Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday

KB5082198

KB5082198: Cumulative update for Windows 10, version 1607, April 2026. Critical IKE and TCP/IP remote-code flaws patched

In short

Fixes 79 vulnerabilities, including two critical remote-code execution flaws in Windows IKE Service Extensions and TCP/IP. It also expands the phased rollout of new Secure Boot certificates.

Does it affect you? Applies to: This update applies to Windows 10, version 1607, Enterprise LTSB 2016 and IoT Enterprise 2016 LTSB. It installs build 14393.9060.

Build
14393.9060
Security
79 fixed · 2 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 2 changes

Remote Desktop

Verified in package

For: People opening .rdp files

  • When you open an .rdp file, Remote Desktop shows its requested connection settings before connecting. Each setting is off by default, and a one-time security warning appears the first time an .rdp file is opened on a device.1
    Improves protection against phishing attacks that use Remote Desktop (.rdp) files.

Secure Boot

Gradual rollout Verified in package

For: Devices eligible for new Secure Boot certificates

  • More eligible devices may automatically receive new Secure Boot certificates, but only after successful update signals.2
    Adds high confidence device targeting data to quality updates to increase coverage while maintaining a controlled, phased rollout.

Fix 1 change

Windows Configuration System (WinCS)

Verified in package

For: Windows 10 version 1607 and Windows Server 2016 devices

  • Secure Boot can be enabled through WinCS again when its components are present.3
    Addresses missing WinCS components on Windows 10, version 1607, and Windows Server 2016.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-04-14
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5078938, KB5075999, KB5073722, KB5074974
+16 earlier KB5071543, KB5068864, KB5066836, KB5065427, KB5063871, KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5091572
VersionBuildChannel
1607 14393.9060 General availability

Security

79 vulnerabilities fixed
2 critical 76 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2026-33824
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-33827
Windows TCP/IP Remote Code Execution Vulnerability
 Critical 8.1

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 79 vulnerabilities →

Updated components

1,365 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display20
Secure Boot17
Networking14
WCF14
File Explorer and shell11
Security and sign-in11
Settings10
Kernel9
Search8
Hyper-V and virtualization7
Remote Desktop4
Storage and file systems4

Verified in package: changed files confirm Remote Desktop, Secure Boot, Windows Configuration System (WinCS).

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. When you open an .rdp file, Remote Desktop shows all requested connection settings before it connects, with each setting turned off by default. support.microsoft.com
  2. 2. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout. support.microsoft.com
  3. 3. This update addresses an issue that affects Windows Configuration System (WinCS) on Windows 10, version 1607 and Windows Server 2016. Some WinCS components were missing. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake