check before: 2026-04-01
Product:
Windows, Windows Server
Platform:
Online, Windows Desktop, World tenant
Status:
Change type:
Admin impact
Links:
Details:
The April 2026 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained.
Highlights for the Windows 11, version 25H2 update:
This security update includes fixes and quality improvements from KB5079391 (released March 26, 2026 - no longer offered) and KB5086672 (released March 31, 2026).
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
This update expands high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout.
This update improves reliability for SMB compression over QUIC, reducing timeouts and enabling more consistent and dependable performance.
This update enhances protection against phishing attacks that use Remote Desktop (.rdp) files by showing all requested connection settings before connecting, with settings turned off by default and a one‑time security warning on first use.
Short on time? Watch our Windows 11 release notes video for this month's tips.
For instructions on how to install this update, see the KB for your operating system listed below:
Windows 11, version 26H1: KB5083768
Windows 11, versions 25H2 and 24H2: KB5083769
Windows 11, version 23H2: KB5082052
Windows 11 Enterprise LTSC 2024: Baseline KB5083769
Windows 10, versions 22H2 and 21H2: KB5082200
Windows 10 Enterprise LTSC 2019 and Windows Server 2019: KB5082123
Windows 10 LTSB 2016 and Windows Server 2016: KB5082198
Windows Server 2025: KB5082063
Windows Server 2025 Datacenter: Azure Edition: Baseline KB5082063
Windows Server 2022: KB5082142
Windows Server 2022 Datacenter: Azure Edition: Baseline KB5082142
Windows Server 2012 R2: KB5082126
Windows Server 2012: KB5082127
Note: With the April 2026 Windows security update and upcoming Windows updates over the next few months, a limited number of consumer and business devices may experience one additional restart during installation. This one‑time restart occurs after a Secure Boot certificate update is applied as part of the Secure Boot update process.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-04-15
updated:
2026-04-15
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Increased downtime due to unexpected restarts
Users may experience additional restarts during the installation of the update, leading to interruptions in their workflow.
- roles: End Users, IT Support Staff
- references: https://support.microsoft.com/help/5083769, https://support.microsoft.com/help/5082200
Potential compatibility issues with existing applications
The update may introduce compatibility issues with legacy applications that are not optimized for the latest security features, affecting user productivity.
- roles: End Users, Application Developers
- references: https://support.microsoft.com/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e, https://support.microsoft.com/help/5082123
Reduced performance during update installation
The update process may temporarily slow down system performance, impacting user experience during critical tasks.
- roles: End Users, System Administrators
- references: https://support.microsoft.com/help/5083768, https://support.microsoft.com/help/5086672
Increased risk of security vulnerabilities
If the update is not installed promptly, systems may remain vulnerable to known security threats, impacting overall organizational security posture.
- roles: IT Security Officers, End Users
- references: https://support.microsoft.com/help/5079391, https://support.microsoft.com/topic/3ed94012-763a-4ebe-86f4-32b01390a11a
User confusion due to new security features
The introduction of new security features, such as the one-time security warning for Remote Desktop connections, may confuse users and lead to improper usage.
- roles: End Users, IT Support Staff
- references: https://support.microsoft.com/help/5083769, https://support.microsoft.com/help/5082200
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
