Microsoft has launched Patch Tuesday updates for Home windows 11 24H2, 23H2, and 22H2. The 24H2 replace is offered by way of KB5051987, whereas the 23H2 and 22H2 updates are delivered by way of KB5051989. You can be on construct variations 26100.3194, 22631.4890, and 22621.4890, respectively, after making use of the replace.

This is what’s new:

24H2

Highlights

• This replace addresses safety points in your Home windows working system.

Enhancements

This safety replace contains enhancements that had been part of replace KB5050094 (launched January 28, 2025). Under is a abstract of the important thing points that this replace addresses once you set up this KB. If there are new options, it lists them as effectively. The daring textual content throughout the brackets signifies the merchandise or space of the change we’re documenting.

• This replace makes miscellaneous safety enhancements to inner OS performance. No extra points had been documented for this launch.

If you happen to put in earlier updates, solely the brand new updates contained on this bundle shall be downloaded and put in in your gadget.

For extra details about safety vulnerabilities, please check with the Safety Replace Information web site and the February 2025 Safety Updates.

Home windows 11 servicing stack replace (KB5052085)- 26100.3189

This replace makes high quality enhancements to the servicing stack, which is the part that installs Home windows updates. Servicing stack updates (SSU) guarantee that you’ve got a sturdy and dependable servicing stack in order that your units can obtain and set up Microsoft updates. To study extra about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Identified points on this replace

Roblox

All customers

We’re conscious of a problem the place gamers on Arm units are unable to obtain and play Roblox from the Microsoft Retailer on Home windows.

Gamers on Arm units can play Roblox by downloading the title immediately from www.Roblox.com.

Open Safe Shell service

All customers

Following the set up of the October 2024 safety replace, some prospects report that the OpenSSH (Open Safe Shell) service fails to start out, stopping SSH connections. The service fails with no detailed logging, and guide intervention is required to run the sshd.exe course of.

This concern is affecting each enterprise, IOT, and schooling prospects, with a restricted variety of units impacted. Microsoft is investigating whether or not shopper prospects utilizing Residence or Professional editions of Home windows are affected.

Prospects can quickly resolve the difficulty by updating permissions (ACLs) on the affected directories. Comply with these steps:

1. Open PowerShell as an Administrator.

2. Replace the permissions for C:ProgramDatassh and C:ProgramDatasshlogs to permit full management for SYSTEM and the Directors group, whereas permitting learn entry for Authenticated Customers. You’ll be able to prohibit learn entry to particular customers or teams by modifying the permissions string if wanted.

   Use the next instructions to replace the permissions:

   $directoryPath = “C:ProgramDatassh” $acl = Get-Acl -Path $directoryPath $sddlString = “O:BAD:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;AU)” $securityDescriptor = New-Object System.Safety.AccessControl.RawSecurityDescriptor $sddlString $acl.SetSecurityDescriptorSddlForm($securityDescriptor.GetSddlForm(“All”)) Set-Acl -Path $directoryPath -AclObject $acl

3. Repeat the above steps for C:ProgramDatasshlogs.

Microsoft is actively investigating the difficulty and can present a decision in an upcoming Home windows replace. Additional communications shall be offered when a decision or extra workarounds can be found.

Citrix

IT admins

Units which have sure Citrix elements put in is likely to be unable to finish set up of the January 2025 Home windows safety replace. This concern was noticed on units with Citrix Session Recording Agent (SRA) model 2411. The 2411 model of this software was launched in December 2024.

Affected units would possibly initially obtain and apply the January 2025 Home windows safety replace accurately, similar to by way of the Home windows Replace web page in Settings. Nevertheless, when restarting the gadget to finish the replace set up, an error message with textual content just like “One thing didn’t go as deliberate. No want to fret – undoing adjustments” seems. The gadget will then revert to the Home windows updates beforehand current on the gadget.

This concern possible impacts a restricted variety of organizations as model 2411 of the SRA software is a brand new model. Residence customers aren’t anticipated to be affected by this concern.

Citrix has documented this concern, together with a workaround, which may be carried out previous to putting in the January 2025 Home windows safety replace. For particulars, see Citrix’s documentation.

Microsoft is working with Citrix to handle this concern and can replace this documentation as soon as a decision is out there.

23H2 and 22H2

Highlights

• This replace addresses safety points in your Home windows working system.

