KB5078132 (OS Build 22631.6495): Windows 11 23H2 Out-of-Band Update, January 24, 2026
Out-of-band cumulative update for Windows 11 version 23H2, build 22631.6495, released January 24, 2026, fixing cloud storage file access issues introduced by the January 2026 security update.
Summary
KB5078132 is an out-of-band (OOB) cumulative update for Windows 11, version 23H2, producing OS Build 22631.6495. Released on January 24, 2026, it is not a scheduled security update but an emergency fix that builds on the January 13, 2026 security update (KB5073455) and the January 17, 2026 OOB update (KB5077797). See the Microsoft Support page for full details.
Improvements and fixes
- File System - cloud storage fix: After installing the January 13, 2026 Windows security update (KB5073455), some applications stopped responding or hit unexpected errors when opening or saving files to cloud-based storage services such as OneDrive or Dropbox. This update resolves that problem. Additionally, in certain Outlook configurations where PST files are stored on OneDrive, Outlook could hang and refuse to reopen unless the process was forcibly ended or the system restarted. Related symptoms included missing Sent Items and previously downloaded emails being downloaded again. This OOB update corrects all of those behaviors.
Known issues
Some devices with Virtual Secure Mode enabled might fail to shut down or hibernate
Symptom: After installing this update, some Secure Launch-capable PCs with Virtual Secure Mode (VSM) enabled are unable to shut down or enter hibernation. Instead of shutting down or hibernating, the device restarts.
Workaround: This issue is fully resolved in Windows updates released on February 10, 2026 (KB5075941), and in all updates released after that date. The fix covers both devices that use Secure Launch and devices with Virtual Secure Mode (VSM) enabled. An earlier partial fix for some Secure Launch devices was first released through the Microsoft Update Catalog in an OOB update on January 17, 2026 (KB5077797), and later through Windows Update in this out-of-band update on January 24, 2026 (KB5078132).
How to get this update
Before installing, note that Microsoft now combines the latest servicing stack update (SSU) with the latest cumulative update (LCU) into a single package. This release includes the Windows 11 servicing stack update KB5071963 (version 22621.6265), which improves the component responsible for installing Windows updates.
This update is offered automatically through Windows Update to devices already running KB5077797 or KB5073455. Devices with the "Get the latest updates as soon as they're available" toggle enabled in Settings > Windows Update will receive it automatically. If that toggle is off, go to Settings > Windows Update and select Download and install.
For manual deployment, the standalone package is available from the Microsoft Update Catalog. The update is also available through Windows Server Update Services (WSUS) - administrators should refer to the Catalog option for the standalone package.
IT administrators using Microsoft Intune should use the Expedite Windows quality updates feature. Those using Windows Autopatch should follow the Deploy an expedited quality update guidance.
To remove the LCU after installing the combined SSU and LCU package, use the DISM /Remove-Package command with the LCU package name as the argument. You can find the package name by running DISM /online /get-packages. Running wusa.exe with the /uninstall switch will not work on the combined package because it also contains the SSU, which cannot be removed after installation.
Note: This cumulative update includes updates for AI components. Those AI component updates apply only to Windows Copilot+ PCs and will not install on standard Windows PCs or Windows Server.
Frequently asked questions
Why was this update released out-of-band rather than on Patch Tuesday?
Microsoft issued this update outside the normal monthly release cycle because the January 13, 2026 security update (KB5073455) introduced a file system regression that caused application failures and data-access problems with cloud storage services. The severity of that impact - including Outlook hangs and missing email - warranted an immediate fix rather than waiting for the next scheduled update.
Do I need to uninstall KB5073455 before applying this update?
No. KB5078132 is cumulative and includes all fixes from KB5073455 and KB5077797. You apply it on top of your current state. There is no need to remove any prior update before installing this OOB release.
What should I do if devices still fail to shut down or hibernate after installing this update?
The VSM shutdown and hibernation problem introduced by this update is fully resolved by KB5075941, released on February 10, 2026, and all updates released after that date. Install KB5075941 or a later cumulative update to fully address the restart-instead-of-shutdown behavior on Secure Launch and VSM-enabled devices.
How do Intune and Autopatch administrators deploy this OOB update?
Administrators managing devices through Microsoft Intune should use the Expedite Windows quality updates workflow. Those using Windows Autopatch should follow the Deploy an expedited quality update process. Both paths are the recommended approaches for pushing out-of-band fixes outside the standard update ring schedules.
