Microsoft Issues September Windows 11 Cumulative Updates With 1,000 Security Fixes and UI Changes

The mandatory Patch Tuesday rollup delivers a huge security fix batch while also adding taskbar and Start customizations and new enterprise controls that administrators must enable and test.

Overview

Microsoft released mandatory Windows 11 cumulative updates KB5124008 and KB5122880 that bundle roughly 1,000 security fixes for supported 23H2, 24H2 and 25H2 builds.
The update restores and extends user interface options including a movable taskbar that can sit on all four edges, a smaller taskbar option, Start menu size controls, a renamed 'Recent' section and clearer Search results without web suggestions.
New enterprise controls arrived as part of the rollup including Administrator protection for just-in-time admin rights, which is turned off by default and must be enabled through Microsoft Intune (OMA-URI) or Group Policy.
The release introduces process-level containment for Microsoft Execution Containers (MXC) to restrict file, network and UI access by policy and adds preview support for tagging agentic processes with an opaque agent identifier used in authentication flows.
These UI changes first appeared in an optional preview that produced some cursor and wallpaper regressions for some users, Microsoft says it is not aware of new widespread issues with the mandatory release, and enterprises are advised to test preview features before broad deployment and to deploy via Windows Update or the Microsoft Update Catalog.