Surface ARM (image source @evleaks via Thurrott)
Out-of-band update

Windows 11 build 22000.740 (KB5016138) releases as out-of-band update

Microsoft pushes out-of-band updates for Windows 11 and 10 to fix Azure Active Directory (AAD) problem on ARM devices.

  • Microsoft releases out-of-band update KB5016138 for Windows 11.
  • Also, Windows 10 is getting the KB5016139 update.
  • These two updates fix the same problem for ARM-based devices.
  • Computers that aren’t affected won’t receive the update.

Microsoft is now rolling out the update KB5016138 as an out-of-band update for Windows 11 to address a critical vulnerability issue. At the same time, the company is also releasing the same patch as update KB5016139 for Windows 10 21H2, 21H1, and 20H2.

The update KB5016138 bumps the version number to build 22000.740 for Windows 11, and the update KB5016139 bumps the version number to 19042.1767 (20H2), 19043.1767 (21H1), and 19044.1767 (21H2) for Windows 10.

According to the announcement (link 2), it only addresses an issue on ARM-based devices and might prevent you from signing in using Azure Active Directory (AAD). Apps and services that use AAD to sign in, such as VPN connections, Microsoft Teams, and Microsoft Outlook, might also be affected.

Since this is a particular update, only affected devices running ARM-based chipsets will receive the update.

Download update KB5016138 for Windows 11

The update is available immediately and it will download and install automatically on ARM-based devices. However, you can always force the update from Settings Windows Update, click the Check for updates button, and use the option to install the update. On Windows 10, the option to update is on Settings Update & Security > Windows Update.