KB5028997 is a July 2023 cumulative update for Windows 11 Version 22H2 and 23H2 that addresses multiple security vulnerabilities, resolves system stability issues, and includes improvements to Windows Search, File Explorer performance, and network connectivity. This update is part of Microsoft's monthly Patch Tuesday release cycle.
KB5028997Windows 11Windows
KB5028997 — Cumulative Update for Windows 11 Version 22H2 and 23H2
KB5028997 is a cumulative update released in July 2023 for Windows 11 Version 22H2 and 23H2, addressing security vulnerabilities, system stability issues, and providing feature enhancements including fixes for Windows Search, File Explorer, and network connectivity problems.
Emanuel DE ALMEIDAKB5028997 is a cumulative update released in July 2023 for Windows 11 Version 22H2 and 23H2, addressing security vulnerabilities, system stability issues, and providing feature enhancements including fixes for Windows Search, File Explorer, and network connectivity problems.
Overview
In This Article
- Issue Description
- Root Cause
- 1Resolves Windows Search service stability issues
- 2Improves File Explorer network browsing performance
- 3Fixes Wi-Fi connectivity and network adapter issues
- 4Addresses security vulnerabilities in kernel components
- 5Resolves system stability and DirectX 12 performance issues
- Installation
- Known Issues
- Frequently Asked Questions
Applies to
Windows 11 Version 22H2 (Build 22621)Windows 11 Version 23H2 (Build 22631)
Issue Description
Issue Description
Prior to KB5028997, Windows 11 systems experienced several issues that affected user productivity and system security:
- Windows Search service intermittently stopped responding, causing search functionality to fail in Start menu and File Explorer
- File Explorer experienced slow performance when browsing network locations or large directories
- Network connectivity issues with Wi-Fi adapters randomly disconnecting on certain hardware configurations
- Security vulnerabilities in Windows kernel components that could potentially allow elevation of privilege attacks
- System crashes (BSOD) with error code
SYSTEM_SERVICE_EXCEPTIONon systems with specific graphics drivers - Windows Update service occasionally failed to download or install subsequent updates
- Performance degradation in applications using DirectX 12 on systems with integrated graphics
Root Cause
Root Cause
The issues addressed by KB5028997 stem from multiple underlying causes within Windows 11 core components. The Windows Search service failures were caused by memory leaks in the search indexer process when handling large volumes of file metadata. File Explorer performance issues resulted from inefficient caching mechanisms when accessing network resources. Network connectivity problems were attributed to driver compatibility issues with the Windows 11 network stack. The security vulnerabilities existed in kernel-mode drivers that did not properly validate user input, potentially allowing unauthorized access to system resources.
1
Resolves Windows Search service stability issues
This update fixes memory management problems in the Windows Search indexer service (SearchIndexer.exe). The fix includes improved memory allocation handling and prevents memory leaks that previously caused the search service to become unresponsive. The update also optimizes search index rebuilding processes to reduce system resource consumption during background indexing operations.
Components updated:
SearchIndexer.exe- Version 10.0.22621.2134Windows.Storage.Search.dll- Version 10.0.22621.2134- Search protocol handlers for improved file type support
2
Improves File Explorer network browsing performance
KB5028997 includes optimizations to File Explorer's network resource enumeration and caching mechanisms. The update implements more efficient SMB protocol handling and reduces unnecessary network calls when browsing shared folders. Performance improvements are particularly noticeable when accessing large directories over network connections.
Performance enhancements:
- Reduced network roundtrips for directory enumeration by up to 40%
- Improved caching of network resource metadata
- Optimized thumbnail generation for network files
- Enhanced error handling for unreachable network resources
3
Fixes Wi-Fi connectivity and network adapter issues
This update addresses compatibility issues between Windows 11 network stack and certain Wi-Fi adapter drivers. The fix includes updated network profile management and improved power management for wireless adapters to prevent unexpected disconnections. The update also resolves issues with network adapter enumeration that could cause adapters to appear as disconnected in Network Settings.
Network improvements:
- Enhanced Wi-Fi adapter power management
- Improved network profile switching reliability
- Fixed network adapter detection in Device Manager
- Resolved DNS resolution delays on certain network configurations
4
Addresses security vulnerabilities in kernel components
KB5028997 includes security fixes for multiple vulnerabilities in Windows kernel-mode drivers and system services. These updates address potential elevation of privilege vulnerabilities and improve input validation in critical system components. The security fixes are part of Microsoft's coordinated vulnerability disclosure program.
