In this article, we will talk about the latest Windows 11 Update for the 25H2 Main Release, which is the Build 26200.8875 or KB5101650.
For those of you who are not familiar with how Windows 11 Updates for the Main Release work, I will explain it to you in the following lines.
Every month Windows 11 has a B and a C Release for Windows 11. Usually, the B Release is launched on the second Tuesday of the month and contains all the features that were tested in the previous month’s C Release.
Microsoft is also announcing that starting with the January 2026 security update, Windows Server 2025 will have its own KB identifiers and build numbers. This change applies only to Windows Server 2025. It doesn’t change how you get or manage updates for Windows 11, version 24H2 or Windows 11, version 25H2.
New Improvements in this Update
- This update addresses security vulnerabilities documented in the following guide: July 2026 Security Updates
- [Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Certificate deployment via Windows updates continues
- [Apps (Known issue)] Fixed: This update addresses an issue that affects certain third-party apps that use OLE Automation to interact with Microsoft Office. After installing the June 2026 security update (KB5094126), these apps might fail to launch Office or open documents.
- [Input] This update changes hotkey unregister and cleanup behavior. In rare cases, some built-in Windows experiences that rely on previous hotkey lifecycle behavior might temporarily stop responding to certain keyboard shortcuts. This issue can typically be resolved by restarting the app affected. If the issue is not resolved, report it through the Feedback Hub.
- [Networking] This update introduces a security hardening change that enforces TDI transport registration requirements. As a result, applications that use sockets over unregistered third-party TDI transports might stop working after installing this update. Registered TDI transports are not affected. For more information, see Third-party TDI transports might stop working after installing Windows security updates released on or after July 14, 2026.
- [Recycle Bin (known issue)] Fixed: This update addresses additional scenarios where the confirmation dialog might display an internal Recycle Bin file name instead of the original file name when permanently deleting a file. This issue might occur after installing the June 2026 security update (KB5094126)
- [Security] This update upgrades the curl tool in Windows to version 8.21.0 and includes security improvements that help protect your device.
- [Remote Desktop (RDP) Security] Support for SHA-2 certificate thumbprints has been added for trusted RDP publishers, with SHA-1 support retained only for backward compatibility and planned for future removal. New guidance is available for managing RDP file security through Group Policy to help organizations reduce phishing risks by controlling which .rdp files users can open. We recommend IT administrators migrate to SHA-256 thumbprints or a stronger algorithm as soon as possible to avoid disruption.
For an in-depth list of other features and fixes that are rolling out, you can check this article.
Windows 11 Servicing Stack Update – 26100.8872
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
For more info about this Update, you can check this article from the Microsoft Blog.
For a more in-depth presentation of the New Update, you can watch the video below from the YouTube channel.
11
20
