Last week, Microsoft released the first non-security preview update of 2026 on Windows 11 under KB5074105. Alongside that, Microsoft released corresponding new dynamic updates too alongside them.
For those who may not know, dynamic updates bring improvements to the Windows Recovery process in the form of Windows Recovery Environment (WinRE) updates, which are also called Safe OS updates. The dynamic updates also affect the Setup file binaries in the form of Setup updates.
These Dynamic Update packages are meant to be applied to existing Windows images prior to their deployment. These packages include fixes to Setup.exe binaries, SafeOS updates for Windows Recovery Environment, and more. Dynamic Updates also help preserve Language Pack (LP) and Features on Demand (FODs) content during the upgrade process. VBScript, for example, is currently an FOD on Windows 11 24H2. Both setup and recovery updates were released this time.
This is one of the rarer occasions where Microsoft has shared specific changelogs instead of a general one. The company writes:
"KB5074110: Setup Dynamic Update for Windows 11, version 24H2 and 25H2: January 29, 2026
- [Secure Boot] This release will execute updates in the Boot Manager on devices that already have the Windows UEFI CA 2023 certificate in their Secure Boot Signature Database (DB). It replaces the 2011 signed bootmgfw.efi with the 2023 signed bootmgfw.efi. Be advised of the consequences of resetting the DB or toggling Secure Boot, as this can cause a "Secure Boot violation" issue. In those rare cases, the solution is to create the Secure Boot recovery media.
KB5074111: Safe OS Dynamic Update for Windows 11, versions 24H2 and 25H2: January 29, 2026
- [KDNET] Fixed: The KDNET utility DLLS (kdstub.dll and kdnet.dll) might stop responding when Boot Manager (bootmgr) debugging is enabled during Windows start.
- [Narrator] Fixed: Narrator would not start when Windows is installed from an ISO file."
Microsoft notes that both the Recovery and Setup updates will be downloaded and installed automatically via the Windows Update channel.