Security1 distinct publisher3 min readUpdated
KB5121003 shipped Secure Boot changes alongside fixes for 400 vulnerabilities. Microsoft now says it is checking whether the same update stops software from running on 24H2 and 25H2.
The Watch · Security desk

Compiled by The WatchSomething wrong?How this is made
Microsoft has confirmed it is investigating reports that software will not run correctly on Windows 11 24H2 and 25H2 after the update it shipped on August 11, 2026, KB5121003 [1][4]. The same Patch Tuesday closed 400 vulnerabilities, one of them actively exploited and two publicly disclosed [8], which means the fleets most exposed to this defect are the ones that did what security teams tell them to do.
The reported symptom set is broader than a launch failure: applications freezing, applications closing without notice, EXCEPTION_ACCESS_VIOLATION errors, and unexpected system restarts [3]. The reports so far centre on a limited number of games, including ARC Raiders, MARVEL Tokon: Fighting Souls, and The Finals [2], which is three named titles [13]. Anti-cheat and DRM layers are the usual suspects in that pattern, but nothing in Microsoft's statement identifies a mechanism.
On its release health dashboard, Microsoft said that "following the release of Windows updates on August 11, 2026 (KB5121003) and later, Microsoft received reports of issues involving inability to run games as expected" [4]. The company added that it is "presently investigating to determine if this is an issue caused by Microsoft" and will provide an update when more information is available [5]. That is an acknowledgement of reports, not an admission of causation [14]. Microsoft describes KB5121003 as carrying Secure Boot updates plus File Explorer and Windows Search improvements [6], and has not attributed the failures to any one of those components [12]. Anyone telling you the Secure Boot change is the culprit is guessing ahead of the vendor.
Two details are worth noting for anyone assessing exposure. First, the intake channel Microsoft has offered affected users is the Feedback Hub app [7], which is a consumer telemetry path, not something that produces a rollback flag for a managed estate. Second, the company's established remedy in this class of problem is a block applied after the fact: in October 2024 it blocked 24H2 upgrades on some systems over Easy Anti-Cheat blue screens and Asphalt 8 crashes [9], it later lifted a compatibility hold placed after confirming Auto HDR was breaking games on 24H2 [10], and more recently it removed upgrade blocks affecting Asphalt 8: Airborne, Assassin's Creed, Star Wars Outlaws, and Avatar: Frontiers of Pandora [11]. Compatibility holds gate the next upgrade. They do not un-install a cumulative security update that is already on the machine.
This is the case for rings, made by the vendor rather than by a patching product. An organisation that pushed KB5121003 to a small representative pilot group first would have had a week of crash data before the estate got it, and would still be inside a sensible window for a fix that closes 400 flaws, including one under active exploitation [8]. An organisation that held the update fleet-wide instead would be sitting on that exploited flaw for the same week. Staging is the only option that does not require choosing between the two.
What to watch: whether Microsoft's next dashboard revision accepts causation or closes the item as third party [5]; whether the remedy arrives as a targeted rollback rather than the upgrade-block pattern the company has used before [9][11]; and whether the reported symptoms stay confined to games, because unexpected restarts and access violations are not a game-specific failure class [3].
Follow any of these and your For You feed starts watching them — no settings page required.
Ranked by verification strength, evidence, and original report placement.
Microsoft is investigating a potential issue with the August 2026 Windows updates that may prevent some games from launching or cause them to crash on affected Windows 11 systems.
Microsoft said: "We are presently investigating to determine if this is an issue caused by Microsoft. We will provide an update when more information is available."
KB5121003 was released as part of the August 2026 Patch Tuesday with Secure Boot updates and File Explorer and Windows Search improvements.
In October 2024, Microsoft blocked Windows 24H2 upgrades on some systems because of known issues that caused Easy Anti-Cheat blue screens and Asphalt 8 game crashes.
Last year Microsoft lifted a compatibility hold that had been added after it confirmed the Auto HDR Windows feature was breaking some games on Windows 11 24H2 systems.
More recently, Microsoft removed several upgrade blocks that prevented players of Asphalt 8: Airborne, Assassin's Creed, Star Wars Outlaws, and Avatar: Frontiers of Pandora from upgrading their devices to the latest Windows version.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Official acknowledgment, unverified cause
The core facts rest on Microsoft's own release health dashboard entry, quoted directly, which is strong first-party evidence that reports exist and an investigation is open. What is missing is evidence of causation, scope, or reproduction: no telemetry, no affected-device counts, no independent testing, no studio confirmation, and only one publisher in the cluster.
Broadly shipped update, narrowly observed failures
The update itself has wide distribution — a Patch Tuesday cumulative delivered to Windows 11 24H2 and 25H2 systems — but the observed failure surface is small and unquantified: three named titles described as 'a limited number of games,' with Microsoft still soliciting Feedback Hub reports rather than reporting measured impact.
Framing outruns the confirmed scope
Positive but modest overstatement. The cluster framing generalizes to apps and software being broken on 24H2/25H2, while the supported facts describe game-launch and stability failures in a limited, named set of titles that Microsoft has not yet attributed to its own update. Juxtaposing the Secure Boot payload and the 400-CVE count with the failures also implies a causal link the source does not establish.
Vendor hedging plus sponsored adjacency
Two visible incentive pressures, neither severe. Microsoft's phrasing — 'investigating to determine if this is an issue caused by Microsoft' — preserves deniability about a security update it wants installed, which shapes how the disclosure reads. Separately, the source article terminates in an unrelated sponsored vendor security-report promotion, an ambient commercial incentive in the publishing venue rather than in the incident reporting itself.
Facts solid, causation and scale open
High confidence in what was said and when — the dashboard entry, the KB identity, the symptom list, the affected builds, and the historical precedent are all directly quoted or specific. Confidence is limited by the single-publisher cluster and by the two things that most matter operationally still being unknown: root cause and blast radius.
security
Windows 11's secure kernel trusts a RAM chip that never checks who is writing to it1 distinct publisher
build
A UDP packet is now enough: IKEEXT RCE moves from patch queue to fire drill1 distinct publisher
build
ShieldBreak: a Defender-to-SYSTEM PoC that your last patch cycle did not stop1 distinct publisher
product
Beijing, not Redmond, now sets the retirement date for Windows 10's China build1 distinct publisher
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 19, 2026