Windows 11 build 22621.1848 (KB5027231) outs as Moment 3 update

Microsoft finally makes available the third moment update for Windows 11 with new features, changes, and security fixes.

Windows 11 update KB5027231
Windows 11 update KB5027231
  • Microsoft rolls out the Moment 3 update for Windows 11 (build 22621.1848).
  • The update is available for compatible devices as the KB5027231 update.
  • The rollout brings a slew of security fixes and enables new features and improvements.
  • The company is also rolling out build 22000.2057 for Windows 11 21H2 with various fixes and changes.

Microsoft begins the automatic rollout of the Windows 11 Moment 3 update. The update is available as the KB5027231 in the Stable Channel, enabling many new experiences and a slew of fixes.

The update KB5027231 bumps the version number to build 22621.1848 and, according to the announcement, fixes known issue that affects 32-bit apps that are large address aware and use the CopyFile API. It addresses a compatibility issue with unsupported use of the registry and fixes a problem with the Windows Kernel. 

In addition, this release includes the fixes and improvements that the company made available as a preview on May 24, which expands the Live Captions features to ten new languages and adds new voice access commands for English. Also, this Moment 3 update focuses on enhancing existing features, such as the new VPN status shield icon in the System Tray for the active network connection. You can now display seconds in the clock for the Taskbar. And the notification toasts now provide an option to copy two-factor authentication (2FA) codes.

The update also adds visual changes for the File Explorer context menu, adds multi-app kiosk mode, introduces live kernel memory dump (LKD) collection from Task Manager, introduces changes for the Content Adaptive Brightness Control (CABC) to run on laptops and 2-in-1 devices, adds “USB4 hubs and devices” and “Presence sensing” settings pages, and a lot more.

Windows 11 22H2 Moment 3 update new features

These are all the new features rolling out with the update KB5027231 for Windows 11 22H2:

Live Captions

  • This update adds live captions for the following languages: Chinese (Simplified and Traditional), French (France, Canada), German, Italian, Japanese, Portuguese (Brazil, Portugal), Spanish, Danish, English (Ireland, other English dialects), and Korean. You can download speech recognition support from Settings > Time & Language > Language & region.

Voice Access

  • This update redesigns the in-app voice access command help page. Every command now has a description and examples of its variations. The search bar allows you to quickly find commands. The new categories provide further guidance. You can access the command help page on the voice access bar from Help > View all commands or use the voice access command “what can I say?”
  • This update adds voice access command support for the following English dialects: English (United Kingdom), English (India), English (New Zealand), English (Canada), and English (Australia).
  • This Moment 3 update adds new text selection and editing voice access commands. Some examples are: To do this “Select a range of text in the text box,” say “Select from [text 1] to [text 2]”, e.g., “Select from have to voice access.” To do this “Apply bold, underline, or italic formatting for the selected text or the last dictated text,” say “Delete all.” To do this “Delete all the text in a text box,” say “Bold that,” “Underline that,” “Italicize that.” 


  • This update adds a VPN status icon, a small shield, to the system tray. It displays when you are connected to a recognized VPN profile. The VPN icon will be overlayed in your system’s accent color over the active network connection.
  • You can now choose to display seconds in the clock on the system tray from the Taskbar settings page.
  • This update provides a copy button for you to copy two-factor authentication (2FA) codes quickly. These are in notification toasts you get from apps installed on your PC or from phones linked to your PC. Note that this feature only works for English.

File Explorer

  • This update adds access key shortcuts to File Explorer’s context menu. An access key is a one-keystroke shortcut. You can use it to quickly run a command in a context menu using your keyboard. Each access key corresponds to a letter in the display name of the menu item.

Kiosk multi-mode

  • This update adds multi-app kiosk mode, which is a lockdown feature. If you are an administrator, you can specify the apps that can run on a device. Other apps will not run. You can also block certain functionalities. You can configure distinct types of access and apps to run for different users on one device. Multi-app kiosk mode is ideal for scenarios in which multiple people use the same device. Some examples are frontline workers, retail, education, and test-taking. Some lockdown customizations include: Limiting access to Settings, except certain pages (such as Wi-Fi and screen brightness), showing only the apps that are allowed on the Start menu, and blocking certain toasts and pop-up windows.
  • Currently, you can enable multi-app kiosk mode using PowerShell and WMI Bridge.