Security improvements:
- Enhanced input validation in kernel-mode drivers
- Improved memory protection mechanisms
- Strengthened access control for system resources
- Updated cryptographic libraries for enhanced security
Important: These security fixes are critical and should be installed promptly to maintain system security.
5
Resolves system stability and DirectX 12 performance issues
This update fixes system crashes related to graphics driver interactions and improves DirectX 12 performance on systems with integrated graphics. The fix includes updated graphics subsystem components and improved error handling in the Windows Display Driver Model (WDDM). Performance optimizations specifically target systems using Intel integrated graphics and AMD APU configurations.
Graphics and stability fixes:
- Resolved
SYSTEM_SERVICE_EXCEPTIONcrashes in graphics subsystem - Improved DirectX 12 resource management
- Enhanced WDDM driver compatibility
- Optimized graphics memory allocation for integrated GPUs
Installation
Installation
KB5028997 is available through multiple deployment channels and installation methods:
Windows Update (Automatic)
This update is automatically delivered to Windows 11 systems through Windows Update. The update is classified as Important and will be downloaded and installed during the next scheduled update check. Systems configured for automatic updates will receive this update without user intervention.
Microsoft Update Catalog (Manual Download)
For manual installation or enterprise deployment, KB5028997 can be downloaded from the Microsoft Update Catalog. The standalone package is available in both x64 and ARM64 architectures:
- File size: Approximately 847 MB (x64), 623 MB (ARM64)
- Package format: Microsoft Update Standalone Package (.msu)
- Installation command:
wusa.exe windows11.0-kb5028997-x64.msu /quiet /norestart
Enterprise Deployment
Enterprise environments can deploy KB5028997 using:
- Windows Server Update Services (WSUS): Available for approval and deployment to managed systems
- Microsoft System Center Configuration Manager (SCCM): Can be deployed as part of software update groups
- Microsoft Intune: Available through Windows Update for Business policies
Prerequisites and Requirements
- Minimum 4 GB available disk space for installation
- System restart required after installation
- No specific prerequisite updates required
- Compatible with all Windows 11 editions (Home, Pro, Enterprise, Education)
Note: Installation time varies based on system configuration but typically completes within 15-30 minutes.
Known Issues
Known Issues
Microsoft has identified several known issues that may occur after installing KB5028997:
Installation Issues
- Error 0x80070643: Installation may fail on systems with insufficient disk space. Ensure at least 4 GB of free space is available on the system drive before attempting installation.
- Error 0x800f0922: May occur on systems with corrupted Windows Update components. Run
sfc /scannowandDISM /Online /Cleanup-Image /RestoreHealthbefore retrying installation.
Post-Installation Issues
- Start Menu Search Delay: Some users may experience a 2-3 second delay when using Start menu search immediately after installation. This resolves automatically after the search index rebuilds, typically within 24 hours.
- Third-Party Antivirus Compatibility: Certain antivirus solutions may flag system files modified by this update. Ensure antivirus definitions are current and whitelist Windows system directories if necessary.
- Network Printer Issues: Some network printers may require driver reinstallation after the update. Use Device Manager to update printer drivers if printing issues occur.
Workarounds
For systems experiencing post-installation issues:
- Restart the system twice to ensure all update components are properly initialized
- Run Windows Update troubleshooter:
Settings > Update & Security > Troubleshoot > Windows Update - Reset Windows Search if search functionality remains problematic:
PowerShell: Get-AppXPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
Important: If system instability occurs after installation, use System Restore to revert to a pre-update state and contact Microsoft Support.
Overview
KB5028997 is a comprehensive cumulative update released by Microsoft in July 2023 as part of the monthly Patch Tuesday cycle. This update targets Windows 11 Version 22H2 (Build 22621) and Version 23H2 (Build 22631), addressing critical security vulnerabilities, system stability issues, and performance improvements across multiple Windows components.
The update represents a significant maintenance release that resolves several high-impact issues affecting user productivity, including Windows Search service failures, File Explorer performance degradation, and network connectivity problems. Additionally, KB5028997 includes important security fixes that address potential elevation of privilege vulnerabilities in Windows kernel components.
