Microsoft has started rolling out the June 2026 Patch Tuesday update for Windows 11 version 23H2. The new release, KB5093998 (OS Build 22631.7219), includes security fixes, File Explorer search improvements, device management enhancements, Secure Boot updates, and servicing stack reliability improvements.
While this month’s update doesn’t introduce major new features, it delivers several meaningful improvements for both consumers and enterprise users, particularly around search functionality, device management, and system security.
File Explorer Search Gets More Accurate
The most noticeable improvement in KB5093998 is an update to File Explorer search.
Microsoft has improved support for:
- Chinese-language searches
- UTF-8 encoded files without a Byte Order Mark (BOM)
- Search result rendering
- Content view text display
- File information tooltips
The company says text now appears more clearly and consistently across search results and File Explorer views, making file discovery more reliable, especially in multilingual environments and developer workflows.
Better Reliability for Managed Devices
Organizations managing Windows devices should see improved reliability after installing the update.
Microsoft has enhanced connectivity and certificate renewal processes for devices enrolled through multiple management platforms, including Mobile Device Management (MDM) solutions and modern enterprise management tools. The improvements help devices synchronize more reliably and renew management certificates successfully.
For businesses managing large fleets of Windows PCs, this change could reduce enrollment and management-related issues.
Secure Boot Certificate Rollout Continues
A major focus of the June 2026 update is Microsoft’s ongoing Secure Boot certificate migration effort.
Secure Boot certificates used by most Windows devices are beginning to expire in June 2026. Microsoft has been gradually deploying updated certificates over the past several months and is now expanding the rollout to more eligible devices.
With KB5093998, Windows Update now includes additional device-targeting intelligence to identify systems that can safely receive the new certificates.
Microsoft says devices that have not yet received the updated certificates will continue to function normally and receive regular Windows updates.
BitLocker Recovery Issue Fixed
Microsoft has also resolved a known issue that could cause some systems to unexpectedly enter BitLocker recovery mode.
The problem affected certain devices after boot file updates on systems with specific Trusted Platform Module (TPM) validation configurations, including some PCR7-related settings. The fix should improve update reliability and reduce unexpected recovery prompts.
New Secure Boot Privacy Policy for Enterprises
The update introduces a new Group Policy and Mobile Device Management setting called LimitSecureBootRequiredServiceData.
When enabled, Windows limits the Secure Boot-related diagnostic information sent to Microsoft by removing specific Secure Boot service events. The policy is designed for organizations implementing restricted data-sharing configurations and aligns with Microsoft’s Windows restricted traffic feature baseline.
Mobile Operator Profile Updates
KB5093998 also includes updated Country and Operator Settings Asset (COSA) profiles for certain mobile carriers.
These updates help ensure compatibility and connectivity improvements for supported mobile broadband devices.
June 2026 Security Fixes Included
As a mandatory Patch Tuesday release, KB5093998 contains Microsoft’s latest security updates for Windows 11 version 23H2.
The update addresses security vulnerabilities across the operating system and includes all fixes and quality improvements previously released through the May 2026 optional update. Users who have already installed recent updates will receive only the new changes included in this package.
Servicing Stack Improvements
Microsoft is also shipping Windows 11 Servicing Stack Update KB5094146 alongside this release.
Servicing stack updates improve the component responsible for installing Windows updates and help ensure future updates are delivered and installed more reliably.
No Known Issues Reported
Microsoft currently reports no known issues affecting KB5093998.
Unlike some previous cumulative updates, the company has not identified any major compatibility problems or deployment blockers at launch.
How to Install KB5093998
The update is now available through Windows Update.
To install it manually:
- Open Settings
- Navigate to Windows Update
- Click Check for updates
- Download and install KB5093998
- Restart your PC when prompted
The update is also available through:
- Windows Update for Business
- Windows Server Update Services (WSUS)
- Microsoft Update Catalog
Most users will receive the update automatically over the coming days.
End of Support Reminder
Microsoft has also reminded customers that Windows 11 version 23H2 Enterprise and Education editions will reach end of support on November 10, 2026.
After that date, affected devices will no longer receive security updates, bug fixes, or technical support. Microsoft recommends upgrading to a newer Windows 11 release before support ends.
Download link
You can download and manually install Windows 11 update KB5093998 by clicking here. If you need help in understanding how to install these updates manually on your PC, you can refer to our step-by-step noob-friendly tutorial.Â
Stay tuned to WinCentral for all latest news about Windows 11 update related news and keep reading our full coverage here.
Please follow us on our Facebook page and X account for all latest and breaking Windows and Microsoft related news.
 improves File Explorer search, Secure Boot, and overall reliability. Download Link %%sep%% Read in %%primary_category%% on %%sitename%%){kind=link}