Windows 11 Updates KB5077178, KB5077180, KB5077374 Deliver WinRE and Secure Boot Changes

Microsoft has rolled out its February 2026 Patch Tuesday updates for Windows 11, including KB5077181 and KB5075941. Users may notice a subtle but important authentication-related change after installing the cumulative updates.

However, KB5077181 has already drawn attention due to reported boot loop problems, and Microsoft has yet to issue an official fix for those cases.

According to Neowin, this month’s release also includes several new Dynamic Updates aimed at improving setup and recovery processes.

KB5077178, KB5077180, KB5077374 Updates Improve Setup and WinRE

Alongside the main cumulative patches, Microsoft shipped new Setup and Recovery Dynamic Updates. These updates enhance the Windows Recovery Environment (WinRE), also known as Safe OS, and refresh core Setup binaries used during installations and upgrades.

Dynamic Updates are applied to Windows images before deployment. They help ensure smoother upgrades while preserving Language Packs (LP) and Features on Demand (FODs).

VBScript, currently classified as a Feature on Demand in Windows 11 version 24H2, remains preserved through these mechanisms.

WinRE and Secure Boot Changes Detailed

KB5077178 targets Windows 11 26H1, while KB5077180 applies to versions 24H2 and 25H2. Both updates deliver improvements to the Windows Recovery Environment.

For Windows 11 23H2, KB5077374 introduces a significant Secure Boot adjustment. The update replaces the older 2011-signed bootmgfw.efi with a 2023-signed version on systems that already trust the Windows UEFI CA 2023 certificate.

Microsoft warns that resetting the Secure Boot database or toggling Secure Boot afterward could trigger Secure Boot violation errors. In rare situations, affected systems may require recovery media.

Another 23H2 update, KB5076124, resolves an issue where KDNET debugging DLLs such as kdstub.dll and kdnet.dll could stop responding when Boot Manager debugging is enabled at startup.

Microsoft confirms that both Setup and Recovery Dynamic Updates install automatically through Windows Update. Users do not need to manually download or deploy them.

Those seeking new experimental features can also check out KB5077221, which Microsoft has released to the Canary channel.