Microsoft Releases April 14, 2026 Security Update KB5083769 for Windows 11 24H2 and 25H2

Microsoft has released KB5083769, the April 14, 2026 cumulative security update for Windows 11 versions 24H2 and 25H2. This update advances the OS builds to 26100.8246 and 26200.8246, respectively.

This update includes the latest security patches along with quality enhancements previously tested in March preview builds and out-of-band releases. For enterprise users, the most significant improvements involve the ongoing rollout of Secure Boot certificates, now visible in the Windows Security app.

Microsoft has introduced a new status visibility feature for Secure Boot certificate updates. While this feature is enabled by default on consumer devices, it remains disabled on commercial devices. Users can expect to see badges and notifications related to Secure Boot status, although the functionality is not yet active on enterprise hardware.

Additionally, Microsoft has implemented a more robust device targeting system for Secure Boot certificate distribution. This ensures that eligible systems receive updated certificates in a controlled and phased approach, improving overall security posture.

One critical reliability fix addresses an issue where some devices would enter BitLocker Recovery mode after Secure Boot-related updates. However, a known issue persists: systems using an unsupported BitLocker Group Policy configuration may still require manual recovery keys post-installation. IT teams are advised to test and prepare for such scenarios in environments with strict encryption policies.

In terms of security enhancements, KB5083769 introduces a significant improvement in Remote Desktop Protocol (RDP) handling. After installation, Windows now prompts users to review all requested connection settings before starting an RDP session. All settings are disabled by default, and a one-time warning appears when opening an .rdp file for the first time.

This is particularly relevant as April 2026 Patch Tuesday coverage highlighted a Remote Desktop spoofing vulnerability tracked as CVE-2026-26151, which this update helps mitigate.

Other improvements include enhanced networking reliability when using SMB compression over QUIC, reducing timeouts and increasing stability in cloud and remote environments. Additionally, a known failure in the “Reset this PC” feature, which occurred after the earlier KB5079420 hotpatch, has been resolved.

This update also brings newer versions of built-in AI components including Image Search, Content Extraction, Semantic Analysis, and Settings Model—now at version 1.2603.377.0.

KB5083769 will install automatically through Windows Update and Microsoft Update. Users who already have previous updates installed will only receive the incremental changes included in this package.

While this is a standard monthly patch, it includes several important hardening features. These include improved Secure Boot management, enhanced BitLocker stability, strengthened Remote Desktop security, and increased reliability in system recovery processes.