Microsoft has released an out-of-band update, KB5064489, for Windows 11 version 24H2, bringing the OS build to 26100.4656. This update addresses critical issues that necessitated immediate attention outside the regular update schedule.
Key Improvements and Fixes:
- Security Enhancements: The update includes miscellaneous security improvements to internal OS functionality, ensuring a more secure computing environment.
- Bug Fixes: Several issues have been resolved, including:
- An issue that caused the Local Security Authority Subsystem Service (LSASS) to stop responding during machine password changes with specific audit settings.
- A problem where File Explorer Home displayed only a single folder, such as Desktop, instead of the expected content with recent files and more.
- An issue in the Resilient File System (ReFS) where using backup applications on large files could result in system memory becoming fully exhausted.
- Stability issues observed after installing the May 2025 security update and subsequent updates, causing devices to become unresponsive in specific scenarios.
- Noto Fonts Rendering: Users have reported blurry or unclear Chinese, Japanese, and Korean (CJK) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers like Microsoft Edge and Google Chrome. This issue arises from limited pixel density at 96 DPI, affecting text clarity and alignment.
Workaround: Increase display scaling to 125% or 150% to improve text clarity. - Windows Firewall Error Events: After installing this update, security event logs might include an error event related to Windows Firewall with Advanced Security. The error appears as event 2042 with the message "Config Read Failed" and "More data is available." This event does not indicate a problem with Windows Firewall and can be safely ignored.
Before installing this update, ensure your device has the latest servicing stack update (SSU). Microsoft combines the latest SSU with the latest cumulative update (LCU) to enhance the reliability of the update process.
To install this update, use one of the following Windows and Microsoft release channels:
- Windows Update: Open Start > Settings > Update & Security > Windows Update. In the Optional updates available area, you will find the link to download and install available updates.
- Microsoft Update Catalog: Visit the Microsoft Update Catalog to download the standalone package for this update.
Conclusion:
The KB5064489 update is a crucial release aimed at enhancing the security and stability of Windows 11 version 24H2. Users are encouraged to install this update promptly to benefit from the improvements and fixes it offers.
Source: Microsoft Support July 13, 2025—KB5064489 (OS Build 26100.4656) Out-of-band - Microsoft Support
