Microsoft’s Media Creation Tool is now serving Windows 11 installation media that integrates the May 12, 2026 cumulative update KB5089549. This quiet refresh means anyone downloading the tool or directing it to prepare a USB drive will receive Windows 11 version 25H2 with the latest fixes already baked in—no need to download a giant patch immediately after setup.

The change brings the installation image up to date with the security and quality improvements that Microsoft released to all Windows 11 25H2 devices on May 12. For users who rely on physical media for clean installs, repairs, or bulk deployments, this is a significant time-saver. Rather than installing an older build and then cycling through several post-install updates, a freshly prepared USB installer now carries the May 2026 security baseline.

The Media Creation Tool: A brief refresher

The Media Creation Tool has been Microsoft’s go-to utility for downloading Windows installation files and writing them to a USB flash drive or DVD since the Windows 10 era. It replaced the older Windows USB/DVD Download Tool and simplified the process of creating bootable media. With each major feature update, Microsoft revises the ISO image that the tool offers, though the cadence of cumulative update integration varies.

Typically, the Media Creation Tool delivers an ISO that is current as of the most recent Patch Tuesday release for that feature update. This means the ISO often lags a few weeks behind the very latest cumulative update, but Microsoft periodically refreshes it to keep the gap minimal. In this case, the inclusion of KB5089549 brings the ISO forward to May 2026, making it the most current refresh for Windows 11 25H2.

What KB5089549 brings

Cumulative update KB5089549 is the security and quality update for Windows 11 25H2 that Microsoft pushed to all devices via Windows Update on May 12, 2026. While the release notes provided by Microsoft detail the specific CVEs addressed, the update almost certainly includes the latest security patches for kernel, browser, networking, and defense-in-depth vulnerabilities. Additionally, non-security fixes often bundle reliability improvements for the operating system stack, driver compatibility updates, and performance refinements.

Because the update arrived through the Media Creation Tool, it does not include the optional preview updates that occasionally follow Patch Tuesday. Those preview updates, sometimes labeled with a “C” or “D” week designation, remain separate and are not integrated into the official ISO. However, the critical security fixes—the ones that turn an unpatched machine into a prepared target—are now part of the installation media.

Windows 11 25H2 build context

The refreshed ISO likely carries a build number in the 2xxxx range, representing the 25H2 feature update. In the past, Microsoft has bumped the build number in the ISO when a new cumulative update is integrated, so the downloadable image now shows a revision that includes KB5089549 in its version string. This means that after installation, Windows Update will only need to fetch optional or post-May 2026 fixes that were released after the ISO was prepared.

For those keeping track, Windows 11 25H2 is the latest feature update. Over its lifecycle, Microsoft will continue to refresh the Media Creation Tool periodically to include future cumulative updates. The current refresh ensures that anyone performing a clean installation in May 2026 or later starts with a fortified baseline.

How to get the updated USB media

Creating an installer with the integrated updates is straightforward. The process remains unchanged, and the same Media Creation Tool runs on any supported version of Windows. Here’s a step-by-step walkthrough for those who need a quick guide:

  1. Visit the official download page. Navigate to the Microsoft Software Download website for Windows 11. The page automatically detects your device and offers the appropriate tool.
  2. Download the Media Creation Tool. The executable is small and does not require installation. Save it to your desktop or downloads folder.
  3. Run the tool as administrator. Right-click the file and choose “Run as administrator.” Accept the license terms when prompted.
  4. Choose “Create installation media.” Select “Create installation media (USB flash drive, DVD, or ISO file) for another PC” and click Next.
  5. Confirm language, edition, and architecture. The tool will default to the recommended options for the current PC. If you are creating media for a different system, uncheck “Use the recommended options” and select the desired language, edition (Home or Pro), and 64-bit architecture.
  6. Select USB flash drive. Choose “USB flash drive” when asked which media to use. Insert a USB drive with at least 8 GB of capacity; note that the tool will erase all data on it.
  7. Let the tool download and write the files. The Media Creation Tool will download the updated Windows 11 25H2 files—now including KB5089549—and write them directly to the USB drive, making it bootable.
  8. Finish and verify. Once complete, the tool displays a “Your USB flash drive is ready” message. You can now use it to boot any compatible PC.

The entire process usually takes 30–45 minutes on a fast internet connection, depending on bandwidth and USB write speeds.

Why updated installation media matters

For most home users, the primary benefit is the elimination of a large post-install update round. A typical clean install from an older ISO might require a cumulative update of several hundred megabytes, sometimes followed by a servicing stack update, a .NET Framework update, and a compatibility patch. With an ISO that already contains the latest cumulative update, the initial Windows Update scan finds little to download beyond malware definition updates and any very recent patches released after the ISO was compiled.

