Win Update KB5094126 Windows 11 Cumulative Update build 26100.8655 (24H2) and 26200.8655 (25H2) - June 9



 Microsoft Support:

This cumulative update for Windows 11, version 25H2 and 24H2 (KB5094126) includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release.

Visit the Windows release health dashboard for the latest status on this release.


Announcements and messages

This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices.

Windows Secure Boot certificate expiration
Important
: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices over the past several months. Devices that haven’t received the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install. Updated certificates will continue to be delivered through Windows Update in the coming months.


End of updates​

Windows 11, version 24H2 Home and Pro editions will reach end of updates on October 13, 2026. Devices running these editions will no longer receive fixes for known issues, time zone updates, technical support, or monthly security and preview updates containing protections from the latest security threats. Enterprise and Education editions remain supported until October 12, 2027.

To stay protected and up to date, we recommend you upgrade to the latest version of Windows 11.

Change log​

Change date​
Change description​
June 10, 2026Update: Folder customization added.

Improvements

This update includes new features and quality improvements that were part of the following update:
This update addresses security vulnerabilities documented in the following guide:
The following summary outlines key quality improvements addressed by this update. The bold text within the brackets indicates the item or area of the change.
  • [Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout.
  • [Virtualization] Fixed: This update addresses an issue that could result in Stop errors HYPERVISOR_ERROR (0x20001) and KMODE_EXCEPTION_NOT_HANDLED (0x1E) after installing KB5089573 on some devices during system restarts, virtual machine operations, or while running some gaming applications
  • [Folder customization] This update introduces a security hardening change to how Windows processes desktop.ini files. As a result, some users might notice missing custom folder icons or localized folder names for content from downloaded or remote locations. Note that access to folders is not affected. For more information, see Custom folder icons or localized folder names might not appear after installing the June 2026 Windows security update.
If you've already installed previous updates, your device will download and install only the new updates included in this package.

AI Components

This release updates the following AI components:

AI Component​
Version​
Image Search1.2605.856.0
Content Extraction1.2605.856.0
Semantic Analysis1.2605.856.0
Settings Model1.2605.856.0

Windows 11 servicing stack update (KB5094135)- 26100.8648

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update

Before you install this update

Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates.

Deployment

If you deploy dynamic updates such as this update to an existing Windows image, ensure the boot.stl file is included as part of the installation media. Failure to include the file might prevent devices from successfully starting from the installation media and can result in error code 0xc0430001.

Note: The boot.stl file is used during Secure Boot validation and must match the Windows version and architecture of the image you are updating.

To ensure the boot.stl file is included as part of the installation media, do one of the following:
  • Use the Update WinPE script to update an existing Windows image. (Recommended)
  • Manually copy the boot.stl file from the device Windows\Boot\EFI folder to the corresponding folder on your installation media before deploying the update.
For information about how to apply Dynamic Update packages to existing Windows images, see Update Windows installation media with Dynamic Update.

Install this update

To install this update, use one of the following Windows and Microsoft release channels.

Available​
Next Step​
Included
This update downloads and installs automatically from Windows Update and Microsoft Update.
Included
To install this release from the Microsoft Update Catalog, select the option that matches your device architecture (arm64 or x64), and then follow the instructions.

File information

For a list of the files provided in this update, download the file information for cumulative update 5094126.

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5094135) - version 26100.8648.


 Source:



Check Windows Updates


UUP Dump:

64-bit ISO download:

ARM64 ISO download:

 
Last edited:

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦26200.8655 ♦♦♦♦♦♦♦25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 5302)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Total Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Keyboard
    Logitech Classic Keybooard 200
    Mouse
    Logitech Optical M-BT96a
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 15 years?
I'm not gonna see ANY latency when running Zelda. ^^
Yeah, I meant in general your not going to see any improvements in applications. It's all purely around launching them.
 

My Computer

System One

  • OS
    W11
    Computer type
    PC/Desktop
    CPU
    Ryzen 9800X3D
    Motherboard
    MSI X870E Carbon
    Memory
    2x24GB T-Force Delta 6400 MT/S
    Graphics Card(s)
    MSI RTX 5080 SUPRIM LIQUID SOC
    PSU
    Corsair RM850X
    Case
    Antec Flux
    Cooling
    Corsair Titan RX360
Why is the MCT ISO .8653 and not .8655?
Beats me. In a YT video a reviewer also talks about this way to get your system to 26200.6855. But apparently it doesn't. The .ISO created by MCT is also leaner; 6,25Gb while the official v2 version is 7,76Gb. OK the official one let you choose Home/Pro etc. The MCT is fixed to the Windows version you already have. (While it also contains Home/Pro etc. Install let not you change that version) Amazingly the number of packages drops down from 174 down to 139.

