Overview:
- The ADK patches now allow users on ADK versions Windows ADK 10.1.26100.2454 (December 2024) and newer to update their ADK installations without having to uninstall and reinstall the entire kit. Features and bug fixes can be published as frequently as monthly as part of the ADK patch. We do not require but encourage applying these patches as needed. When a significant security patch is released, we will explicitly indicate it as such on this page. To learn about new ADK patches, make sure you frequently check the "Download and Install the Windows ADK Patches" section below.
Download and Install the Windows ADK Patches
| ADK patch download link |
Description |
| Download Windows ADK 10.1.26100.2454 Update KB5101684 for ADK 10.1.26100.2454 (December 2024) |
Release Notes: - AppV Sequencer: Due to continuing support for the Sequencer, the changes in this patch remove the AppV deprecation messages that appear when running the following Sequencer cmdlets:
- OA3 Tool Secure Boot validation (Recommended): Updated the OA3 Tool to validate Secure Boot certificate configuration on factory built devices. Due to Secure Boot CA expirations beginning in June 2026, OEMs must ship devices with the updated Cas installed. This update is required to prevent devices from shipping in a compromised or non updateable state. OEMs are recommended to adopt this ADK and use the updated OA3 Tool for all factory provisioning.
- Oscdimg Updated boot binaries to support creating WinPE ISO media with "MakeWinPEMedia /ISO /bootex" to boot on Secure Version Number (SVN) 9.0.
- Windows Deployment Image Servicing and Management Tools: Fixed CVE-2026-50435, CVE-2026-50409, and CVE-2026-54987.
- WSIM: Fixed CVE-2026-25166
|
| Download Windows ADK 10.1.28000.1 Update KB5120996 for ADK 10.1.28000.1 (November 2025) |
Release Notes:- OA3 Tool Secure Boot validation (Recommended): Updated the OA3 Tool to validate Secure Boot certificate configuration on factory built devices. Due to Secure Boot CA expirations beginning in June 2026, OEMs must ship devices with the updated Cas installed. This update is required to prevent devices from shipping in a compromised or non updateable state. OEMs are recommended to adopt this ADK and use the updated OA3 Tool for all factory provisioning.
- Windows Deployment Image Servicing and Management Tools: Fixed CVE-2026-50435, CVE-2026-50409, and CVE-2026-54987.
- WPT: Updated tools for use with SPGO optimization,
- Updated help text: xperf -help spt
- perf_lbr.dll, perf_spt.dll and perf_hv.dll are now loaded at default.
- Support for more PMU counter types for the latest AMD, Intel and ARM cores.
- xperf will detect and tell if the system supports LBR tracing through -pmcsources.
- xperf will warn the user if a binary was compiled without the proper debug header instead of silently dropping the data.
- Various other bugfixes and improvements based on user feedback.
- WSIM: Fixed CVE-2026-25166.
- USMT: Fixed a missing dependency that could cause ScanState to fail.
|
How to Download and Install an ADK Patch:
Download the ADK patch in a form of a zip folder which has or more .msp files within and follow the installation instructions below.
Steps to Apply the ADK Patch:
To install the ADK patches, each MSI file will need to get patched using the underlying MSI infrastructure. You can do so by following the below steps:
- Open Admin Command Prompt:
- Run Command Prompt as an administrator.
2. Change Directory:
- Navigate to the folder containing the ADK update files.
3. Invoke All MSP Files by creating a temporary directory for logs:
md %TEMP%\adkupdate
- Run the following loop to apply all MSP files:
for %i in (*.msp) do start /wait msiexec.exe /l* "%TEMP%\adkupdate\msiexec-%~nxi.log" /qn /p "%~fi"
Once installed, patches are automatically integrated into your existing Windows ADK setup, allowing you to continue your work without interruption.