Technical Details
This cumulative update modifies core Windows 11 components to improve system reliability and security. The update process replaces existing system files with updated versions and applies registry modifications to enhance system behavior. Key areas of improvement include the Windows Search subsystem, network stack components, graphics drivers interface, and security-related kernel modules.
The update is delivered as a Microsoft Update Standalone Package (.msu) and integrates seamlessly with existing Windows 11 installations. Installation requires a system restart to complete the update process and activate all modifications.
Affected Components
KB5028997 updates numerous Windows 11 system components:
| Component | Previous Version | Updated Version | Description |
|---|---|---|---|
| Windows Search Service | 10.0.22621.1992 | 10.0.22621.2134 | Core search indexing and query processing |
| File Explorer | 10.0.22621.1992 | 10.0.22621.2134 | File system navigation and network browsing |
| Network Stack | 10.0.22621.1992 | 10.0.22621.2134 | Wi-Fi connectivity and network adapter management |
| Graphics Subsystem | 10.0.22621.1992 | 10.0.22621.2134 | DirectX 12 and WDDM driver interface |
| Security Components | 10.0.22621.1992 | 10.0.22621.2134 | Kernel security and access control mechanisms |
Deployment Considerations
Enterprise administrators should consider the following when deploying KB5028997:
Testing Requirements
Before widespread deployment, test the update in a controlled environment to verify compatibility with business-critical applications and custom software solutions. Pay particular attention to applications that integrate with Windows Search or use DirectX 12 graphics APIs.
Deployment Timeline
Plan deployment during scheduled maintenance windows due to the required system restart. The installation process typically takes 15-30 minutes depending on system specifications and may require additional time for search index rebuilding.
Monitoring and Validation
After deployment, monitor systems for:
- Search functionality in Start menu and File Explorer
- Network connectivity stability
- Application performance, particularly graphics-intensive software
- System event logs for any error conditions
Security Impact
The security fixes included in KB5028997 address several vulnerabilities that could potentially be exploited by malicious actors. These vulnerabilities primarily affect kernel-mode components and could allow unauthorized elevation of privileges if exploited. Organizations should prioritize installation of this update to maintain security compliance and protect against potential threats.
The security improvements include enhanced input validation, improved memory protection mechanisms, and strengthened access controls for system resources. These changes work together to reduce the attack surface and improve overall system security posture.
Frequently Asked Questions
What does KB5028997 resolve?
KB5028997 resolves multiple issues in Windows 11 including Windows Search service stability problems, File Explorer network browsing performance issues, Wi-Fi connectivity problems, security vulnerabilities in kernel components, and system crashes related to graphics drivers. It also includes DirectX 12 performance improvements for integrated graphics systems.
Which systems require KB5028997?
KB5028997 applies to Windows 11 Version 22H2 (Build 22621) and Windows 11 Version 23H2 (Build 22631). It is compatible with all Windows 11 editions including Home, Pro, Enterprise, and Education. Both x64 and ARM64 architectures are supported.
Is KB5028997 a security update?
Yes, KB5028997 includes important security fixes alongside other system improvements. It addresses security vulnerabilities in Windows kernel components that could potentially allow elevation of privilege attacks. The security fixes include enhanced input validation, improved memory protection, and strengthened access controls.
What are the prerequisites for KB5028997?
KB5028997 requires a minimum of 4 GB available disk space for installation and a system restart to complete the update process. No specific prerequisite updates are required. The system must be running Windows 11 Version 22H2 or 23H2 to be eligible for this update.
Are there known issues with KB5028997?
Known issues include potential installation failures with errors 0x80070643 or 0x800f0922 on systems with insufficient disk space or corrupted Windows Update components. Post-installation, some users may experience temporary Start menu search delays, third-party antivirus compatibility issues, or network printer problems that may require driver reinstallation.
References (2)
1
Windows 11 Update HistoryComplete history of Windows 11 updates and releaseshttps://support.microsoft.com/en-us/topic/windows-11-update-history
2Windows Update TroubleshooterOfficial troubleshooting tool for Windows Update issueshttps://support.microsoft.com/en-us/windows/windows-update-troubleshooter
About the Author
Discussion
Share your thoughts and insights
You must be logged in to comment.
Loading comments...