Task Manager live kernel memory dump

  • This update introduces live kernel memory dump (LKD) collection from Task Manager. Using LKD, you can gather data to troubleshoot an issue while the OS continues to work. This reduces downtime when you must investigate an unresponsive program or high-impact failures.


  • This update replaces the settings for “Show the touch keyboard when there’s no keyboard attached.” These are located at Settings > Time & language > Typing > Touch keyboard. A new dropdown menu gives you three options to control whether tapping an edit control should open the touch keyboard. The options are: Never, When no keyboard attached, and Always.
  • This update improves the cloud suggestion and the integrated search suggestion. This helps you to easily type popular words in Simplified Chinese using the Input Method Editor (IME).


  • This update enables Content Adaptive Brightness Control (CABC) to run on laptops and 2-in-1 devices. This feature dims or brightens areas of a display based on the content. It tries to strike a balance between saving battery life and providing a good visual experience. You can adjust the feature setting from Settings > System > Display > Brightness & color. The drop-down menu gives you three options: Off, Always, and On Battery Only. For battery-powered devices, the default is On Battery Only. Because the device manufacturer must enable CABC, the feature might not be on all laptops or 2-in-1 devices.

USB4 hubs and devices settings

  • This update adds a “USB4 hubs and devices” settings page. You can find it at Settings > Bluetooth & devices > USB > USB4 Hubs and Devices. This new page provides information about the system’s USB4 capabilities and the attached peripherals on a system that supports USB4. This information helps with troubleshooting when you need manufacturer or system administrator support. Some features include: You can view the tree of the connected USB4 hubs and devices, and you can copy details to the clipboard to share them.
  • If your system does not support USB4 with the Microsoft USB4 Connection Manager, this page will not appear. On systems that support USB4, you will see USB4 Host Router in Device Manager.

Presence sensing settings

  • This update adds a presence sensor privacy setting in Settings > Privacy & security > Presence sensing. If you have a device that has compatible presence sensors, you can now choose the apps that can access those sensors. You can also choose the apps that do not have access. Microsoft does not collect images or metadata. The device hardware processes your information locally to maximize privacy.

Other Settings updates

  • This update improves the performance of search within Settings.
  • This update changes the default print screen (prt scr) key behavior. Pressing the print screen key opens the Snipping Tool by default. You can turn off this setting from Settings > Accessibility > Keyboard.
  • This update introduces a limit of 20 most recent tabs in Settings > Multitasking. This affects the number of tabs that appear when you use ALT + TAB and Snap Assist.

Windows 11 22H2 feature drop update fixes

In addition, the Windows 11 build 22621.1848 introduces these fixes:

