Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday

KB5087537

KB5087537: Cumulative update for Windows 10, version 1607, May 2026. Remote Desktop warnings and Microsoft account sign-in fixed

In short

Fixes a Remote Desktop warning display issue and a Microsoft account sign-in error, and addresses 44 vulnerabilities, including three Critical ones.

Does it affect you? Applies to: Devices running Windows 10, version 1607: Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB.

Build
14393.9140
Security
44 fixed · 3 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fixes 2 changes

Remote Desktop security warnings

Verified in package

For: Devices using multiple monitors with different display scaling settings

  • The Remote Desktop Connection security warning dialog no longer might render incorrectly across monitors with different display scaling settings.1
    The issue might occur after installing a Windows security update released on or after April 14, 2026.

Sign-In

For: Some users signing in to apps with a Microsoft account

  • Some users can sign in to apps with a Microsoft account without being blocked by a “no Internet” error, even when the device has an Internet connection.2
    The issue can affect access to Microsoft services and apps such as Microsoft Teams after installing a Windows update released on or after March 10, 2026.

Improvement 1 change

Daylight Savings Time (DST)

For: Devices configured for the Arab Republic of Egypt

  • Daylight-saving-time support is updated for the Arab Republic of Egypt to reflect its 2023 government change order.3

New feature 1 change

Secure Boot

Verified in package

For: Eligible devices; scripts are intended for IT professionals managing device fleets

  • Eligible devices get a SecureBoot folder containing example scripts for checking and managing Secure Boot certificate updates.4
    The folder is created under C:\Windows. The scripts are intended for organizations that actively manage updates across a device fleet and can automate deployment through a safe rollout mechanism in an Active Directory environment.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-05-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5091572, KB5082198, KB5078938, KB5075999
+18 earlier KB5073722, KB5074974, KB5071543, KB5068864, KB5066836, KB5065427, KB5063871, KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5094122
VersionBuildChannel
1607 14393.9140 General availability

Security

44 vulnerabilities fixed
3 critical 41 important
VulnerabilitySeverityCVSS
CVE-2026-40403
Windows Graphics Component Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-35421
Windows GDI Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-32161
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
 Critical 7.5

The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 44 vulnerabilities →

Updated components

679 files changed since the previous update for the same versions.

Top changed componentsFiles
WPF28
Graphics and display16
Networking14
Search8
Hyper-V and virtualization7
File Explorer and shell6
Secure Boot6
Kernel4
Remote Desktop4
Security and sign-in4
Settings4
Printing2

Verified in package: changed files confirm Remote Desktop security warnings, Secure Boot.

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. Fixed: The Remote Desktop Connection security warning dialog might render incorrectly in multi-monitor configurations with different display scaling settings. support.microsoft.com
  2. 2. Fixed: After you install the Windows update released on or after March 10, 2026, some users might experience an issue signing in to apps with a Microsoft account. support.microsoft.com
  3. 3. Update for Arab Republic of Egypt to support the government DST change order in 2023. support.microsoft.com
  4. 4. This update adds a new SecureBoot folder under C:\Windows on eligible devices. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake