Windows 11 Version 24H2 Gets Key Security and Stability Fixes with Out-of-Band Update KB5064489

Microsoft has released an important out-of-band update, KB5064489, for devices running Windows 11 version 24H2. This update brings the operating system to build 26100.4656 and addresses critical security vulnerabilities and enhances system stability.

The update, released on July 13, 2025, is aimed at resolving specific issues that could impact user experience and system security. The key improvements focus on the Local Security Authority Subsystem Service (LSASS), File Explorer, display scaling, and Chinese, Japanese, and Korean (CJK) text rendering.

Critical Security Fortification

A significant aspect of this update is the deployment of a crucial security fix for the Local Security Authority Subsystem Service (LSASS). LSASS is a fundamental process in Windows responsible for enforcing security policies. A vulnerability in this service could lead to system instability and, in some cases, system crashes. This update addresses an issue where LSASS could crash, particularly during Windows Recovery Environment operations when an application calls a specific function. Previous instances of LSASS memory leaks have caused significant disruptions, sometimes necessitating out-of-band patches to resolve them.

Enhancements to System Stability

Beyond the critical security patch, KB5064489 delivers several stability enhancements designed to improve the overall user experience:

  • File Explorer and Display Scaling: The update includes improvements to how File Explorer and its dialog boxes handle text and display scaling. In previous builds, changing text size in the Accessibility settings didn't always apply uniformly to all elements of a dialog box, leading to an inconsistent user interface. This update aims to rectify these scaling issues, ensuring that all interface elements resize appropriately.

  • CJK Text Rendering: For users of Chinese, Japanese, and Korean languages, this update addresses issues related to text rendering. One specific problem resolved was the failure of voice typing to initiate from the touch keyboard when using the Chinese (Simplified) narrow layout.

Windows 11, version 24H2, is the third major update to the operating system and carries the build number 10.0.26100. It introduces a range of new features and also modifies system requirements, for the first time since the initial release of Windows 11.

How to Get the Update

As an out-of-band update, KB5064489 is available for manual download and installation. Users can obtain the standalone package for this update from the Microsoft Update Catalog. For those enrolled in the Windows Insider Program, particularly the Release Preview Channel, updates are often delivered to test servicing pipelines before broader release.

It is recommended that users of Windows 11 version 24H2 install this update to ensure their systems are protected against the latest security threats and benefit from the included stability improvements.