Microsoft Releases Windows 11 January 2026 Patch Tuesday Updates, KB5074109 & KB5073455

Microsoft has started rolling out its January 2026 Patch Tuesday updates for Windows 11, covering versions 25H2, 24H2, and 23H2. The updates focus on stability, security, and a handful of platform-level fixes, while also introducing a small behavior change related to Secure Boot.

Windows 11 versions 25H2 and 24H2 are receiving update KB5074109. After installation, systems will be updated to build 26200.7623 on 25H2 and build 26100.7623 on 24H2. Meanwhile, Windows 11 23H2 users are getting KB5073455, which moves the OS to build 22631.6491.

This month’s release includes networking fixes for Windows Subsystem for Linux and Azure Virtual Desktop, improvements related to power behavior on NPU-equipped devices, and an update to a core Windows component that previously triggered false security alerts. Microsoft is also beginning a phased rollout of updated Secure Boot certificates, using device targeting data to ensure compatibility before deployment.

The official changelog for the updates, shared by Microsoft

[Compatibility] This update removes the following modem drivers: agrsm64.sys (x64), agrsm.sys (x86), smserl64.sys (x64) and smserial.sys (x86). Modem hardware dependent on these specific drivers will no longer work in Windows.

[Networking (known issues)]

Fixed: This update addresses an issue where mirrored networking in Windows Subsystem for Linux (WSL) could fail causing “No route to host” errors and preventing access to corporate resources over VPN connections, even when the Windows host remained connected. This might occur after installing KB5067036.

Fixed: This update addresses an issue where you might experience RemoteApp connection failures in Azure Virtual Desktop (AVD) environments. This might occur after installing KB5070311.

[Power & Battery]

Fixed: This update addresses an issue where devices with a Neural Processing Unit (NPU) might stay powered on when idle. This could affect power performance.

[Secure Boot] Starting with this update, Windows quality updates include a subset of high confidence device targeting data that identifies devices eligible to automatically receive new Secure Boot certificates. Devices will receive the new certificates only after demonstrating sufficient successful update signals, ensuring a safe and phased deployment.

[Windows Deployment Services (WDS] This update introduces a change in behavior in which WDS will stop supporting hands-free deployment functionality by default. Detailed guidance for IT administrators is available in Windows Deployment Services (WDS) Hands-Free Deployment Hardening Guidance.

[WinSqlite3.dll]

Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable.

Note: WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a Windows component. If security applications continue to detect sqlite3.dll as vulnerable, contact the developer of the app using sqlite3.dll for an update. If sqlite3.dll is being used by a Microsoft app, install the latest version of the app from the Microsoft Store.

Known issue and workaround

Microsoft has acknowledged a single known issue tied to sign-in options after recent updates. After installing the August 2025 non-security preview update (KB5064081) or later, some users may notice that the password icon is missing on the lock screen. The password option is still functional and appears when hovering over the blank space.

According to Microsoft, this issue is unlikely to affect personal devices running Windows Home or Pro, and primarily impacts enterprise-managed environments. The problem is being mitigated using Known Issue Rollback (KIR), with a dedicated Group Policy available for IT administrators to deploy.

The January 2026 Patch Tuesday updates are now available via Windows Update and should install automatically. Offline installers can also be downloaded from the Microsoft Update Catalog for users who prefer manual installation.