Windows 11 KB5132061, KB5131087 & KB5132059 November 2026 Patch Tuesday Updates Out Now

Microsoft has released November 2026 Patch Tuesday updates for Windows 11 version 23H2, 24H2, 25H2, 26H2, and 26H1. For users with Windows 11 version 26H2, 25H2, and 24H2, KB5132061 has been released, which bumps the systems to build 26300.9974, 26200.9974, and 26100.9974, respectively. Here’s the changelog for the update:

• [Security updates] This update provides security improvements. For more information about the security vulnerabilities resolved by this update, see the Security Update Guide
• [Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Certificate deployment via Windows updates continues across supported PCs and non-managed business devices in the coming months.
• [Audio (known issue)] – Fixed: USB Audio 1.0 devices might fail to start and display error code 10 in Device Manager after installing a recent security update.
• [Printing] Fixed: Adding a printer published in Active Directory through Settings > Bluetooth & devices > Printers & scanners > Add device might fail with error 87, “The parameter is incorrect.” This issue was introduced by the October 2026 update and does not generally affect existing printers or printing.
• [Security] This update improves NTLM security by enabling clients to offer NTLM message signing by default for non-anonymous connections. This change helps reduce exposure to NTLM relay attacks and provides auditing to identify connections that are not using signing. To learn more, see NTLM signing security improvements in Windows.
• [Date and Time] This update adjusts daylight saving time (DST) rules for Cuba for the extended 2026-2027 DST period. Cuba remains on UTC-04:00 and doesn’t observe the November 2026 and March 2027 transitions. It returns to UTC-05:00 in November 2027 and resumes its regular seasonal schedule in 2028.
  • For the latest DST and time zone guidance, see the Daylight Saving Time & Time Zone Blog.
• [Remote Desktop] This update addresses an issue where Remote Desktop Protocol (RDP) connections might fail on the client due to a certificate mismatch after the October 2026 non-security preview update.
• [Windows PowerShell] This update strengthens security for PowerShell script signing and signature verification by introducing stricter encoding validation. As a result, scripts containing invalid UTF-8 encoding might fail signature validation, even if they were previously accepted. To resolve this issue, review the affected scripts, save them using valid UTF-8 encoding with a byte order mark (BOM), and sign them again. For further guidance, see Encoding Guidance for Signed PowerShell Scripts.

The aforementioned changelog also applies to users on Windows 11 version 23H2 and 26H1, who are getting the November 2026 Patch under KB5131087 (OS Build 22631.7711) and KB5132059 (OS Build 28000.3501), respectively.