Microsoft has released two cumulative updates for Windows 11 as part of its Patch Tuesday output.
The KB5078883 update is available for Windows 11 23H2, while the KB5079473 update is available for Windows 11 versions 24H2 and 25H2. Across the updates, there are the expected range of security fixes, but also changes and various improvements across the operating system.
Neither of the updates have known issues, but this is something that could well change as more people install them and problems bubble to the surface. Writing in the release notes for the KB5079473 update for more recent versions of Windows 11, Microsoft points out that it also contains fixes and quality improvements from the KB5077181 which was released on February 10, 2026.
In terms of what the KB5079473 update adds, Microsoft says:
- [Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout.
- [File Explorer] Improved: This update improves File Explorer search reliability when searching across multiple drives or “This PC”.
- [Windows Defender Application Control] Improved: This update improves how Windows Defender Application Control (WDAC) handles COM objects allowlisting policies. COM objects were blocked when the endpoint security policy was set higher than the allowlisting policy. With this update, COM objects are allowed as expected.
- [Windows System Image Manager] Improved: This update improves the reliability of choosing trusted catalog files. It adds a warning dialog that helps you confirm that the file you select comes from a trusted source.
The KB5078883 update includes the fixes from last month’s KB5075941 update, and Microsoft also shares the following details in the release notes:
- [Secure Boot]
- With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout.
- This update introduces two new PowerShell features to help you manage the ongoing Secure Boot key rollout. The Get-SecureBootUEFI cmdlet now supports the -Decoded option, which displays Secure Boot keys and certificates in a readable format. The Get-SecureBootSVN cmdlet lets you check the Secure Boot Security Version Number (SVN) of your device’s UEFI firmware and bootloader, and report whether the device follows the latest Secure Boot policy.
- [File History] Improved: This update improves the reliability of File History in Control Panel. Files with names that include Chinese characters and Private Use Area characters now back up successfully, helping keep your files protected and available when you need them.
- [Graphics]
- Improved: This update improves stability affecting certain GPU configurations, helping devices shut down more reliably.
- Improved: This update improves stability for certain GPU configurations. It helps games and 3D apps run more reliably during intensive graphics use.
- [Texts and Fonts] Improved: This update improves Windows fonts by adding the new Saudi Riyal currency symbol. This change helps keep text clear, accurate, and visually consistent across your Windows apps and experiences.
- [Windows System Image Manager] Improved: This update improves the reliability of choosing trusted catalog files. It adds a warning dialog that helps you confirm that the file you select comes from a trusted source.
Check for updates via Settings to grab these, or you can downlaod them from the Windows Update Catalog.
Image Credit: Simon Lehmann/Dreamstime.com
