Microsoft ships November 2026 Patch Tuesday: KB513261 and KB5131087 land for Windows 11

Microsoft's eleventh Patch Tuesday of 2026 — cumulative updates KB513261 and KB5131087 — landed this month carrying the November 2026 security patches for hundreds of vulnerabilities across Windows 11 versions 26H2, 25H2, 24H2 and 23H2. The updates are mandatory, and admins can pull them via Windows Update or the Microsoft Update Catalog.

Because the rollout is based on 24H2, devices on 25H2 or 26H2 receive the identical payload. There are no exclusive or version-specific changes — every fix ships to every supported build.

What's new for end users?

The headline consumer-facing change is a rebuilt File Explorer context menu. It opens faster, cuts clutter, and — through a new "Customize menu" option — lets users toggle built-in commands like Send to and Create shortcut, add commands like Print, control which app extensions appear in the main menu or a submenu, and display Cut, Copy, Paste, Rename, Delete and Share as text rather than an icon row.

Other end-user additions:

• A modernized AutoPlay dialog with dark mode, better text scaling, and notifications surfaced in the notification center.
• File Explorer search results now show name, location and date in a consistent layout; the address bar supports ~ shortcuts such as ~\AppData; Folder Options gets dark mode.
• A refreshed Gaming Task View in XBOX mode with a new navigation bar for Exit to Desktop and Power Options.
• A Privacy & security page redesign in Settings, grouping Camera, Microphone and Location controls on one page.
• The Device Info card on Settings Home, first introduced in March 2026 preview update KB5079391, expands to more markets for Microsoft account users.
• Phone Link message previews on hover in Start, smoother taskbar preview animations, and better multi-monitor taskbar settings persistence.

What does this change for IT admins?

The recovery story is the biggest operational shift. A new Cloud rebuild option reinstalls Windows 11 using an image and drivers downloaded straight from Windows Update — including when Windows won't boot — with no USB media or custom image required. IT admins can trigger it remotely through the Recovery CSP, choosing the installed build or a target build, and can opt for drive sanitization using the storage hardware's erase capability before reinstall (sanitization is irreversible).

WinRE also now automatically reuses eligible saved Wi-Fi profiles, including certificate-based networks, so devices get online during recovery without preconfigured credentials. The feature is on by default, and admins can disable it.

Networking gets a significant addition: IPv6 CLAT support for Wi-Fi and Ethernet, adding client-side 464XLAT translation so IPv4-only apps keep working on IPv6-only networks. PREF64 discovery happens via Router Advertisements by default with DNS ipv4only.arpa as fallback. CLAT requires SLAAC-based addressing — DHCPv6 Prefix Delegation and WSL aren't supported. Admins enable it via netsh or Group Policy under Network > TCPIP Settings > IPv6 Transition Technologies.

Security and deprecation clock

Memory integrity (HVCI) protection now expands across eligible devices, potentially enabling during updates — while respecting existing user or admin choices.

There's a deprecation deadline worth calendaring: the Data Protection API's prompt-based protect and unprotect operations now trigger a warning stating the flow retires in April 2027. Microsoft advises stopping creation of new prompt-protected data, moving to non-interactive protection flows, and decrypting or migrating existing data before retirement.

Accessibility and platform bits

Narrator can now read and navigate math equations in Word, PowerPoint and supported web content in Edge (153.0.4234.32+) and Chrome (153.0.8010.18+), supporting US and UK English, Traditional Chinese, Finnish, German and Spanish. Magnifier gains a contrast theme toggle, per-monitor zoom, and viewport locking on multi-monitor setups. Live Captions adds an "Include screen reader audio" setting, off by default, so Narrator, JAWS and NVDA audio stays out of captions.

Windows text shaping now supports Unicode 17.0 — 4,803 new characters across four scripts: Beria Erfe, Sidetic, Tai Yo and Tolong Siki.

Microsoft reports no known new issues with this month's release, and it patched a long-standing bug that broke USB audio on some PCs.