
In this month’s (April 2026) Patch Tuesday event, Microsoft released KB5083768 for Windows 11 AI+ PCs. After installation, the build number rises to 28000.1836, focusing on fixing security issues related to Secure Boot, network transfers, and Remote Desktop.
Regarding network security, this update significantly improves network transfer stability and optimizes the compression mechanism of the SMB over QUIC protocol, effectively reducing transmission timeouts and ensuring more stable completion of compression requests.
SMB over QUIC is a network transmission protocol that combines the advantages of the Server Message Block Protocol and the QUIC transport layer protocol.
It provides secure file sharing services through encrypted channels, addressing the security vulnerabilities of the traditional SMB protocol in untrusted network environments, while optimizing network transmission reliability and speed.
For Remote Desktop services, the update introduces stricter protection measures. The system will now display a full configuration request before connecting and issue a security warning upon first opening the .rdp file, thus blocking phishing attacks that exploit configuration files.
Regarding Secure Boot, Microsoft has improved the certificate distribution logic, using more precise targeting data to ensure that only devices with a good update history automatically receive new certificates.

This update fixes a bug where devices would unexpectedly enter the BitLocker recovery screen after receiving a Secure Boot update. Users can also check the update status directly within the Windows Security Center app.
It is important to emphasize that Windows 11 26H1 is not a regular upgrade for existing devices. Microsoft has explicitly stated that this version is a hardware-optimized version designed specifically for next-generation chips and will be exclusively pre-installed on new ARM64 devices equipped with Snapdragon X2 Plus, Elite, and Extreme processors starting in early 2026. Existing computers using Intel or AMD hardware will not receive this version.