Note
- For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 24H2, see its update history page.
- Note Follow @WindowsUpdate to find out when new content is published to the Windows release health dashboard.
Important
See the prerequisite for ARM based devices in the Before you install this update section.
Improvements and fixes
This security update includes quality improvements. Below is a summary of the key issues that this update addresses when you install this KB. If there are new features, it lists them as well. The bold text within the brackets indicates the item or area of the change we are documenting.
- This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release.
If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
How to get this update
Before you install this update
Microsoft now combines the latest servicing stack update (SSU) for your operating system with the hotpatch update. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
If you are using Windows Update, the latest SSU will be installed with this update.
- Your device must run Windows 11, version 24H2. You must install KB5050009, dated January 14, 2025.
- You must enable virtualization-based security (VBS). This ensures that hotpatch updates install more securely. To learn more, see Memory integrity and VBS enablement.
- You must set the registry key listed below on Windows ARM based devices. This ensures that those devices are fully secure when you install hotpatch updates. This key stops the OS from loading Compiled Hybrid Portable Executable (CHPE) binaries.
Key: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
DWORD: HotPatchRestrictions=1
You must restart the computer after you set this registry key. Once set, you do not need to set it again because it will persist.
Install this update
To install this update, use one of the following Windows and Microsoft release channels.
| Available | Next Step |
|---|---|
| Yes | None. This update will be downloaded and installed automatically from Windows Update. |
File information
For a list of the files that are in this update, download the file information for cumulative update 5052105.
For a list of the files that are in the servicing stack update, download the file information for the SSU (KB5052085) - version 26100.3189.