Windows 11 25H2: Security Update im Detail

What changed

KB5121003 is the August cumulative security update shared with Windows 11 24H2, but 25H2 has its own compliance target: OS build 26200.9168. The same KB article therefore must remain a separate 25H2 row in the portal.

Technical details

• Security: August security fixes
• Secure Boot: expanded high-confidence targeting for new certificates
• AI components: Image Search, Content Extraction, Semantic Analysis and Settings Model to 1.2605.856.0
• Servicing stack: KB5123304 to build 26100.9156

Why it matters

Der Zielbuild ist die operative Grundlage für Patch Compliance, Pilot Rings, Wartungsfenster und Referenzimages.

Known limitations

• Microsoft currently reports no known issue
• Dynamic Update media requires the matching boot.stl file

Now check

• Deploy KB5121003 to the 25H2 pilot ring
• Validate Secure Boot certificate readiness
• Report build 26200.9168