"Today's updates are mandatory as they contain the August 2026 Patch Tuesday security patches for 400 vulnerabilities discovered in previous months."
Microsoft's August 2026 Patch Tuesday: scope and distribution
Microsoft has released cumulative updates for Windows 11 identified in the source as KB5121003 and KB5120240 for versions 25H2/24H2 and 23H2. The release is described as the eighth "Patch Tuesday" in 2026, and it is based on 24H2, which Microsoft says means version 25H2 receives the same fixes. The company offers two installation routes: via Start > Settings > Windows Update and clicking "Check for Updates," or by manually downloading the update from the Microsoft Update Catalog.
File Explorer, Windows Search, and input improvements
The update bundles a series of user-facing refinements to File Explorer and search. File sizes in Details view now use appropriate units (KB, MB, GB) instead of showing KB only. Middle-click behavior is extended to open a folder in a new tab from the Address Bar and the Home page. Visual glitches are addressed — the update eliminates a grey flash on load and unexpected scrolling to the top on the Home page in certain cases — and file thumbnails in the Recommended section are reported to appear crisper.
On the search side, app search is improved to better handle typos and partial app names, and Settings relevance has been adjusted to surface more useful settings higher in search results. Input and windowing changes include improved persistence of mouse cursor size, ensuring system dialogs open at appropriate size on small tablets, and improved keyboard navigation within the Start menu when focus is on the apps list.
Your scanner finds 4,000 vulns. Which 12 matter?
Nubivance is a Rapid7 Registered Partner delivering vulnerability management as a service - scanning, risk-based prioritization, and remediation follow-through across IT and OT.
Fix the backlogVoice Access, Windows Hello ESS, and AI component changes
The cumulative update adds several voice and authentication features. Voice Access gains Voice Isolation — a mode that "filters out other speakers and background noise" and requires a one-time voice setup — and two additional modes: "Remove background noise only" and "No filtering." Korean language support for Voice Access is also included, and Microsoft reports improved reliability when starting Voice Access. A new Windows Hello capability, "Enhanced Sign-in Security (ESS)," now supports peripheral fingerprint sensors, extending ESS to desktops and other Windows 11 PCs (including Copilot+ PCs). Microsoft notes the ESS feature was previously disclosed in January 2026 (KB5074105) and is "now beginning to roll out."
Separately, the update "allows you to remove the Image Generation AI component from supported Copilot+ PCs where the component is installed," according to the release.
System, power, update, accessibility, and regional time fixes
The cumulative package also contains a range of smaller but broad-reaching fixes. Widgets get taskbar notification badges that use the Windows accent color and a simplified Lock screen Widgets experience that, for new users, shows Weather as the only widget by default. Touchpad settings add new gestures and speed controls for precision touchpads, including "Accelerated scrolling."
Power and battery behaviour is addressed: changes in Settings are applied across all power plans (display, sleep, hibernate, power button, sleep button, lid-close), and the ability to set an Energy Saver threshold in Settings > System > Power & Battery has been restored. Windows Update behavior is adjusted to improve calculation of update progress and to include update clean-up logic designed to improve system performance immediately following an update. Accessibility tweaks include improvements to Magnifier on touch-enabled devices, with horizontal and vertical touch bars now off by default.
Date and time adjustments correct daylight saving time (DST) data accuracy for Middle East Standard Time (Beirut), Morocco Standard Time (Casablanca), Israel Standard Time (Jerusalem), and Greenland Standard Time (Nuuk). Microsoft also reports it is not aware of any new issues with this month's Patch Tuesday release.
What this means for technologists, enterprises, and end users
- Technologists and security teams: The update is labeled mandatory because it bundles August 2026 Patch Tuesday fixes for 400 vulnerabilities. Security teams will be focused on rapid deployment via Windows Update or the Microsoft Update Catalog and on verifying that update-cleanup and progress-calculation changes do not interfere with patch orchestration tools.
- Affected enterprises and procurement leaders: Enterprises running Windows 11 23H2, 24H2, or 25H2 should note the release applies uniformly across those branches (24H2-based with parity for 25H2). Procurement and endpoint teams will want to validate peripheral fingerprint reader compatibility for the newly rolling-out Windows Hello ESS and confirm whether the Image Generation AI component is present on Copilot+ PCs and, if desired, removable.
- End users and the general public: Users will see a mix of visual and input improvements (search typo handling, File Explorer sizing, Widgets color), and new Voice Access options. To receive these fixes and the security coverage, follow Start > Settings > Windows Update > Check for Updates or download from the Microsoft Update Catalog.
Microsoft's cumulative update package bundles functional polish alongside the mandatory security corrections. The distribution choice — Windows Update or the Microsoft Update Catalog — and Microsoft's note that no new issues are known will shape how quickly organizations and individuals adopt the update in the coming days.
Source: BleepingComputer — Windows 11 KB5121003 & KB5120240 cumulative updates released
