{"id":12942,"date":"2026-05-18T10:03:52","date_gmt":"2026-05-18T10:03:52","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/05\/18\/microsoft-confirms-windows-11-update-fails-with-error-0x800f0922\/"},"modified":"2026-05-18T10:03:52","modified_gmt":"2026-05-18T10:03:52","slug":"microsoft-confirms-windows-11-update-fails-with-error-0x800f0922","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/05\/18\/microsoft-confirms-windows-11-update-fails-with-error-0x800f0922\/","title":{"rendered":"Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922"},"content":{"rendered":"<p>    Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>Microsoft has officially acknowledged a critical installation failure affecting its May 2026 Patch Tuesday cumulative update for Windows 11, KB5089549, leaving users stranded with error code 0x800f0922 and, in some cases, additional errors 0x80240069 and 0x80240031.<\/p>\n<p>The known issue was formally added to the update\u2019s change log on May 15, 2026, just three days after the patch\u2019s release.<\/p>\n<p><a href=\"https:\/\/cybersecuritynews.com\/microsoft-releases-cumulative-update-for-windows-11\/\" target=\"_blank\" rel=\"noreferrer noopener\">Released on May 12, 2026, KB5089549<\/a> is a mandatory cumulative update for Windows 11 versions 25H2 and 24H2, advancing OS builds to 26200.8457 and 26100.8457, respectively.<\/p>\n<p>The update bundles the <a href=\"https:\/\/cybersecuritynews.com\/microsoft-patch-tuesday-may-2026\/\" target=\"_blank\" rel=\"noreferrer noopener\">latest May 2026 security fixes<\/a>, non-security quality improvements from April\u2019s optional preview release (KB5083631), and critical Secure Boot infrastructure changes.<\/p>\n<p>Given its classification as a required security update, Windows attempts to install it automatically, making the installation failure particularly disruptive for affected devices.<\/p>\n<p>The confirmed root cause behind error 0x800f0922 is insufficient space in the EFI System Partition (ESP), a reserved, low-capacity partition on the device\u2019s drive that stores critical boot files.<\/p>\n<p><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/may-12-2026-kb5089549-os-builds-26200-8457-and-26100-8457-28ec2a99-4bbe-481d-a340-5c6cf18d9acb\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">KB5089549 introduces<\/a> significant Secure Boot infrastructure changes, including a new SecureBoot folder under <code>C:Windows<\/code> on eligible devices, along with sample automation scripts designed to help IT administrators manage certificate updates across enterprise fleets.<\/p>\n<p>These additions expand the footprint of files written to the ESP during installation, triggering the failure on systems with insufficient free space on the partition.<\/p>\n<p>A central feature of this update is the phased rollout of new Secure Boot certificates, which adds high-confidence device targeting data to increase coverage of eligible devices.<\/p>\n<p>Devices only receive the new certificates after demonstrating sufficient successful update signals, maintaining a controlled rollout.<\/p>\n<p>Additionally, the update ships example scripts under the new SecureBoot directory, enabling IT professionals in <a href=\"https:\/\/cybersecuritynews.com\/hackers-poisoning-dns-responses\/\" target=\"_blank\" rel=\"noreferrer noopener\">Active Directory environments<\/a> to automate Secure Boot certificate deployment via safe rollout mechanisms.<\/p>\n<h2 class=\"wp-block-heading\" id=\"other-critical-fixes-in-this-update\"><strong>Other Critical Fixes in This Update<\/strong><\/h2>\n<p>Beyond the Secure Boot improvements, KB5089549 addresses several significant issues:<\/p>\n<ul class=\"wp-block-list\">\n<li>\n<strong>BitLocker Recovery Loop Fixed:<\/strong> The update resolves a known issue where devices running <a href=\"https:\/\/cybersecuritynews.com\/microsoft-cumulative-update-windows-11\/\" target=\"_blank\" rel=\"noreferrer noopener\">April 2026\u2019s KB5083769<\/a> could enter BitLocker Recovery after boot file updates, particularly on systems with invalid PCR7 (Platform Configuration Register 7) TPM validation settings.<\/li>\n<li>\n<strong>Boot Manager Reliability:<\/strong> Improvements to startup reliability ensure devices boot normally after boot file updates without entering recovery mode.<\/li>\n<li>\n<strong>SSDP Service Stability:<\/strong> Reliability improvements to Simple Service Discovery Protocol (SSDP) notifications prevent the service from becoming unresponsive.<\/li>\n<li>\n<strong>Daylight Saving Time:<\/strong> The update adds DST support for the 2023 change affecting the Arab Republic of Egypt.<\/li>\n<\/ul>\n<h2 class=\"wp-block-heading\" id=\"mitigation-and-recommendations\"><strong>Mitigations<\/strong><\/h2>\n<p>Microsoft is actively rolling out a fix for affected devices. System administrators managing enterprise environments can leverage the new Secure Boot automation scripts available after installing the update to monitor certificate update status and manage phased deployment via Active Directory.<\/p>\n<p>Organizations should monitor the <a href=\"https:\/\/learn.microsoft.com\/windows\/release-health\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Windows Release Health Dashboard<\/a> for the latest remediation status.<\/p>\n<p>Users who have previously installed prior cumulative updates will only download the incremental changes included in this package, potentially reducing ESP space requirements on already-updated systems.<\/p>\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 91%,rgb(169,184,195) 100%)\"><strong>Follow us on\u00a0<a href=\"https:\/\/news.google.com\/publications\/CAAqMggKIixDQklTR3dnTWFoY0tGV041WW1WeWMyVmpkWEpwZEhsdVpYZHpMbU52YlNnQVAB?hl=en-IN&amp;gl=IN&amp;ceid=IN:en\" target=\"_blank\" rel=\"noreferrer noopener\">Google News<\/a>,\u00a0<a href=\"https:\/\/www.linkedin.com\/company\/cybersecurity-news\/\" target=\"_blank\" rel=\"noreferrer noopener\">LinkedIn<\/a>,\u00a0and\u00a0<a href=\"https:\/\/x.com\/cyber_press_org\" target=\"_blank\" rel=\"noreferrer noopener\">X<\/a>\u00a0to Get More Instant Updates.<\/strong><\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/microsoft-windows-11-update\/\">Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Guru Baran<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/microsoft-windows-11-update\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922 Microsoft has officially acknowledged a critical installation failure affecting its May 2026 Patch Tuesday cumulative update for Windows 11, KB5089549, leaving users stranded with error code 0x800f0922 and, in some cases, additional errors 0x80240069 and 0x80240031. The known issue was formally added to the update\u2019s change [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,395],"tags":[130],"class_list":["post-12942","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-windows","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12942"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=12942"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12942\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=12942"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=12942"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=12942"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}