Interrogating the install.esd before the new install also reveals the build version is also 8653;


Code:
C:\Windows\System32>Dism /Get-WimInfo /WimFile:M:\Sources\install.esd /index:5

Deployment Image Servicing and Management tool
Version: 10.0.26100.8521

Details for image : M:\Sources\install.esd

Index : 5   (Index for Windows 11 Pro, Index for Windows Home = 1)
Name : Windows 11 Pro
Description : Windows 11 Pro
Size : 25.276.282.305 bytes
WIM Bootable : No
Architecture : x64
Hal : <undefined>
Version : 10.0.26200
ServicePack Build : 8653
ServicePack Level : 0
Edition : Professional
Installation : Client
ProductType : WinNT
ProductSuite : Terminal Server
System Root : WINDOWS
Directories : 33813
Files : 148847
Created : 6-6-2026 - 05:36:50
Modified : 13-6-2026 - 10:40:11 (Download time.)
Languages :
        nl-NL (Default)

The operation completed successfully.

Package overview of 26200.8655

Code:
------------------------------------------------------------------
This 26200.8655 Update contains 9 different build versions.
------------------------------------------------------------------
   75X  1742           
   17X  26100.1        
    1X  6717           
    1X  8037           
    2X  8117           
    1X  8648           
   75X  8655           
    1X  9335           
    1X  9337           
======================================
Total number of packages found: 174

Package overview of 26200.8653

Code:
------------------------------------------------------------------
This 26200.8653 Update contains 9 different build versions.
------------------------------------------------------------------
   61X  1742           
   11X  26100.1        
    1X  6717           
    1X  7900           
    1X  8037           
    1X  8117           
    1X  8648           
   61X  8653           
    1X  9335           
==================================================
Total number of packages found: 139

What I find remarkable is that the number of 1742 base version drops also from 74 to 61. (In both updates the number of 1742 and the version build packages are the same.) During all updates of 25H2 that number was still the same. During new installs and In-Place-Installments. Despite a new install it does not partitions your disk but reuses it. At the end it also contains an windows.old directory with no other directory's then your C:\Users\<Username> Deleted this one because I already have a backup of the whole disk.
 

My Computer

System One

  • OS
    Win 11 Pro "25H2" Build 26200.8653, Zorin OS Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self built
    CPU
    Intel® Core™ i7-12700KF 12th Gen. (S1700)
    Motherboard
    ASUS Prime Z690-A, BIOS v4505 (Z690 Intel Chipset)
    Memory
    32GB DDR5 5600-36 Vengeance (2x16)
    Graphics Card(s)
    PCIe4.0 Asus NVIDIA RTX3060Ti
    Sound Card
    Onboard; Realtek
    Monitor(s) Displays
    34" LG 34UC79G-B Curved 21:9 144Hz
    Screen Resolution
    2560x1080 (No HDR)
    Hard Drives
    250Gb Samsung 870PRO NVMe (Win 11 Pro)
    1Tb Samsung 980PRO NVMe
    1Tb Samsung 970EVO NVMe
    2Tb Samsung 990PRO NVMe with heatsink.
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    4Tb WDC WD40EZRZ Blue SATA (Int.)
    3Tb WDC WD30EFRZ Red SATA (Int.)
    256Gb Samsung 840PRO SSD (RHEL 9,5)
    256Gb Samsung 850PRO SSD (Zorin OS Pro 18)
    PSU
    Coolermaster 850W V2 Gold with internal 12cm exaust fan
    Case
    Be-Quiet Pure Base 600.
    Cooling
    3x Be-Quiet! 12/14cm "Silent Wings 4" casefans, 1x Arctic Freezer i35 CPU towerblock with fan.
    Keyboard
    Steelseries APEX 7 keyboard.
    Mouse
    Logitech G-502 Hero
    Internet Speed
    1Gb
    Browser
    Brave
    Antivirus
    F-Secure
    Other Info
    No Noise system.
    256Gb Kingston Travler USB 3.0 drive.
    64Gb Sandisk USB 3.2 drive. (Ventoy)
    8Gb Philips USB 3.0 drive. (Win. Inst.)
    8Gb Philips USB 3.0 drive. (Rescue disk)
    2Tb WD USB 3.0 Passport drive.
    USB Ext. 500Gb WD SATA drive.
    External USB 3.0 C.A. CD/DVD* burner.
I did a clean install using the MCT created install USB yesterday, and it did indeed install 26200.8653.
As soon as I connected to Windows update it grabbed Security Update (KB5094126) (26200.8655).
Dism RestoreHealth still ran incredibly slow in the 60-70% range, otherwise all seems to be well.

