Microsoft Releases Security Update for Windows 11 25H2 and 24H2 Systems

Microsoft has released a non-security cumulative update (KB5074105) for Windows 11 version 25H2 and 24H2, delivering functionality improvements, performance enhancements, and reliability refinements to both release channels.

The update employs a dual-phase rollout strategy gradual and normal deployment, ensuring stability across diverse device configurations before reaching full general availability.

Update Deployment and Availability

The update is distributed through two distinct release phases designed to minimize deployment risks.

The gradual rollout approach delivers updates incrementally across phases, allowing features to reach devices over time rather than simultaneously, which accommodates varying device configurations and user environments.

The normal rollout phase represents the broad release to all eligible devices, typically occurring upon reaching general availability status.

Systems can access KB5074105 through Windows Update by navigating to Settings > Update & Security > Windows Update, where the optional update appears in the “Optional updates available” section.

Organizations using managed deployment infrastructure can leverage Windows Server Update Services (WSUS), the Business Catalog, or direct installation via Windows Update Standalone Installer (wusa.exe).

The update refreshes critical AI components powering Windows 11’s machine learning capabilities. Image Search, Content Extraction, Semantic Analysis, and Settings Model components have been updated to version 1.2601.1268.0, enhancing artificial intelligence-driven features across Copilot+ PC experiences.

These components support advanced Copilot experiences and AI-powered Windows 11 functionalities that leverage on-device machine learning for improved user productivity and system responsiveness.

The update maintains backward compatibility with existing Windows 11 PC experiences while introducing refined AI-powered features designed to improve search accuracy, data extraction capabilities, and system optimization through semantic analysis.

Accompanying the cumulative update is servicing stack update KB5074104 (build 26100.7704), which reinforces the Windows update installation framework itself.

Servicing stack updates ensure robust and reliable update delivery mechanisms, enabling devices to receive and install Microsoft updates seamlessly.

This foundational update precedes the cumulative update installation, guaranteeing that update infrastructure remains current and stable.

A critical announcement accompanies this release: Windows Secure Boot certificates used by most Windows devices are scheduled to expire beginning June 2026.

This certificate expiration poses potential boot security disruptions for personal and business devices that are not updated in advance.

Microsoft recommendsthat enterprises and individual users review preparation guidance and schedule certificate updates proactively to avoid operational disruption during the June 2026 expiration window.

Microsoft has standardized Windows update title formatting to improve clarity and readability. The new naming convention eliminates unnecessary technical identifiers such as platform architecture specifications while retaining essential information, including date prefixes, KB numbers, and build or version identifiers.

This streamlined approach helps administrators and users rapidly identify and catalog updates within their systems.

Microsoft reports no known issues associated with KB5074105 at release. Organizations requiring detailed file manifests can download comprehensive file information for the cumulative update and servicing stack update via Microsoft’s official distribution channels.

Administrators should note that combined SSU and LCU packages cannot be uninstalled using Windows Update Standalone Installer with the /uninstall switch, as the servicing stack update component remains permanently installed.

Should LCU removal become necessary, administrators must employ DISM /Remove-Package command-line operations with the specific LCU package name as the argument.

For additional update information, Microsoft recommends consulting the Windows release health dashboard and official update history pages for both version 24H2 and version 25H2 systems.

Follow us on Google News , LinkedIn and X to Get More Instant UpdatesSet Cyberpress as a Preferred Source in Google.

AnuPriya
AnuPriya
Any Priya is a cybersecurity reporter at Cyber Press, specializing in cyber attacks, dark web monitoring, data breaches, vulnerabilities, and malware. She delivers in-depth analysis on emerging threats and digital security trends.

Trending News

Related Stories