Windows 11 Updates Expand Memory Integrity and Fix Security Controls

Microsoft released mandatory Windows 11 cumulative updates KB5132061 and KB5131087 with November Patch Tuesday security fixes and broader automatic enablement of Memory integrity. KB5132061 brings version 26H2 to Build 26300.9974 and version 25H2 to Build 26200.9974. Reported fixes address Smart App Control, BitLocker, Application Control, TPM certificate enrollment, Remote Desktop, and VPN connectivity. BleepingComputer described the updates as addressing hundreds of vulnerabilities, but neither report identified individual CVEs or active exploitation. Microsoft reported no known new issues.

Administrators preparing installation images must include the boot.stl file to avoid a boot failure, according to Windows Latest. Recovery enhancements include Cloud rebuild with optional hardware-backed drive sanitization and remote administration, plus automatic reuse of eligible saved Wi-Fi profiles in Windows Recovery Environment. The release also warns of the April 2027 retirement of prompt-based Data Protection API operations and continues certificate updates. Windows Latest reports that Windows 11 24H2 Home and Pro no longer receive updates and that this is the final update for 23H2 Enterprise and Education, making migration planning a priority for affected organizations.