Microsoft has rolled out KB5095189, a brand new cumulative replace focusing on the Out-of-Field Expertise (OOBE) for Home windows 11, variations 24H2 and 25H2.
Launched on June 23, 2026, this replace refines the preliminary setup circulation that customers encounter when configuring a brand new or freshly reset Home windows 11 machine, slightly than touching the core working system parts.
KB5095189 is scoped completely to the Home windows OOBE course of, the guided sequence customers stroll by way of throughout first-time machine setup, together with area choice, account configuration, and privateness settings.
Not like customary cumulative updates that patch broader OS performance, this replace improves stability and reliability particularly throughout that onboarding sequence.
The replace robotically downloads and installs throughout OOBE, supplied the machine has an lively web connection at setup time. Gadgets with out connectivity throughout OOBE is not going to obtain this patch by way of that channel.
Home windows 11 OOBE Cumulative Replace
This can be a focused, delivery-specific replace. It doesn’t seem by way of Home windows Replace for already-provisioned methods within the conventional sense; as an alternative, it’s fetched and utilized through the OOBE stage itself.
This design lets Microsoft patch setup-related bugs, enhance compatibility, or modify onboarding logic with out requiring a full servicing stack replace on gadgets already in lively use.
For enterprise IT groups managing machine provisioning at scale, significantly by way of Autopilot or related deployment pipelines, this issues as a result of inconsistent web availability throughout OOBE could cause gadgets to finish setup with the older KB5078674 baseline as an alternative of KB5095189, probably resulting in configuration drift throughout a fleet of newly imaged machines.
Microsoft has printed a CSV file detailing all information included in the KB5095189 package, accessible through Microsoft’s official obtain hyperlink. Safety groups and system directors verifying replace integrity or auditing OOBE-related adjustments can cross-reference this file itemizing in opposition to endpoint telemetry.
Notably, Microsoft flags that the English (United States) launch of this replace could bundle information for extra language packs, which is customary follow for cumulative updates spanning multi-region deployments.
Whereas OOBE updates aren’t historically considered by way of a vulnerability-patching lens, they’re related to safety operations for just a few causes. Onboarding circulation bugs can sometimes introduce misconfigurations, incomplete privateness setting enforcement, or account provisioning points that create downstream publicity.
Organizations with strict compliance necessities round machine baseline configurations ought to affirm imaging processes pull KB5095189 slightly than the deprecated KB5078674, particularly for brand spanking new machine rollouts occurring after June 23, 2026.
No CVE identifiers or safety advisories are related to this launch, indicating it’s a useful and reliability replace slightly than a safety patch.
Strengthen Your SOC by Accelerating Menace Detection & Speedy Investigations. -> Integrate ANY.RUN With Your SOC Now.