UPDATE 9/23:
www.elevenforum.com
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
To learn more about Windows update terminology, see types of Windows updates and monthly quality update types. For an overview, see the update history page for Windows 11, version 23H2.
Stay informed! Follow @WindowsUpdate for the latest updates from the Windows Release Health Dashboard.
Important: Windows updates do not install Microsoft Store application updates. If you are an enterprise user, see Microsoft Store apps - Configuration Manager. If you are a consumer user, see Get updates for apps and games in Microsoft Store.
This security update includes quality improvements. Key changes include:
Symptoms
After installing this Windows update released on or after September 9, 2025, you might fail to connect to shared files and folders using the Server Message Block (SMB) v1 protocol on NetBIOS over TCP/IP (NetBT). This issue can occur if either the SMB client or the SMB server has the September 2025 security update installed.
Note: The SMBv1 protocol is deprecated and no longer installed by default in modern versions of Windows and Windows Server. Deployments that use newer versions of the protocol, SMBv2 or SMBv3, are not affected by this problem.
Workaround
You can work around this issue by allowing network traffic on TCP port 445. By doing so, the Windows SMB connection will automatically switch to using TCP instead of NetBT, allowing the connection to resume successfully.
Next steps: We are working on a resolution in a future Windows update and will provide more information when it is available.
Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
Install this update
To install this update, use one of the following Windows and Microsoft release channels.
If you want to remove the LCU
To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.
Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.
File information
For a list of the files provided in this update, download the file information for cumulative update 5065431.
For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5064743) - versions 22621.5973 and 22631.5973.
support.microsoft.com
Check Windows Updates
UUP Dump:
64-bit ISO download:
ARM64 ISO download:
www.elevenforum.com
KB5065790 Windows 11 Cumulative Update Preview build 22631.5984 (23H2) - Sep. 23
UPDATE 10/14: https://www.elevenforum.com/t/kb5066793-windows-11-cumulative-update-build-22631-6060-23h2-oct-14.40891/ Microsoft Support: September 23, 2025 - KB5065790 (OS Build 22621.5984) Preview Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most...
www.elevenforum.com
Microsoft Support:
September 9, 2025 - KB5065431 (OS Builds 22621.5909 and 22631.5909)
Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
End of servicing
Starting June 26, 2025, Windows 11 version 22H2 (Enterprise and Education editions) will no longer receive non-security preview updates. However, monthly security updates will continue through October 14, 2025. After that date, this version will reach the end of servicing and will no longer receive security updates. To stay protected and up to date, we recommend you upgrade to the latest version of Windows 11.
Learn more
To learn more about Windows update terminology, see types of Windows updates and monthly quality update types. For an overview, see the update history page for Windows 11, version 23H2.
Stay informed! Follow @WindowsUpdate for the latest updates from the Windows Release Health Dashboard.
Important: Windows updates do not install Microsoft Store application updates. If you are an enterprise user, see Microsoft Store apps - Configuration Manager. If you are a consumer user, see Get updates for apps and games in Microsoft Store.
Highlights
- This update addresses security issues for your Windows operating system.
Improvements
Windows 11, version 23H2
Important: Use EKB KB5027397 to update to Windows 11, version 23H2.This security update includes quality improvements. Key changes include:
- This build includes all the improvements in Windows 11, version 22H2.
- There are no additional issues documented in this release.
Windows 11 servicing stack update (KB5064743) - 22621.5973 and 22631.5973
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.Known issues in this update
1 SMBv1 protocol connectivity
Symptoms
After installing this Windows update released on or after September 9, 2025, you might fail to connect to shared files and folders using the Server Message Block (SMB) v1 protocol on NetBIOS over TCP/IP (NetBT). This issue can occur if either the SMB client or the SMB server has the September 2025 security update installed.
Note: The SMBv1 protocol is deprecated and no longer installed by default in modern versions of Windows and Windows Server. Deployments that use newer versions of the protocol, SMBv2 or SMBv3, are not affected by this problem.
Workaround
You can work around this issue by allowing network traffic on TCP port 445. By doing so, the Windows SMB connection will automatically switch to using TCP instead of NetBT, allowing the connection to resume successfully.
Next steps: We are working on a resolution in a future Windows update and will provide more information when it is available.
How to get this update
Before you install this updateMicrosoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
Install this update
To install this update, use one of the following Windows and Microsoft release channels.
| Available | Next Step |
|---|---|
| This update downloads and installs automatically from Windows Update and Microsoft Update. |
|
| To get the standalone package for this update, go to Microsoft Update Catalog. |
If you want to remove the LCU
To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.
Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.
File information
For a list of the files provided in this update, download the file information for cumulative update 5065431.
For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5064743) - versions 22621.5973 and 22631.5973.
Source:
September 9, 2025—KB5065431 (OS Builds 22621.5909 and 22631.5909) - Microsoft Support
support.microsoft.com
Check Windows Updates
UUP Dump:
64-bit ISO download:
Select language for Windows 11, version 23H2 (22631.5909) amd64
Select language for Windows 11, version 23H2 (22631.5909) amd64 on UUP dump. UUP dump lets you download Unified Update Platform files, like Windows Insider updates, directly from Windows Update.
uupdump.net
ARM64 ISO download:
Select language for Windows 11, version 23H2 (22631.5909) arm64
Select language for Windows 11, version 23H2 (22631.5909) arm64 on UUP dump. UUP dump lets you download Unified Update Platform files, like Windows Insider updates, directly from Windows Update.
uupdump.net
UUP Dump - Download Windows Insider ISO
UUP Dump is the most practical and easy way to get ISO images of any Insider Windows 10 or Windows 11 version, as soon as Microsoft has released a new build. UUP Dump creates a download configuration file according to your choices, downloads necessary files directly from Microsoft servers, and...
www.elevenforum.com
Last edited:
