Windows 11 KB5129195 emergency update banner showing a shield checkmark icon over a note about the out-of-band Remote Desktop fix

Windows 11 KB5129195 Emergency Update Is Here — Here’s What It Actually Fixes

Microsoft just shipped Windows 11 KB5129195, an emergency out-of-band update released on September 14 to stop a wave of Remote Desktop failures that the previous patch caused. If your remote sessions have been stuck on a “please wait” screen or refusing to sign in, this update is the fix — though it doesn’t touch every bug from this month’s rocky update cycle. Here’s exactly what changed, what’s still broken, and how to get it.

  • Released: September 14, 2026, as an out-of-band (unscheduled, emergency) update
  • Affected builds: Windows 11 24H2 (Build 26100.9457) and 25H2 (Build 26200.9457)
  • Main fixes: Remote Desktop Services failures, WSL/Hyper-V folder sharing, a USB audio bug, plus protection for a new privilege-escalation flaw (CVE-2026-62721)
  • Still broken: AMD GPU freezes, some total audio loss, a handful of Explorer.exe crashes
  • Install time: Roughly 10 minutes, and it’s mandatory through Windows Update

Why Windows 11 KB5129195 Had to Ship as an Emergency Patch

This story starts on September 8, when Microsoft’s regular Patch Tuesday release closed out two actively exploited zero-day flaws in a security update the company called its biggest of the year. You can read the full breakdown in our Patch Tuesday September 2026 coverage, but the short version is that it also introduced a serious side effect nobody caught in testing.

Within days, IT admins and remote workers started reporting that Remote Desktop connections were dying minutes into a session, sign-in attempts were failing outright, and some hosts hung indefinitely on the “Please wait for the Remote Desktop Configuration” screen. For anyone who works from a remote machine daily, that’s not a cosmetic annoyance — it’s a dead stop.

Microsoft confirmed the regression and skipped its normal monthly cadence, pushing KB5129195 out five days later instead of waiting for October’s Patch Tuesday. That’s a fairly rare move, reserved for bugs serious enough that shipping fast beats shipping on schedule.

What Actually Got Fixed

Four distinct problems are addressed in this release, and they land in very different corners of Windows. Here’s how each one behaved before the patch and what changes now.

Issue Before KB5129195 Now
Remote Desktop Services Connections dropped, sign-ins failed, hosts hung on setup Stability restored for standard RDP sessions
WSL / Hyper-V folder sharing Shared Windows folders didn’t appear, or wouldn’t open, inside Linux VMs Plan9 file sharing works again for WSL and HCS-managed VMs
USB Audio Class 1.0 devices Multichannel and 3D audio modes could fail even though stereo worked fine Multichannel modes fixed for that specific device class
Privilege escalation (CVE-2026-62721) Flaw in the Windows User-Mode Power Service, unpatched Additional protection now shipped

Worth noting: the WSL fix matters for more people than the name suggests. Any Linux-based dev tool or AI coding agent that reads project files through a shared Windows folder — including remote-access apps that spin up a VM for sandboxing — depends on that Plan9 sharing path working correctly.

What’s Still Broken After This Patch

This is an emergency fix for the worst regressions, not a full cleanup of everything September’s update cycle broke. A few known issues are explicitly still open.

  • AMD GPU driver timeouts, black screens, and system freezes remain unresolved
  • Some PCs still experience total audio loss, with Volume settings throwing a “Device cannot start (Code 10)” error
  • Explorer.exe can still crash to a black screen on startup, mostly in enterprise setups running Citrix or FSLogix
  • File History still fails to detect some external backup drives

If you’re hitting any of those four, KB5129195 won’t help — Microsoft hasn’t published a timeline for them yet, so keep an eye on the Windows release health dashboard rather than assuming your next update covers it.

How to Install KB5129195 (and Confirm It Worked)

For nearly everyone, this Windows 11 out-of-band update installs itself. It arrives through Windows Update automatically, and because it’s classified as a security release, Microsoft is treating it as mandatory rather than optional.

To check it manually, open Settings > Windows Update and look for “2026-09 Security Update (KB5129195)” in your update history, or confirm your build number reads 26100.9457 (24H2) or 26200.9457 (25H2) under About in System settings. IT teams managing fleets can push it through Windows Update for Business or WSUS, and offline installers need the KB5043080 checkpoint update applied first.

If this month’s patch cycle already feels bumpy to you, you’re not imagining it — this is the second mid-cycle fix in recent memory, after KB5124008 introduced its own VPN bug that needed a follow-up patch of its own. And one more caveat: this release only covers Windows 11 desktops. Windows Server admins running RDS hosts need a separate out-of-band update for their platform.

Frequently Asked Questions

Is KB5129195 mandatory?

Yes. Because it’s classified as a security update, Windows Update installs it automatically on eligible PCs rather than leaving it as an optional download.

Which Windows 11 versions does it apply to?

Version 24H2 (Build 26100.9457) and version 25H2 (Build 26200.9457). There’s a separate out-of-band release, KB5129194, for devices still on the older 26H1 branch.

Does KB5129195 fix the AMD GPU freezing issue?

No. Microsoft has confirmed AMD GPU driver timeouts and black-screen freezes are separate from this fix and remain unresolved as of this release.

How do I check if KB5129195 is installed?

Go to Settings, then Windows Update, then Update History, and look for “2026-09 Security Update (KB5129195).” You can also check your build number under System > About.

Does this affect Windows Server too?

Not directly. KB5129195 is a Windows 11 desktop release. Windows Server versions running Remote Desktop Services need their own separate out-of-band patch.

The Bottom Line

Install KB5129195 as soon as it reaches your PC, especially if you rely on Remote Desktop for work — leaving a known RDP regression unpatched is a worse bet than a ten-minute update. Just don’t treat it as a full recovery from this month’s rough patch cycle: if you’re on an AMD GPU or already dealing with audio dropouts, those fixes are still coming, and Microsoft’s silence on a timeline is the one part of this release worth grumbling about.


Comments

Leave a Reply

Your email address will not be published. Required fields are marked *