Skip to the content
The Update Bureau
Windows 10 1809 Windows 10 1809 Security update
Patch Tuesday Zero-day

KB5075904

KB5075904: Cumulative update for Windows 10, version 1809, February 2026. Exploited Shell and MSHTML bypasses patched; shutdown issue fixed

In short

Fixes 22 vulnerabilities, including five that are being exploited, and fixes a shutdown problem on some Secure Launch-capable PCs with Virtual Secure Mode enabled.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809, on x86 or x64.

Build
17763.8389
Security
22 fixed · 5 exploited
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fixes 3 changes

OS Security

  • Some Secure Launch-capable PCs with Virtual Secure Mode enabled can shut down or hibernate again instead of restarting.1
    Resolves the issue affecting these PCs after installing a Windows security update released on or after January 13, 2026.

Folders

  • Custom folder names appear as expected when folders are renamed using desktop.ini files in File Explorer.2
    The LocalizedResourceName setting was ignored during folder renaming with desktop.ini files.

Graphics

  • A stability issue affecting certain GPU configurations is addressed.3

Improvements 2 changes

Fonts

  • Chinese fonts are updated to meet GB18030-2022A compliance.4

Servicing stack

  • The component that installs Windows updates receives quality improvements.5
    The combined package includes servicing stack update KB5075903, build 17763.8381.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-02-10
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5078131, KB5077795, KB5073723, KB5074975
+14 earlier KB5071544, KB5068791, KB5066586, KB5065428, KB5066187, KB5063877, KB5062557, KB5060531, KB5061978, KB5058392, KB5059091, KB5058922, KB5050008, KB5037425
Replaced by
KB5078752
VersionBuildChannel
1809 17763.8389 General availability

Security

22 vulnerabilities fixed
5 exploited 21 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2026-21510 Exploited
Windows Shell Security Feature Bypass Vulnerability
 Important 8.8
CVE-2026-21513 Exploited
MSHTML Framework Security Feature Bypass Vulnerability
 Important 8.8
CVE-2026-21519 Exploited
Desktop Window Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21533 Exploited
Windows Remote Desktop Services Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21525 Exploited
Windows Remote Access Connection Manager Denial of Service Vulnerability
 Moderate 6.2
CVE-2026-21255
Windows Hyper-V Security Feature Bypass Vulnerability
 Important 8.8
CVE-2026-21231
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21236
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21238
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21239
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21240
Windows HTTP.sys Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-21246
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-20846
GDI+ Denial of Service Vulnerability
 Important 7.5
CVE-2026-21235
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.3
CVE-2026-21244
Windows Hyper-V Remote Code Execution Vulnerability
 Important 7.3
CVE-2026-21247
Windows Hyper-V Remote Code Execution Vulnerability
 Important 7.3
CVE-2026-21248
Windows Hyper-V Remote Code Execution Vulnerability
 Important 7.3
CVE-2026-21234
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-21253
Mailslot File System Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-21508
Windows Storage Elevation of Privilege Vulnerability
 Important 7.0
CVE-2026-21222
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2026-21249
Windows NTLM Spoofing Vulnerability
 Important 3.3

Updated components

690 files changed since the previous update for the same versions.

Top changed componentsFiles
Networking18
Graphics and display16
Remote Desktop10
Bluetooth8
Search8
Secure Boot8
Storage and file systems8
File Explorer and shell6
Kernel6
Security and sign-in6
Windows Update6
Hyper-V and virtualization5

Sources

Updated
Cited passages from Microsoft's official notes (5)
  1. 1. [OS Security (known issue)] Fixed: After installing the Windows security update released on or after January 13, 2026, some Secure Launch-capable PCs with Virtual Secure Mode (VSM) enabled are unable to shut down or enter hibernation. support.microsoft.com
  2. 2. [Folders] Fixed: This update fixes an issue that affects folder renaming with desktop.ini files in File Explorer. The LocalizedResourceName setting was ignored, so custom folder names did not show. support.microsoft.com
  3. 3. [Graphics] Fixed: A stability issue affecting certain graphics processing units (GPUs) configurations. support.microsoft.com
  4. 4. [Fonts] This update includes changes to Chinese fonts to meet GB18030-2022A compliance. support.microsoft.com
  5. 5. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake