expand -F:* C:\path\to\update.cab C:\extracted Then use dism /online /add-package /packagepath:C:\extracted Open regedit , navigate to:
DISM /Online /Cleanup-Image /RestoreHealth If that fails with , use an alternate source (Windows 10/11 ISO mounted as D: drive): 0xc86044d2 full
net stop wuauserv net stop cryptSvc net stop bits net stop msiserver Rename SoftwareDistribution and Catroot2: expand -F:* C:\path\to\update
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 Catroot2.old Restart services: 0xc86044d2 full
Get-WindowsPackage -Online | Where-Object $_.ReleaseType -eq "Security Update" | Remove-WindowsPackage -Online -NoRestart Then reinstall the latest cumulative update manually from Microsoft Update Catalog. Download the same KB update that initially failed. Extract its .cab file and manually replace missing manifests: