Microsoft has rolled out the January 2026 security update for Windows 11 versions 25H2 and 24H2, bringing a set of important fixes and system changes. The update is officially labeled January 2026 Security Update KB5074109.
- Windows 11 25H2 build: 26200.7623
- Windows 11 24H2 build: 26100.7623
This release does not introduce new features. Instead, it focuses entirely on security improvements, reliability fixes, and system cleanup. Any visual changes or new features were already introduced in the December 2025 security update.
No New Features in This Release
Microsoft confirms that KB5074109 does not add new functionality. All previously announced features and visual changes began rolling out with the December 2025 update.
The January 2026 update is strictly about stability, security, and maintenance, partly because development slowed during the holiday period.
Legacy Dial-Up and Fax Drivers Removed
After installing this update, Windows 11 will no longer include several legacy drivers designed for dial-up internet connections and fax functionality on older laptops and desktops.
Microsoft removed these drivers because:
- They are extremely outdated
- They contain known security vulnerabilities
- Modern hardware no longer relies on dial-up modems
Keeping these drivers in the operating system posed unnecessary security risks.
Networking Issues Fixed
WSL Mirrored Networking Fix
Microsoft fixed an issue where mirrored networking in Windows Subsystem for Linux (WSL) could fail, producing “No route to host” errors. This problem prevented access to corporate VPN resources, even when the Windows host system was connected.
Azure Virtual Desktop Connection Fix
The update also resolves an issue causing remote app connection failures in Azure Virtual Desktop environments, improving reliability for enterprise users.
Power and Battery Fix for NPU Devices
A power-related issue affecting devices with a Neural Processing Unit (NPU) has been fixed. Previously, these devices could remain powered on while idle, negatively impacting battery life and overall power efficiency.
This fix primarily benefits Copilot+ PCs and other NPU-enabled systems.
Windows Core SQLite Component Updated
KB5074109 includes a fix for the Windows Core SQLite (sqlite3.dll) component. Some third-party security software previously flagged this file as untrusted. The update resolves those detections and improves compatibility with security tools.
Windows Deployment Services Change
For security reasons, Windows Deployment Services (WDS) now disables hands-free deployment functionality by default. This change mainly affects enterprise and IT-managed deployment environments.
Secure Boot Certificate Rollout Ahead of June 2026 Expiration
To prepare for the June 2026 Secure Boot certificate expiration, Microsoft has started rolling out new Secure Boot certificates in advance.
Devices that fail to receive updated certificates before expiration may experience boot failures. To minimize risk, Microsoft is using a gradual, reliability-based rollout rather than deploying the certificates all at once.
How to Install the Update
The update will download and install automatically through Windows Update.
If you prefer to install it manually:
- Open Settings
- Go to Windows Update
- Click Check for updates
Conclusion
Windows 11 KB5074109 is a maintenance-focused security update that delivers critical fixes without adding new features. It improves system security, resolves networking and power issues, removes outdated drivers, and prepares devices for future Secure Boot certificate changes.
