Microsoft has rolled out Windows 11 KB5074109, the first major update of 2026. This is part of the monthly Patch Tuesday security refresh, advances the OS to build 26200.7623 (25H2) and 26100.7623 (24H2), delivers critical fixes and quality improvements. It also fix issue where Neural Processing Units (NPUs) remained powered on during idle. Started rollout of Secure Boot certificate for targeted devices. Also addresses 114 vulnerabilities, including three zero-day exploits, and updates WinSqlite3.dll to resolve false security alerts.
Quick Links
What’s New in Windows 11 KB5074109?
The most significant change in KB5074109 addresses a long-standing issue affecting Windows 11 PCs with an NPU. Some users reported that their NPUs remained powered on even during system idle states, leading to unexpected battery drain.
Today’s update resolves this issue and improves power efficiency and battery lifeespecially beneficial for laptops and mobile devices that leverage AI acceleration.
If you’re using a Windows 11 device with an NPU, this update is highly recommended to ensure optimal battery life and system stability.
In addition to the NPU fix, Microsoft has introduced a new security feature related to Secure Boot. The update enables the system to automatically identify devices eligible for new Secure Boot certificates, but only after confirming a sufficient number of successful update signals. This ensures a safe, phased rollout of new security credentials, reducing the risk of deployment failures and enhancing overall system integrity.
- Fix for NPU power drain Prevents unnecessary power consumption during idle states.
- Enhanced Secure Boot deployment Devices receive new certificates only after verifying stable update signals.
- Networking: Fixes WSL issues causing “No route to host” errors over VPN and RemoteApp connection failures in Azure Virtual Desktop (AVD)
- Security and stability improvements – Addresses 114 vulnerabilities, including three zero-day exploits, and updates WinSqlite3.dll to resolve false security alerts.
- Driver Removal: Removes outdated modem drivers :
agrsm64.sys,agrsm.sys,smserl64.sys, andsmserial.sys.
How to Download Windows 11 KB5074109
Windows 11 is a crucial security update that will be automatically downloaded and installed on devices with an active internet connection. You can also adjust Windows settings to delay the update by a week or two, but it’s generally not a good idea to delay security updates.
Alternatively, offline installers for Windows 11 KB5074109 are available on theMicrosoft Update Catalog for manual installation in specific cases.
Also, you can manually download Windows 11 KB5074109 following the steps below:
- Press the Windows key + S, type settings, and select the first result.
- Go to Windows Update and check if the 2026-01 security update (KB5074109) (26200.7623).
- Click on the download now button to begin the process.
- Once done, restart your computer to apply the changes.
Press the Windows key + R, type winver, and hit the Enter key to check the latest build details.
Windows 11 KB5074109 offline installers
This patch is currently rolling out to everyone via Windows Update, but you can also download the offline installers of Windows 11 KB5074109 and manually install it. Here are the Windows 11 offline installer files you can download and install manually on your device.
- Windows 11 KB5074109 for version 25H2 Direct Download Links: 64-bit.
The file sizes are large, reflecting embedded AI models, with the x64 version being approximately 3.05 GB
Note: The above link opens the Microsoft Update Catalog, which is the library of Windows Update offline installers. Click the ‘Download’ button next to the OS version installed on your machine, then run the .msu files to start installing the update.
If you are looking for the latest Windows 11 ISO, click here.
