Can't update Windows 11 to the 2026-10 Security Update (KB5127648) due to install error 0x80070002.

Since DISM /Online /Cleanup-Image /RestoreHealth completed successfully, sfc /scannow found no integrity violations, and resetting SoftwareDistribution and catroot2 did not help, the next supported path is to install KB5127648 manually from the Microsoft Update Catalog.

For Windows 11 Pro x64, KB5127648 requires two .msu packages:

1. Install the required checkpoint cumulative update first:
   • windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
2. Then install the target cumulative update:
   • windows11.0-kb5127648-x64_2b88d2d308adc938fcd4d2876a68ee0b2a3c4c09.msu

Two supported ways to do this:

1. Install each MSU individually, in order
   • Download both files.
   • Double-click windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu first.
   • Then double-click windows11.0-kb5127648-x64_2b88d2d308adc938fcd4d2876a68ee0b2a3c4c09.msu.
   • If the checkpoint update is already present, Windows will indicate that it is already installed.
2. Install both MSU files together with DISM
   • Place only the KB5127648 x64 .msu files in a folder such as C:\Packages.
   • Open Command Prompt as administrator.
   • Run:

          DISM /Online /Add-Package /PackagePath:c:\packages\windows11.0-kb5127648-x64_2b88d2d308adc938fcd4d2876a68ee0b2a3c4c09.msu
     

   DISM scans the folder specified in PackagePath and installs any required checkpoint cumulative updates automatically.

If the install still fails with 0x80070002, the supported troubleshooting in the context is:

1. Review the CBS logs for missing files or services that failed to start.
2. Verify whether C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools exists.
   • If it is missing, copy the System Tools folder from a working machine to the affected machine, including all shortcuts.
3. Check whether C:\Windows\Microsoft.NET\Framework\v4.0.30319 is empty.
   • If it is empty, the documented resolution is to back up and delete these registry keys, then try the update again:
     • HKLM\System\CurrentControlSet\services\clr_optimization_v4.0.30319_32
     • HKLM\System\CurrentControlSet\services\clr_optimization_v4.0.30319_64

Warning: deleting registry keys is high risk. Back up the registry first before making those changes.

References:

• Microsoft Update Catalog
• Fix Windows Update corruptions and installation failures
• Troubleshoot Windows Update error 0x80070002