longer receive monthly security and preview updates, and Microsoft recommends updating those devices to version 26H2 or 25H2, according to its 24H2 release-health page. The Enterprise, Education, IoT Enterprise and Enterprise multi-session editions of 24H2 keep receiving updates until October 12, 2027, according to Microsoft's release information.
Is KB5124010 a required update
No. Microsoft released KB5124010 on September 22 as an optional non-security preview under Optional updates. Its changes are included in the October 13 security update KB5127648, so installing KB5127648 covers them.
Should you install KB5127648
KB5127648 is the current cumulative security update for 26H2, 25H2, and 24H2. It resolves the black screen after sign-in and the AC-3 audio issue that began with earlier updates, according to the release-health dashboard. If you turned Smart App Control off and plan to turn it back on, read the known issue in the KB5127648 notes first.
Where can you verify a Windows issue status
Use the Microsoft release-health dashboard for your Windows version, for example 26H2 or 25H2, then open the linked KB notes for build and installation details. A KB page and the dashboard can list different issues, which is the case for the Smart App Control issue listed only in the KB5127648 notes.
