Microsoft released cumulative update KB5082052 for Windows 11, version 23H2 (2023 Update) as part of the April 2026 Patch Tuesday. The cumulative update package KB5082052 (Build 22631.6936) is intended for Windows 11, version 23H2 (Windows 11 2023 Update) on x64 (amd64) and ARM64 processors for Enterprise and Education editions. This security update includes fixes and quality improvements from KB5078883 (released March 10, 2026). How to download and install update KB5082052.
- Secure Boot (new features). The status of Secure Boot certificate updates on the device may be displayed in the Windows Security app (Settings > Privacy & security > Windows Security). Additional information about status alerts using icons and notifications. These improvements are disabled by default on commercial devices. With this update, Windows quality updates include additional high-confidence data targeting devices, increasing the coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive new certificates only after demonstrating a sufficient number of successful update signals, supporting a managed and phased rollout.
- Network. This update improves reliability when Windows uses SMB compression over QUIC. After installing this update, SMB over QUIC compression requests perform more consistently, reducing the likelihood of timeouts and supporting smoother, more reliable performance.
- Remote Desktop. This update enhances protection against phishing attacks using Remote Desktop (RDP) files. When opening an RDP file, Remote Desktop displays all requested connection settings before connecting, each disabled by default. A one-time security warning also appears when opening an RDP file for the first time on a device. For more information, see the article Overview of security warnings when opening Remote Desktop (RDP) files.
This update addresses an issue where the device could enter BitLocker recovery after a Secure Boot update. Also fixes a sign-in issue: after installing Windows updates released March 10, 2026 or later, some users may experience problems signing into applications with a Microsoft account. Even if the device has an active internet connection, an error message appears during sign-in: No Internet, preventing access to Microsoft services and applications such as Microsoft Teams.
Cumulative update KB5082052 for PCs is installed automatically through Windows Update for Enterprise and Education editions. To check, go to Settings > Windows Update and click Check for updates.
| Feature / Change | Performance Impact | Optimization | PC Speed | Gaming Optimization |
|---|---|---|---|---|
| Secure Boot certificate status in Windows Security app | ⚪ No change | 🟢 Improved (visibility of certificate status) | ⚪ No change | ⚪ No impact |
| Automatic Secure Boot certificate rollout via quality updates | 🟡 Slight improvement (background process) | 🟢 High (managed phased rollout) | 🟡 Minimal improvement (fewer manual steps) | ⚪ No impact |
| SMB over QUIC compression reliability | 🟢 Improved (fewer timeouts) | 🟢 High (smoother data transfer) | 🟢 Moderate improvement (consistent performance) | 🟡 Low (network-related) |
| Remote Desktop RDP phishing protection | ⚪ No change | 🟡 Moderate (extra security step) | 🟡 Slight decrease (one-time warning) | ⚪ No impact |
| BitLocker recovery issue after Secure Boot update | 🟢 Fixed (no unexpected recovery) | 🟢 High (prevents workflow interruption) | 🟢 Improved (avoids boot delays) | ⚪ No impact |
| Microsoft account sign-in issue fix (No Internet error) | 🟢 Fixed (restores access to apps) | 🟢 High (eliminates blocking error) | 🟢 Improved (prevents downtime) | 🟢 High (Microsoft Teams and online services work) |
Find and Change Settings
| Setting | Where to find | How to change |
|---|---|---|
| Secure Boot certificate updates | Settings > Privacy & security > Windows Security | Open Windows Security and check the status of Secure Boot certificate updates. Status alerts may appear as icons and notifications. These improvements are disabled by default on commercial devices. New certificates are received automatically only after the device demonstrates a sufficient number of successful update signals. No manual action is required. |
| SMB over QUIC compression | No user-facing setting | This improvement is applied automatically after installing the update. SMB over QUIC compression requests perform more consistently, reducing timeouts. No configuration is required. |
| Remote Desktop (RDP) file protection | Remote Desktop app | When opening an RDP file, Remote Desktop displays all requested connection settings before connecting, each disabled by default. A one-time security warning appears when opening an RDP file for the first time on the device. Review the settings and enable only those you trust before connecting. |
| BitLocker recovery after Secure Boot update | System behavior | This issue is fixed automatically after installing the update. No user action is required. |
| Microsoft account sign-in issue | System behavior | This sign-in issue is fixed automatically after installing the update. If the error persists, check your internet connection and try signing in again. |
Official announcement on the Microsoft website.
The last 10 Windows updates:
| Update | Build | Version | Windows | Channel | Date |
|---|---|---|---|---|---|
| KB5121157 | 28020.2818 | 26H1 | Windows 11 | Beta | 2026-08-31 |
| KB5121158 | 28120.2824 | 26H1 | Windows 11 | Experimental | 2026-08-31 |
| KB5121794 | 26300.9278 | 26H2 | Windows 11 | Preview | 2026-08-27 |
| KB5121132 | 28120.2760 | 26H1 | Windows 11 | Experimental | 2026-08-21 |
| KB5124040 | 26220.9223 | 25H2 | Windows 11 | Beta | 2026-08-21 |
| KB5124042 | 26340.9233 | 26H2 | Windows 11 | Experimental | 2026-08-21 |
| KB5121106 | 28020.2731 | 26H1 | Windows 11 | Beta | 2026-08-17 |
| KB5121109 | 28120.2738 | 26H1 | Windows 11 | Experimental | 2026-08-17 |
| KB5124036 | 26220.9202 | 25H2 | Windows 11 | Beta | 2026-08-17 |
| KB5124038 | 26340.9212 | 26H2 | Windows 11 | Experimental | 2026-08-17 |