  • Addresses a known issue that affects 32-bit apps that are large address aware and use the CopyFile API. You might have issues when you save, copy, or attach files. If you use some commercial or enterprise security software that uses extended file attributes, this issue will likely affect you. For Microsoft Office apps, this issue only affects the 32-bit versions. You might receive the error, “Document not saved.” 
  • Addresses a compatibility issue. The issue occurs because of unsupported use of the registry.
  • Addresses an issue that affects the Windows Kernel. This issue is related to CVE-2023-32019.
  • Addresses an issue that affects searchindexer.exe. It stops working after you sign out. This issue occurs after you upgrade your machine to Windows 11 Azure Virtual Desktop (AVD) and sign in to that machine.
  • Addresses an issue that affects Server Message Block (SMB). You cannot access the SMB shared folder. The errors are, “Not enough memory resources” or “Insufficient system resources.”
  • The update addresses an issue that sends unexpected password expiration notices to users. This occurs when you set up an account to use “Smart Card is Required for Interactive Logon” and set “Enable rolling of expiring NTLM secrets.”
  • Addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). It stops working. This occurs when you use Azure Virtual Desktop (AVD).
  • Addresses an issue that affects the Storage Spaces Direct (S2D) cluster. It might not come online. This occurs after a periodic password rollover. The error code is 1326.
  • Addresses an issue that affects dot sourcing. It fails files that contain class definition in Windows PowerShell.
  • Addresses an issue that affects the use of the Event Viewer. The issue limits the number of event sources that users who are not administrators can access.
  • Addresses an Event Viewer issue. It affects the rendering of a forwarded event log.
  • Addresses a memory leak. It occurs every time you print a rich text document.
  • Addresses an issue that affects a computer when it renders a halftone bitmap. The computer stops working.
  • Addresses an issue that affects devices that have multiple, discreet GPUs. You cannot choose the high-performance GPUs from the default graphics settings page.
  • Addresses an issue that stops your device from working when it resumes from Modern Standby. The error is 0x13A KERNEL_MODE_HEAP_CORRUPTION.
  • Addresses an issue that affects applications that perform certain actions in a callback. The applications might stop working. These actions include closing a Window (WM_CLOSE).
  • This update changes the support phone number for Microsoft India for Windows activation.
  • This update changes the international mobile subscriber identity (IMSI) ranges for certain mobile providers.
  • Addresses an issue that affects the Windows Firewall. The firewall drops all connections to the IP address of a captive portal. This occurs when you choose the Captive Portal Addresses option.
  • Addresses an issue that affects devices that are joined to Azure Active Directory (Azure AD). The Windows Firewall cannot apply the correct domain and profile for them.
  • Addresses an issue that affects Windows Defender Application Control (WDAC). It might create audit events that you do not need. This occurs when you choose the Disabled: Script Enforcement option.
  • Addresses an issue that affects the Chinese and Japanese Handwriting Panel. It does not show text prediction candidates or stops responding. This occurs when you select a word from the candidate list of the Handwriting Panel.
  • Addresses an issue that affects the runas command. It stops working. The device behaves as if you did not sign in to your account.
  • Addresses an issue that might affect a large reparse point. You might get a stop error when you use NTFS to access it. This issue occurs after a canceled FSCTL Set operation changes the reparse tag.
  • Addresses a known issue that might affect some speech recognition apps. They might have sporadic speech recognition, expressive input, and handwriting issues. This occurs when the display language is Chinese or Japanese. The apps might not recognize certain words. They might not receive any input from speech recognition or affected input types. This issue is more likely to occur when the apps use offline speech recognition. For app developers,this issue only affects speech recognition that uses Speech Recognition Grammar Specification (SRGS) in Windows.Media.SpeechRecognition. This issue does not affect other types of speech recognition.
  • Addresses an issue that affects the MDM_VPNv2_01 class. Enumerating this class fails. The error messages is, “Generic Error.”

Furthermore, as part of the June 2023 Patch Tuesday update, the company is also rolling out build 22000.2057 for Windows 11 21H2 as the update KB5027223 with similar fixes as for version 22H2, including a fix for a known issue that affects 32-bit apps that are large address aware and use the CopyFile API. The update also addresses a compatibility issue with unsupported use of the registry and fixes a problem with the Windows Kernel.

In addition, this release includes the non-security fixes and improvements that the company made available as a preview on May 23 with the update KB5026436.

In the case that you want to update to Windows 11 build 22621.1848 immediately, click the download button from the “Windows Update” settings page. If you are still in the original version of Windows 11, you can use these instructions to upgrade to version 22H2.

About the author

Mauro Huculak is a Windows How-To Expert who started Pureinfotech in 2010 as an independent online publication. He has also been a Windows Central contributor for nearly a decade. Mauro has over 15 years of experience writing comprehensive guides and creating professional videos about Windows and software, including Android and Linux. Before becoming a technology writer, he was an IT administrator for seven years. In total, Mauro has over 21 years of combined experience in technology. Throughout his career, he achieved different professional certifications from Microsoft (MSCA), Cisco (CCNP), VMware (VCP), and CompTIA (A+ and Network+), and he has been recognized as a Microsoft MVP for many years. You can follow him on X (Twitter), YouTube, LinkedIn and Email him at [email protected].