Enhancements

Observe: To view the listing of addressed points, click on or faucet the OS identify to increase the collapsible part.

Home windows 11, model 23H2

Vital: Use EKB KB5027397 to replace to Home windows 11, model 23H2.

This safety replace contains high quality enhancements. Key adjustments embrace:

• This construct contains all of the enhancements in Home windows 11, model 22H2.

• No extra points are documented for this launch.

Home windows 11, model 22H2

This safety replace contains enhancements that had been part of replace KB5050092 (launched January 28, 2025). Under is a abstract of the important thing points that this replace addresses once you set up this KB. If there are new options, it lists them as effectively. The daring textual content throughout the brackets signifies the merchandise or space of the change we’re documenting.

• [Hyper-V] Mounted: In backup eventualities, there’s a delay. This would possibly cease backups from operating easily.

If you happen to put in earlier updates, solely the brand new updates contained on this bundle shall be downloaded and put in in your gadget.

For extra details about safety vulnerabilities, please check with the Safety Replace Information web site and the February 2025 Safety Replace.

Home windows 11 servicing stack replace (KB5053488) – 22621.4890 and 22631.4890

This replace makes high quality enhancements to the servicing stack, which is the part that installs Home windows updates. Servicing stack updates (SSU) guarantee that you’ve got a sturdy and dependable servicing stack in order that your units can obtain and set up Microsoft updates. To study extra about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Identified points on this replace

Open Safe Shell service

All customers

Following the set up of the October 2024 safety replace, some prospects report that the OpenSSH (Open Safe Shell) service fails to start out, stopping SSH connections. The service fails with no detailed logging, and guide intervention is required to run the sshd.exe course of.

This concern is affecting each enterprise, IOT, and schooling prospects, with a restricted variety of units impacted. Microsoft is investigating whether or not shopper prospects utilizing Residence or Professional editions of Home windows are affected.

Prospects can quickly resolve the difficulty by updating permissions (ACLs) on the affected directories. Comply with these steps:

1. Open PowerShell as an Administrator.

2. Replace the permissions for C:ProgramDatassh and C:ProgramDatasshlogs to permit full management for SYSTEM and the Directors group, whereas permitting learn entry for Authenticated Customers. You’ll be able to prohibit learn entry to particular customers or teams by modifying the permissions string if wanted.

   Use the next instructions to replace the permissions:

   $directoryPath = “C:ProgramDatassh” $acl = Get-Acl -Path $directoryPath $sddlString = “O:BAD:PAI(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;AU)” $securityDescriptor = New-Object System.Safety.AccessControl.RawSecurityDescriptor $sddlString $acl.SetSecurityDescriptorSddlForm($securityDescriptor.GetSddlForm(“All”)) Set-Acl -Path $directoryPath -AclObject $acl

3. Repeat the above steps for C:ProgramDatasshlogs.

Microsoft is actively investigating the difficulty and can present a decision in an upcoming Home windows replace. Additional communications shall be offered when a decision or extra workarounds can be found.

Citrix

All customers

Units which have sure Citrix elements put in is likely to be unable to finish set up of the January 2025 Home windows safety replace. This concern was noticed on units with Citrix Session Recording Agent (SRA) model 2411. The 2411 model of this software was launched in December 2024.

Affected units would possibly initially obtain and apply the January 2025 Home windows safety replace accurately, similar to by way of the Home windows Replace web page in Settings. Nevertheless, when restarting the gadget to finish the replace set up, an error message with textual content just like “One thing didn’t go as deliberate. No want to fret – undoing adjustments” seems. The gadget will then revert to the Home windows updates beforehand current on the gadget.

This concern possible impacts a restricted variety of organizations as model 2411 of the SRA software is a brand new model. Residence customers aren’t anticipated to be affected by this concern.

Citrix has documented this concern, together with a workaround, which may be carried out previous to putting in the January 2025 Home windows safety replace. For particulars, see Citrix’s documentation.

Microsoft is working with Citrix to handle this concern and can replace this documentation as soon as a decision is out there.

These updates shall be accessible from Home windows Replace and will set up routinely usually. If you want to obtain these updates for offline set up, you will get them from the Microsoft Catalog web site. You could find the replace for 24H2 right here (however examine the set up directions right here because it’s extra advanced, go to the Catalog tab on the backside of the web page), and 23H2 and 22H2 right here.