Windows Update KB5065426 | Key Fixes and Improvements

KB5065426 is a cumulative update for Windows 11, version 24H2, released as part of the September 2025 Patch Tuesday. It is a mandatory update that includes security fixes, bug resolutions, and several new features.

Here’s a detailed overview of Windows update KB5065426, what it does, what issues it has, and what to watch out for:

---

🛠 What is KB5065426

• It’s the September 9, 2025 cumulative security update for Windows 11, version 24H2.

• It advances Windows 11 to OS build 26100.6584.

• It includes updates to various AI components like image search, content extraction, semantic analysis, and settings models.

• Also includes a Servicing Stack Update (SSU) under KB5064531. The SSU helps ensure the Windows Update system remains stable and reliable.

---

⚡ Key Fixes & Improvements

Some of the things this update addresses:

• Fixes to unexpected UAC prompts for certain apps (especially those using MSI installers) when users are non‑admins.

• Enhanced auditing and compatibility for SMB (Server Message Block) settings; e.g. SMB client compatibility and enforcing policy for SMB signing / Extended Protection for Authentication (EPA).

• Improvements in the UI / settings experience:
  • More keyboard/navigation fixes around taskbar widgets and focus behavior.
  • Better mouse settings, display fixes, etc.

Also Read : 800 279 9032 | Toyota Financial Services Customer Service

---

⚠ Known Issues and Edge Cases

While this update is generally good, there are some issues Microsoft has noted:

• PSDirect failures on devices with hotpatches applied (specifically, KB5065474 or this update itself): if you have virtual machines (VMs) as hosts/guests, and one is updated while the other is not, you may experience PowerShell Direct (PSDirect) connection errors.

• The fallback mechanism that cleans up sockets during these mismatch scenarios sometimes fails. You might see Event ID 4625 in the Security Event logs if this happens.

• Microsoft says this will be addressed in KB5066360.

---

🔍 What You Should Do

If you’re managing a Windows 11 PC (or server) with Build 24H2, here are steps to ensure smooth updating:

1. Check Windows Update and allow this update (KB5065426) to install automatically unless you have a reason to delay. It contains critical security fixes.

2. If you use virtual machines and hotpatches, make sure both host and guest VMs are fully updated to avoid PSDirect issues.

3. For systems that are affected, watch the Event Viewer logs (Security events) for failures (like Event ID 4625) to diagnose PSDirect or socket issues.

4. If you notice UAC prompts or other UI annoyances, check if this update is causing them. Sometimes letting the system “settle” or finishing update cycles helps.

5. Keep an eye out for KB5066360, which Microsoft says addresses some of the known problems.