On September 9, 2025, Microsoft released KB5065431, a cumulative update for Windows 11. This update brings OS Builds 22621.5909 and 22631.5909 to supported systems. It’s focused on security improvements, bundles earlier fixes, and includes important servicing information for administrators and everyday users alike.
Who Gets This Update?
- Windows 11 Enterprise & Education, version 22H2
- Windows 11, version 23H2 (all editions)
If your system runs one of these versions, this update should be available through Windows Update.
What’s New in KB5065431?
🔒 Security Enhancements
Microsoft has addressed several vulnerabilities to keep devices more secure. As with all “Patch Tuesday” releases, this update is highly recommended to ensure protection against the latest threats.
🛠 Included Fixes from Earlier Updates
- For Windows 11, version 23H2, all prior 22H2 improvements are rolled in.
- For Windows 11 Enterprise & Education, version 22H2, this update also carries fixes from the August 26, 2025 (KB5064080) release, such as:
- Resolving a bug where non-admin users were hit with unexpected User Account Control (UAC) prompts when repairing MSI-based apps (including Office Professional Plus 2010 and some Autodesk products).
Important Notices for Users & IT Admins
Secure Boot Certificate Expiry
Microsoft has warned that Secure Boot certificates will begin expiring in June 2026. If you don’t keep your system up to date, your PC may fail to boot securely. Now is the time to review Microsoft’s guidance and ensure you’re prepared.
End of Servicing for Windows 11, version 22H2
- Non-security preview updates ended on June 26, 2025.
- Monthly security updates will continue until October 14, 2025.
- After that date, version 22H2 will no longer be supported.
👉 If you’re still on 22H2, consider planning your upgrade to a newer version of Windows 11 to stay protected.
How to Install KB5065431
Installing this update is simple:
- Go to Settings → Update & Security → Windows Update
- Click “Check for updates”
- If KB5065431 is available, select Download and Install
Why This Update Matters
This release is more than just a routine patch. It:
- Strengthens security defenses
- Fixes annoying software issues (like UAC prompts during MSI repairs)
- Helps prepare for the Secure Boot certificate change in 2026
- Reminds users of the end-of-support date for 22H2
Final Thoughts
The KB5065431 update may not introduce flashy new features, but it plays a crucial role in keeping Windows 11 secure, stable, and future-ready. With the October 2025 servicing deadline for version 22H2 on the horizon, this update also serves as a timely reminder to plan ahead and keep your systems supported.
