Aplica-se a
Windows 11 version 24H2, all editions

Data de Lançamento:

29/09/2025

Versão:

OS Build 26100.6725

Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.

To learn about Windows update terminology, see the pages on types of Windows updates and monthly quality update types. For an overview, see the update history page for Windows 11, version 24H2

Follow @WindowsUpdate to find out when new content is published to the Windows Release Health Dashboard.

Highlights

A gradual rollout distributes a release update over a period of time instead of all at once. This means that users receive the update at different times, and it might not be immediately available to all users.

  • [Click to Do]​​​​​​​

    • New!  New and popular action tags in the Click to Do context menu help you discover the latest and most widely used AI-powered actions.

    • New!  Click to Do provides more concise summaries with Summarize action. The output for text entities is shorter and more focused. Ongoing improvements continue to enhance clarity and precision.

  • [Agents in Settings] New! A direct navigation link to the corresponding settings page is available from agent search results. This improvement is currently rolling out to agents in Settings on Copilot+ PCs.

  • [Desktop] New! You can now move the hardware indicators for brightness, volume, airplane mode, and virtual desktops to different positions on your screen. To change their position, go to Settings > System Notifications, and then pick from the options in the Position of the onscreen pop-up in the dropdown list.

  • [Taskbar] New! IT administrators no longer need to restart explorer.exe to apply the pinning policy. After applying the policy, users might see a pin on their taskbar within approximately 8 hours, depending on the refresh interval.

  • [File Explorer]  

    • New!  Use AI actions in File Explorer to edit images or summarize documents. Just right click (or press Shift+F10) on the file and select AI actions. This experience is not yet available for customers in the EEA (European Economic Area).   ​​​​​​​Image actions: You can now use four AI-powered image actions with .jpg, .jpeg, and .png files. Visual Search searches the web using an image instead of text. Blur Background opens the Photos app to highlight the subject and blur the background. Erase Objects removes unwanted elements from your photo. Remove Background uses Paint to change any image leaving a smooth cut out of the subject.AI actions in Microsoft 365 make it easier to work with your documents. With the Summarize action in Copilot, you can quickly generate summaries of files stored in OneDrive and SharePoint—no need to open each one. This AI action requires an active Microsoft 365 subscription and a Copilot license (Microsoft account and Microsoft Entra ID supported).

    • Improved: The File Explorer context menu has been updated to remove the accent colored backplate behind packaged app icons in the Open With list when right clicking a file (for example, Snipping Tool). This change makes icons easier to see.

    • Improved: Made underlying changes to help improve the performance of launching cloud files from File Explorer and loading context menus.

    • Fixed: Icons and text might become overlapping on the desktop when using increased text scaling.

    • Fixed: Icons in the details, preview, and navigation panes of File Explorer aren’t properly mirrored when using an Arabic or Hebrew display language.

  • [Windows Share] New! ​​​​​​​You can pin your favorite apps in the Windows share window to quickly access them when you need them.

  • [Advanced Settings] New! The redesigned Advanced settings page (Settings > System > Advanced) is an update of the For Developers page and makes it easier to find key options. Settings include File Explorer + version control, which shows Git details such as branch, diff count, and last commit message directly in File Explorer when you select a repository folder.

  • [Input]

    • New!  Insert dashes with new keyboard shortcuts. You can quickly insert an en dash (–) or em dash (—) while typing.  Press Windows logo key+Minus (-) to insert an en dash, and Windows logo key+Shift+Minus (-) to insert an em dash. If Magnifier is running, Windows logo key+hyphen (-) will zoom out Magnifier instead of inserting an en dash.

    • Fixed: After waking a PC from sleep, touch input might not work to enter your pin on the sign-in screen.

  • [Narrator]

    • New!  Narrator now includes Braille Viewer, which shows both on-screen text and its Braille equivalent on a refreshable Braille display. To open Braille viewer and start Narrator, press the Windows logo key+Ctrl+Enter, press Narrator key+Alt+B. A new floating window opens and updates dynamically as you navigate with Narrator. Before using Braille viewer, you must set up Narrator for Braille. To download and install the Braille support package, go to Settings > Accessibility > Narrator > Use a Braille display with Narrator.

    • New!  Narrator offers a smoother, more natural experience in Word, with improved voice feedback, reliable continuous reading, and better navigation for footnotes, comments, lists, and tables. Enhancements include consistent list announcements, clearer table boundaries, and intuitive selection feedback.

  • [Administrator Protection Preview] Administrator protection aims to protect free floating admin rights for administrator users allowing them to still perform all admin functions with just-in-time admin privileges. This feature is off by default and needs to be enabled via OMA-URI in Intune or via group policy.

  • [Passkeys] New!  A seamless plugin passkey manager integration in Windows 11. You can now use plugin credential manager for passkeys. To set up a plugin credential manager, install a credential manager application that supports integration then go to Settings > Accounts > Passkeys > Advanced options. Turn on support and complete user verification using Windows Hello (through face recognition, fingerprint, or PIN). Once verified, you can use your existing passkeys saved to the plugin credential manager or save new passkeys.

  • [Settings] 

    • New!  The Manage or clear your Bing search history entry under Settings > Privacy & security > Search > Search history has been removed. You can now manage your Bing search history directly from the Privacy dashboard, accessible via the Privacy resources link under Related settings on that Settings page.

    • New!  More time, language, and keyboard settings have moved from Control Panel to Settings. You can now add additional clocks, change your time server, and customize date and time formatting—including AM/PM symbols—directly from Settings > Time & language > Date & time. Number and currency formats, Unicode UTF-8 support, and options to copy language and region settings to other accounts are now under Settings > Time & language > Language & region. Keyboard character repeat and cursor blink rate settings are now easier to find under Settings > Accessibility.

