Skip to the content
The Update Bureau
Windows 10 1809 Windows 10 1809 Security update
Patch Tuesday

KB5078752

KB5078752: Cumulative update for Windows 10, version 1809, March 2026. Secure Boot certificate rollout expands; File History backs up more names

In short

Secure Boot certificates have started expiring in June 2026, and this update expands phased targeting for devices eligible to receive replacements. It also adds a trusted-source warning in Windows System Image Manager and lets File History back up more filenames.

Does it affect you? Applies to: Devices running Windows 10, version 1809, Enterprise LTSC 2019, on x86 or x64.

Build
17763.8511
Security
40 fixed
Restart
Required
Review notes Additional details from the official release notes (2) Read notes
  • What changes The included servicing stack update adds logic to verify whether a device is hosted on Azure, using an updated certificate chain.
  • In short If the certificates are not updated in time, certain personal and business devices might be affected in their ability to boot securely.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 2 changes

File History

For: File History users

  • File History can back up new files with names containing some Chinese and Private Use Area characters.1
    Improves File History in Control Panel when backing up files.

Secure Boot

Gradual rollout Verified in package

For: Devices eligible for automatic Secure Boot certificate updates

  • More eligible devices can receive new Secure Boot certificates automatically through a phased rollout.2
    Adds high-confidence device-targeting data to Windows quality updates. Targeting is based primarily on client device diagnostic data. Servers are unlikely to qualify due to limited data, though they are not explicitly excluded. Devices receive certificates after showing sufficient successful update signals.

New feature 1 change

Windows System Image Manager

For: Windows System Image Manager users

  • A warning helps you check that a selected catalog file comes from a trusted source.3
    Adds a warning dialog when a user selects a catalog file.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-03-10
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5075904, KB5078131, KB5077795, KB5073723
+15 earlier KB5074975, KB5071544, KB5068791, KB5066586, KB5065428, KB5066187, KB5063877, KB5062557, KB5060531, KB5061978, KB5058392, KB5059091, KB5058922, KB5050008, KB5037425
Replaced by
KB5082123
VersionBuildChannel
1809 17763.8511 General availability

Security

40 vulnerabilities fixed
40 important
VulnerabilitySeverityCVSS

The table lists the 0 exploited, publicly disclosed or critical vulnerabilities. See all 40 vulnerabilities →

Updated components

636 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display18
File Explorer and shell12
Networking10
Storage and file systems7
Security and sign-in6
Kernel4
Secure Boot4
Settings4
Audio2
Bluetooth2
Hyper-V and virtualization2
Magnifier2

Verified in package: changed files confirm Secure Boot.

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. [File History] Improved: File History in Control Panel when backing up files. New files with names containing some Chinese and Private Use Area characters can now be backed up. support.microsoft.com
  2. 2. With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. support.microsoft.com
  3. 3. [Windows System Image Manager] This update adds a warning dialog to help users confirm that the selected catalog file comes from a trusted source. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 3/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake