Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday

KB5094122

KB5094122: Cumulative update for Windows 10, version 1607, June 2026. Secure Boot reaches more devices; folder icons may disappear

In short

More devices can qualify for Secure Boot certificate updates, while stricter folder handling may hide custom icons or names. Support ends October 13, 2026.

Does it affect you? Applies to: Devices running Windows 10 version 1607, Enterprise LTSB 2016 or IoT Enterprise 2016 LTSB.

Build
14393.9234
Security
73 fixed · 11 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 2 changes

Secure Boot

Gradual rollout Verified in package

For: devices eligible for new Secure Boot certificates

  • More eligible devices can receive new Secure Boot certificates after showing enough successful update signals.1
    Windows quality updates include additional high-confidence device targeting data; certificate delivery remains controlled and phased.

Folder customization

For: users with folders containing downloaded or remote content

  • Custom folder icons or localized folder names might be missing for content from downloaded or remote locations. Folder access is not affected.2
    The security hardening change affects how Windows processes desktop.ini files.

New feature 1 change

Secure Boot

Verified in package
  • A new policy can limit the Secure Boot service data Windows sends to Microsoft.3
    The LimitSecureBootRequiredServiceData setting is under Computer Configuration > Administrative Templates > Windows Components > Secure Boot.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5099535

    Microsoft Office applications might fail to open from certain third-party apps

    Some third-party apps might fail to open Microsoft Office apps or documents; KB5099535 resolves this issue.4

    Resolution Fixed in KB5099535

    Install KB5099535 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Everyone Resolved by KB5099535

    Deleting from recycle bin displays an internal file name

    A Recycle Bin confirmation dialog might show an internal file name instead of the original name; KB5099535 resolves this issue.5

    Resolution Fixed in KB5099535

    Install KB5099535 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  3. Resolved Affects: Everyone Resolved by KB5099535

    OneDrive shortcut in file explorer might not work in administrator mode

    The OneDrive shortcut in File Explorer might not work when File Explorer runs with administrative privileges; KB5099535 resolves this issue.6

    Resolution Fixed in KB5099535

    Install KB5099535 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-06-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5087537, KB5091572, KB5082198, KB5078938
+19 earlier KB5075999, KB5073722, KB5074974, KB5071543, KB5068864, KB5066836, KB5065427, KB5063871, KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5099535
VersionBuildChannel
1607 14393.9234 General availability

Security

73 vulnerabilities fixed
11 critical 62 important
VulnerabilitySeverityCVSS
CVE-2026-47291
HTTP.sys Remote Code Execution Vulnerability
 Critical 9.8
CVE-2026-42985
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-47289
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2026-45607
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.4
CVE-2026-33828
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
 Critical 7.8
CVE-2026-44803
Windows Graphics Component Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-44812
Windows Graphics Component Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-48574
Windows Media Remote Code Execution Vulnerability
 Critical 7.8
CVE-2026-42992
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-44799
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-44801
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 7.5
CVE-2026-45586
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2026-49160
HTTP.sys Denial of Service Vulnerability
 Important 7.5
CVE-2026-50507
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8

The table lists the 14 exploited, publicly disclosed or critical vulnerabilities. See all 73 vulnerabilities →

Updated components

777 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display24
Secure Boot16
Remote Desktop13
Networking12
Bluetooth10
Search8
Security and sign-in8
File Explorer and shell6
Hyper-V and virtualization6
Storage and file systems6
Kernel4
Settings4

Verified in package: changed files confirm Secure Boot.

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. support.microsoft.com
  2. 2. As a result, some users might notice missing custom folder icons or localized folder names for content from downloaded or remote locations. support.microsoft.com
  3. 3. This update adds a new policy setting, LimitSecureBootRequiredServiceData, under Computer Configuration > Administrative Templates > Windows Components > Secure Boot. support.microsoft.com
  4. 4. This issue is resolved in Windows updates released on and after July 14, 2026 such as KB5099535. support.microsoft.com
  5. 5. This issue is resolved in Windows updates released on and after July 14, 2026 such as KB5099535. support.microsoft.com
  6. 6. This issue is resolved in Windows updates released on and after July 14, 2026 such as KB5099535. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Sep 25, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake