On October 26, 2026, Microsoft released the out-of-band update KB5134134, corresponding to build 28000.3237 of Windows 11, version 26H1. It is a non-security cumulative update that includes improvements from earlier versions plus additional quality changes.
It is aimed especially at devices that do not receive current updates to the trusted certificate list, such as machines in disconnected environments, machines without access to Microsoft certificate update service, or machines with automatic updates of that list disabled. In that context, it includes an updated load of trusted root certificates.
The update also updates AI components to version 1.2608.951.0, including image search, content extraction, semantic analysis, and the settings model, and combines the latest servicing stack update with the latest cumulative update to improve the reliability of the Windows Update process.
Source: Microsoft Support (https://support.microsoft.com/es-es/servicing/os/windows-11/2026/10/kb5134134-windows-11-26h1-update)