    • Improved: Made underlying changes to help improve the performance of loading the apps list in Settings > Apps > Installed apps.

    • Fixed: Settings > System > Storage > Disks and Volumes might show a link for BitLocker drive encryption in unsupported cases. Selecting it results in BitLocker opening and displaying error 0x80004005.

  • [Gaming] 

    • New!  Xbox controller support for gaming on Windows 11 has been improved. Short pressing the Xbox button opens Game Bar. A new change we're introducing is when you long press the Xbox button, it will open Task View. Pressing and holding the Xbox button continues to turn off the game controller.

    • Improved: Underlying changes have been made to improve performance when gaming with Game Bar or other overlays active on top of users' game. This update might especially help users with multiple monitors that have different refresh rates.

  • [Other] New! This feature offers a modern interface that aligns with Windows 11 visuals across several dialogs, including the one shown when an app fails to open.

  • [Voice access]

    • New!  Natural language commanding in Voice access provides users with the flexibility to speak commands naturally, using filler words and synonyms, rather than rigid, predefined commands. This feature is now available for Intel and AMD-powered Copilot+ PCs.​​​​ 

    • Fixed: Voice access might get stuck in a state where it says it’s listening but is stuck and doesn’t respond.

  • [Dynamic Lighting] Fixed: The Dynamic Lighting Background Controller might occasionally consume excessive CPU after unlocking your PC.

  • [High Dynamic Range (HDR)] Fixed: HDR might unexpectedly immediately turn off after being enabled in Settings.

  • [Media (known issue)] Fixed: This update addresses an issue that affects playback of protected content in certain Blu-ray, DVD, and digital TV apps that use Enhanced Video Renderer with HDCP enforcement. This can occur after installing KB5064081.

  • [Performance] Improved: Added support for Certificate Revocation List (CRL) partitioning in Windows Certificate Authorities.

  • [Quick Settings]: Fixed: If you had to enter a PIN for your device to cast from Quick Settings, pressing Enter wouldn’t confirm the PIN.

  • [Windows Hello] Fixed: You might unexpectedly see a message saying “Something happened and your PIN isn’t available” when attempting to enter safe mode.

  • [Windows Sandbox] Fixed: When Windows Sandbox is enabled, the VmmemCMFirstBoot process might consume large amounts of CPU after sign-in, causing your PC to become unresponsive.

Improvements

This non-security update includes quality improvements. The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.

  • [Hyper-V] Fixed: This update addresses an issue that affects starting Hyper-V virtual machines with Trusted Platform Module (TPM) on ARM64 devices running supported versions of Windows. This can occur after installing KB5064081.

  • [Input]

    • Fixed: An issue where some characters didn’t display correctly when using the Chinese Input Method Editor (IME).

    • Fixed: This update addresses an issue where certain Chinese characters appeared as empty boxes in some text fields, such as those used in Connection Manager Administration Kit, when a character limit was set.

    • Fixed: Addresses an issue in File Explorer where tooltips in the Recent section displayed certain extended Unicode characters—such as Chinese characters from Extension B through Extension F and other four-byte characters—as square boxes or unreadable symbols.

  • [Networking (known issue)]​​​​​​​ Fixed: This update addresses an issue where you might not be able to connect to shared files and folders if you're using the Server Message Block (SMB) v1 protocol on NetBIOS over TCP/IP NetBIOS (NetBT). This can happen after installing update KB5065426.

  • [Servicing] Fixed: This update addresses an issue that disrupted Windows Update for customers using Windows Server Update Services (WSUS).

  • [Windows Hello] Fixed: This update addresses an issue that affects Windows Hello PIN setup with error 0x80090010 on devices joined to Microsoft Entra ID domains after installing Windows updates released on or after KB5060842.

If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

AI Components

This release updates the following AI components:

AI Component

Version

Image Search

1.2509.1022.0

Content Extraction

1.2509.1022.0

Semantic Analysis

1.2509.1022.0

Settings Model

1.2509.1022.0

Windows 11 servicing stack update (KB5067437)- 26100.6717

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Known issues in this update

Symptoms

Some Digital TV and Blu-ray/DVD apps might not play protected content as expected after installing the August 29, 2025, Windows non-security preview update (KB5064081), or later updates.

Apps that use Enhanced Video Renderer with HDCP enforcement or Digital Rights Management (DRM) for digital audio might show copyright protection errors, frequent playback interruptions, unexpected stops, or black screens.

Streaming services are not affected. 

​​​​​​​Workaround

This issue is partially resolved. Problems affecting certain applications that use Enhanced Video Renderer with HDCP enforcement have been addressed in the September 2025 Windows preview update (KB5065789) and later updates.

We recommend installing the latest update for your device. It includes important improvements and fixes, including a resolution for this issue.

However, some apps that use DRM for digital audio might still experience problems.

​​​​​​​We’re investigating a long-term solution for affected apps and will share more information when it's available.

How to get this update

Before you install this update

Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Install this update

To install this update, use one of the following Windows and Microsoft release channels.

Available

Next Step

Included

Open Start  > Settings Update & Security > Windows Update. In the Optional updates available area, you will find the link to download and install available updates.

Check for optional updates

If you want to remove the LCU

To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.

Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.

File information

For a list of the files provided in this update, download the file information for cumulative update 5065789.

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5067437) - version 26100.6717.

Precisa de mais ajuda?

Quer mais opções

Explore subscription benefits, browse training courses, learn how to secure your device, and more.