Enterprise and education customers gain even more. Many organizations still rely on offline imaging or won’t connect devices to the internet until a known-good configuration is deployed. Having a freshly updated image reduces the attack surface during those critical first hours. It also speeds up automated deployment workflows via Microsoft Deployment Toolkit or Configuration Manager, since fewer post-setup tasks are required.

IT administrators often maintain a library of up-to-date images. The convenience of simply pointing the Media Creation Tool to a USB drive and ending up with an image that matches the current Patch Tuesday state is hard to overstate.

The rhythm of Microsoft’s ISO refreshes

Microsoft does not announce every ISO refresh through the Media Creation Tool; the company tends to quietly replace the underlying file after a cumulative update proves stable. Historically, the refresh cadence is tied to the monthly “B” release (Patch Tuesday) and sometimes happens mid-month when a lingering issue is addressed. The May 2026 refresh is one such update, likely validating that the May 12 cumulative update did not introduce widespread problems.

When Windows 11 first launched, the Media Creation Tool initially offered the original release build. Over time, the ISOs grew to include the first year’s worth of updates, then feature updates, and now the tool seamlessly delivers the latest build of the currently supported version. Microsoft has streamlined the backend so that the same executable fetches the newest files; users no longer need to re-download the tool for every refresh.

Potential pitfalls and precautions

While an updated ISO is generally welcome, it’s always wise to approach a new installation with a few safeguards:

  • Back up your data. A clean install wipes everything on the target drive. Make sure files are saved elsewhere.
  • Check driver availability. Even though the cumulative update may include new driver compatibility, it’s best to download essential drivers—chipset, network, graphics—from the manufacturer’s website before starting.
  • Verify the USB drive’s boot order. After creating the USB, enter the PC’s firmware settings (UEFI) and set the USB drive as the primary boot device.
  • Keep a secondary device handy. If something goes wrong during installation, having a second computer or phone available to search for solutions is invaluable.
  • Be aware of known issues. Microsoft publishes “known issues” for each cumulative update. Before deployment, check the Windows 11 release health dashboard to confirm there are no widespread blockers. KB5089549, for instance, might have a few edge-case bugs that a later update will fix; reading the release notes helps set expectations.

Community and real-world feedback

Since the previous ISOs shipped with an older build, users who installed Windows 11 25H2 prior to mid-May 2026 often found themselves waiting through a lengthy first-boot update sequence. Posts on Windows enthusiast forums frequently mention the relief of grabbing a freshly updated ISO, especially when setting up a new gaming rig or replacing a failing drive. The difference between a January 2026 ISO and the May refresh can translate to a dozen additional updates skipped.

Those who monitor Microsoft’s download servers have also noticed that the MD5 hashes of the Media Creation Tool ISOs change whenever a cumulative update is integrated. This kind of digital breadcrumb confirms the quiet refresh for those who keep local copies.

What this means for the remainder of 2026

As the year progresses, Microsoft will likely refresh the 25H2 installation media several more times. The usual pattern is to produce a new ISO after each Patch Tuesday, though gaps can occur if a monthly update introduces a significant known issue. Users who maintain a USB installer for troubleshooting or emergency repairs should plan to recreate the drive every few months to stay current on security.

There is also the broader context of Microsoft’s servicing strategy. By ensuring that the first-boot experience includes the latest cumulative update, the company reduces the temptation for users to disable Windows Update out of frustration with long download times. A smoother out-of-box experience leads to better security compliance across the ecosystem.

Creating a bootable USB from an ISO (alternative method)

For those who prefer to download the complete ISO file directly rather than using the Media Creation Tool to write to USB, Microsoft’s download page also offers ISO downloads. The ISO can be saved and later written to a USB drive using third-party tools like Rufus, but the integrated Media Creation Tool method remains the most straightforward.

After downloading the ISO, users can mount it, copy the contents to a properly formatted FAT32 USB drive, or use Microsoft’s own disk-partitioning instructions. However, the Media Creation Tool handles the bootable partition creation automatically, handling the nuances of UEFI and Secure Boot requirements.

Final thoughts

The inclusion of KB5089549 in the Windows 11 USB media is more than a convenience—it’s a commitment to security hygiene at the point of installation. By stripping away the immediate need for post-setup patches, Microsoft gives both everyday users and IT professionals a cleaner, faster path to a protected desktop. Whether you’re building a new PC, refreshing an aging laptop, or deploying hundreds of machines across a campus, the updated Media Creation Tool ensures you start with a solid foundation.

Remember to always download the Media Creation Tool only from the official Microsoft website. Third-party sources can bundle malware or outdated files. A direct link and version verification can save hours of troubleshooting and potential data loss.

With the May 2026 refresh now live, there has never been a better time to create a fresh Windows 11 25H2 USB installer. The process is quick, the security benefits are immediate, and the peace of mind is well worth the effort.