Microsoft Releases KB5095189 OOBE Update for Windows 11 24H2 and 25H2

Microsoft has released KB5095189, a new Out-of-Box Experience update for Windows 11 version 24H2 and Windows 11 version 25H2. The update improves the setup experience users see when they start a new PC or reset an existing device.

The update applies only to the Windows OOBE process, according to the official KB5095189 support page. It does not behave like a normal monthly Windows cumulative update for systems that have already completed setup.

KB5095189 downloads and installs automatically during OOBE when the device has an active internet connection. Microsoft says the update requires a restart after installation.

What KB5095189 Changes

Microsoft describes KB5095189 as a cumulative update for the Windows 11 OOBE process. OOBE is the setup flow that appears when users configure Windows for the first time, including region, keyboard, network, account, and privacy screens.

The Windows 11 OOBE overview explains that the setup flow breaks first-run configuration into separate screens so users can complete the initial device setup step by step.

This update focuses on that setup stage. Microsoft has not listed new user-facing features, security vulnerabilities, or CVE identifiers for KB5095189, so it should be treated as a setup reliability and experience update rather than a security patch.

Update	KB5095189 details
Release date	June 23, 2026
Applies to	Windows 11 version 24H2 and Windows 11 version 25H2, all editions
Update type	Out-of-Box Experience cumulative update
Install method	Automatic during OOBE when internet is available
Restart required	Yes
Replaces	KB5078674

How the Update Installs During Setup

KB5095189 does not target the normal desktop Windows Update flow in the same way as a monthly cumulative update. It becomes available only when OOBE updates are installed during the setup process.

Microsoft’s Windows updates during OOBE documentation says critical zero-day patch updates begin downloading automatically during OOBE after a user connects to a network.

That design lets Microsoft update parts of the first-run experience before the user reaches the desktop. It also means setup-time connectivity matters, especially for organizations that provision many devices at once.

Why This Matters for IT Admins

For home users, KB5095189 should install quietly during setup if the PC connects to the internet. Most users will not need to manually download anything or change a setting.

For IT teams, the update matters because OOBE sits inside the device provisioning path. Any change to the setup flow can affect account setup, privacy prompts, update timing, restart behavior, and the first user experience.

Microsoft says devices may download updates during OOBE and restart to complete installation. The OOBE documentation also notes that users may see different screens depending on configuration, network state, and device setup choices.

• KB5095189 targets first-run setup, not everyday desktop use.
• The update installs automatically during OOBE if the device has internet access.
• Devices may restart after the update applies.
• IT admins should test provisioning flows that depend on a consistent OOBE experience.
• Microsoft provides file information for administrators who need to audit the package.

KB5095189 Replaces KB5078674

Microsoft confirms that KB5095189 replaces the earlier KB5078674 OOBE update, which was released for Windows 11 versions 24H2 and 25H2 in February 2026.

That replacement detail matters for deployment consistency. A device that connects during OOBE should be able to receive the newer package, while a device without internet access during setup may miss setup-time OOBE updates through that channel.

Microsoft does not describe this as a fix for a publicly tracked security issue. Under Microsoft’s own software update terminology, a security update addresses a product-specific security vulnerability, while a general update addresses a noncritical, non-security-related problem.

File Information Is Available

Microsoft has also provided file information for KB5095189. The support page says administrators can download a CSV file that lists the files included in the update package.

This is useful for administrators who need to compare update contents, audit setup-related changes, or verify that endpoint telemetry matches the expected update files. The Microsoft support article also notes that the English United States version of the update may contain files for additional languages.

That language-pack note is normal for Windows servicing. It does not mean the update has a separate regional impact, but it helps explain why administrators may see files for more than one language in the package.

Question for admins	What to check
Will devices receive KB5095189 during setup?	Confirm internet access during OOBE
Is a restart expected?	Yes, Microsoft says a restart is required after applying the update
Does it replace an older OOBE update?	Yes, it replaces KB5078674
Is this tied to CVEs?	No CVE identifiers are listed on the KB page

What Users Should Know

Users setting up a new Windows 11 PC should keep the device connected to the internet and plugged in during the first-run experience. Microsoft’s OOBE update guidance says Windows can download and install updates during setup, and the process can take time depending on network and hardware conditions.

There is no separate action listed for users who have already completed setup. Since KB5095189 applies only to OOBE, users should not expect it to appear like a regular cumulative update on an already provisioned Windows 11 desktop.

Organizations should treat this as a deployment consistency item. If a rollout depends on a predictable first-run experience, admins should make sure newly imaged or reset Windows 11 24H2 and 25H2 devices can reach Microsoft update services during OOBE.

Bottom Line

KB5095189 is a small but relevant update for Windows 11 setup. It improves the OOBE experience for Windows 11 versions 24H2 and 25H2, installs automatically during setup when internet access is available, requires a restart, and replaces the earlier KB5078674 release.

The update is not a normal monthly security patch, and Microsoft has not associated it with CVEs. Based on Microsoft’s standard update definitions, KB5095189 fits best as a functional OOBE update aimed at improving setup reliability and consistency.

FAQ