peace
wanna
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 64 bit
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acme Mail Order (meep meep)
    CPU
    Intel® Core™ i5-14600K
    Motherboard
    MSI PRO Z790-A MAX WiFi bios 7E07vMA
    Memory
    G.SKILL Ripjaws S5 Series DDR5 (2x16GB) 6400MT/s CL32
    Graphics Card(s)
    PNY RTX 5060 Ti OC 16GB
    Sound Card
    Onboard Realtek® ALC4080 Codec
    Monitor(s) Displays
    2 x Dell - S3222DGM 32" LED Curved QHD FreeSync Gaming Monitor
    Screen Resolution
    2560x1440
    Hard Drives
    990 PRO PCIe 4.0 NVMe®1TB OS
    970 EVO PCIe 3.0 NVMe® SSD 500GB Games
    860 EVO SATA 2.5" SSD 1TB Storage
    PSU
    RMx Series™ RM850x — 80 PLUS® Gold
    Case
    LIAN LI PC-G70B Black Aluminum Full Tower
    Cooling
    Custom loop Optimus Foundation Block, MCP655-PWM D5 pump, MCR320 QP rad
    Keyboard
    Razer Black Widow Ultimate
    Mouse
    Razer Death Adder Elite
    Internet Speed
    500 down 20 up
    Browser
    Edge / Chrome
    Antivirus
    Microsoft Defender
    Other Info
    Always switching installs testing out the latest and greatest.
  • Operating System
    Windows 11 Pro 64 bit latest public release
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acme Mail Order (meep meep) Wife's PC Edition
    CPU
    Intel® Core™ i5-11600K
    Motherboard
    MSI - Z590 A Pro - bios 7D09v1B1
    Memory
    G.SKILL Ripjaws V Series 16GB DDR4 3600 (16-16-16-36)
    Graphics card(s)
    EVGA GeForce RTX 3060 XC GAMING 12GB
    Sound Card
    Onboard Realtek® ALC897 Codec
    Monitor(s) Displays
    2 x 27'' ACER S271HL
    Screen Resolution
    1920x1080
    Hard Drives
    980 PRO PCIe 4.0 NVMe® SSD 250GB OS
    Samsung 128GB 850 PRO SATA III for Storage
    PSU
    CORSAIR - CX-M Series 650W
    Case
    LIAN LI PC-A16B Black Aluminum ATX Mid Tower
    Cooling
    Thermalright Phantom Spirit 120SE Air Cooler
    Keyboard
    Logitech - K740 Illuminated
    Mouse
    Razer Death Adder Elite
    Internet Speed
    500 down 20 up
    Browser
    Chrome
    Antivirus
    Windows Defender
    Other Info
    Stock clocked, over cooled, and unmolested for a rock solid, whisper quiet, Wifey approved user experience.
I also created a bootable flash drive using the MCT yesterday and it also grabbed .8653 and afterwards the June update was installed. It's a change of behavior since if the bootable flash drive was created Thursday after Patch Tuesday or after, it already included the update. This time at least the window that shows the system steps when installing is still there. You know, something like this: I've been performing monthly clean installs of Windows 11 since 25H2 came out and I know this very well.
- Bootable flash drive created before Patch Tuesday: When installing Windows the window shown above appears and downloads and installs the monthly update along with drivers and tells you the %, when the system is going to reboot etc.
- Bootable flash drive create the Thursday after Patch Tuesday: When installing Windows It already includes the monthly update and when you connect to the internet the window doesn't show up and you have to let the system grab the drivers. It could be on the window where you're prompted to name your device or on some other step along the way. The process runs in the background and you have no idea when it's finished - in my case I had to listen to my laptop fans to get a general idea when it was done...ridiculous

Problem is this time, like I said before, the June monthly update is still being downloaded and installed. And to make matters worse, some features are missing from my device. I've tried multiple clean installs and some features and settings are missing, like for example, lock screen widgets. There isn't even an option to enable/disable them. It's like they were removed from Windows. Maybe the code is there and it's going to be triggered in the future bla bla bla but what's the point? Prior to creating a flash drive on Friday, on Tuesday I took the same steps and it installed everything well. So basically I created a flash drive that should already have the update embedded and instead it also downloads it and installs it while at the same time installing a light version of Windows. How does this make any sense?
Not to mention the bug when deleting stuff. You delete a folder named ''A'' and the recycle bin asks you if you want to permanently delete a folder named '&4tyhgfuh'
Baffling stuff from MS once again. Why am I even surprised...
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    ASUS
Back
Top Bottom