Skip to the content
The Update Bureau

Windows 10

Windows 10 updates

All published releases for Windows 10, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

14 active known issues →

Latest build per version

Windows 10 updates

  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band Updated

    KB5136493

    Error 0x80041008 fixed for certain SLMGR licensing tasks

    Some organizations could see error 0x80041008 when using SLMGR for licensing or activation tasks; this update fixes the issue. It also improves checks for devices hosted on Azure.

    Free support for Windows 10 Enterprise LTSC 2021 ends on January 12, 2027. Organizations using it should plan for continued support.

    Key changes 3 changes

    • Improved Servicing stack: The servicing stack improves checks that identify devices hosted on Azure.
    • Fix Licensing and Activation: Some organizations could get an error while managing Windows activation or product keys. This fix applies to version 22H2.
    • Fix Licensing and Activation: Some organizations could get an error while managing Windows activation or product keys. This fix applies to version 21H2.

    Read update Source: Microsoft

    Builds
    19044.7850 · 19045.7850
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5136490

    SLMGR licensing and activation errors fixed

    Some Windows licensing and activation tasks no longer fail with error 0x80041008. The problem mainly affected organizations managing activation or product keys with commands.

    Key changes 2 changes

    • Improved Servicing stack update (SSU): The servicing stack update adds a check to verify whether a device is hosted on Azure.
    • Fix Licensing and Activation: Windows licensing and activation tasks that failed with error 0x80041008 are fixed.

    Read update Source: Microsoft

    Build
    17763.9488
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Updated

    KB5131096

    PowerShell rejects some invalidly encoded signed scripts

    Stricter PowerShell signature checks might reject signed scripts with invalid UTF-8 encoding. The update also fixes printer setup and Remote Desktop problems.

    Check the newer update, KB5136493
    Free support for Windows 10 Enterprise LTSC 2021 ends on January 12, 2027. Plan for continued support.

    Key changes 547 CVEs · 7 changes

    • Improved Date and Time: Cuba stays on UTC-04:00 and skips the November 2026 and March 2027 clock changes. It returns to UTC-05:00 in November 2027 and resumes...
    • Improved Windows PowerShell: Some signed PowerShell scripts with invalid UTF-8 encoding might fail signature checks. Save affected scripts as valid UTF-8 with a BOM...
    • Improved Servicing stack: The latest servicing stack update comes bundled with the cumulative update.

    Read update Source: Microsoft

    Builds
    19044.7846 · 19045.7846
    Security
    547 fixed · 30 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Updated

    KB5131085

    Cuba clock rules adjusted; printer and remote access failures fixed

    Cuba’s clock stays on UTC-04:00 through the 2026–2027 daylight-saving period, and the update fixes printer and remote access problems. It also includes security updates for Windows.

    Check the newer update, KB5136490

    Key changes 523 CVEs · 10 changes

    • Improved Date and Time: Cuba stays on UTC-04:00 through the 2026–2027 daylight-saving period, without clock changes in November 2026 or March 2027. It returns...
    • Improved Windows PowerShell: PowerShell checks script signatures more strictly. Scripts with invalid UTF-8 encoding might fail validation, even if they passed befor...
    • Improved Security: NTLM clients offer message signing by default for non-anonymous connections, helping reduce exposure to relay attacks.

    Read update Source: Microsoft

    Build
    17763.9487
    Security
    523 fixed · 28 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Final update for this version Updated

    KB5131291

    Message Queuing and Windows Search flaws patched

    Critical flaws in Message Queuing and Windows Search lead this release, alongside fixes for printing, Remote Desktop, and USB audio.

    Support for this version ended October 13, 2026. Eligible devices need ESU enrollment to keep receiving critical and important security updates.

    Key changes 453 CVEs · 9 changes

    • Improved Date and Time: Cuba's daylight saving time rules now reflect its schedule through 2027.
    • Improved Windows PowerShell: PowerShell checks script signatures more strictly. Scripts with invalid UTF-8 encoding might fail validation, even if they passed befor...
    • Improved Security: NTLM connections offer message signing by default when they are not anonymous. This helps reduce exposure to relay attacks.

    Read update Source: Microsoft

    Build
    14393.9688
    Security
    453 fixed · 24 critical
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band Updated

    KB5134125

    Offline devices get updated certificate trust data

    Devices that miss automatic certificate updates get refreshed trust data in this out-of-band release. It also partly resolves USB audio problems with 8-channel and 3D audio.

    Check the newer update, KB5131096
    Free support for Windows 10 Enterprise LTSC 2021 ends January 12, 2027.

    Key changes 4 changes

    • Improved Certificates: Devices that cannot receive certificate updates automatically get a refreshed list of trusted certificates.
    • Improved Certificates: Devices that cannot receive certificate updates automatically get a refreshed list of trusted certificates.
    • Improved Servicing stack: The update process better checks whether a device is hosted on Azure, using updated security certificates.

    Read update Source: Microsoft

    Builds
    19044.7811 · 19045.7811
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5134124

    Updated trusted-root certificates for disconnected devices

    Devices that miss automatic certificate trust updates get an updated trusted-root certificate payload. This out-of-band release is intended for systems that cannot reach Microsoft's certificate service or have automatic updates disabled.

    Check the newer update, KB5131085

    Key changes 3 changes

    • Improved Certificates: Devices that cannot get certificate updates from the usual service receive an updated trusted root certificate payload.
    • Improved Servicing stack: The servicing stack update adds checks to confirm whether a device is hosted on Azure.
    • Improved Certificates: The release note now links to more information about certificate trust changes related to eMudhra.

    Read update Source: Microsoft

    Build
    17763.9378
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5134123

    Offline devices get updated trusted certificates

    Devices that cannot reach Microsoft’s certificate service get updated trusted certificate data. Support for this edition ended October 13, 2026.

    Check the newer update, KB5131291
    Support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB ended October 13, 2026.

    Key changes 1 change

    • Improved Certificates: Devices that cannot get certificate updates from Microsoft receive updated trusted certificate data.

    Read update Source: Microsoft

    Build
    14393.9615
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day Updated

    KB5126657

    Windows Shell flaw under active attack gets patched

    An actively exploited Windows Shell security-feature bypass gets patched, alongside changes to time zones, ReFS security, storage, and File History.

    Check the newer update, KB5134125
    Free support for Windows 10 Enterprise LTSC 2021 ends January 12, 2027. Plan for continued support before then.

    Key changes 954 CVEs · 7 changes

    • New Date and Time: A new Manitoba time zone is available.
    • New ReFS security: ReFS auditing is on by default for externally attached storage. Optional security controls are available but stay off by default.
    • Improved Date and Time: Windows adds permanent daylight saving time support for British Columbia and Alberta starting in November 2026.

    Read update Source: Microsoft

    Builds
    19044.7807 · 19045.7807
    Security
    954 fixed · 22 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5126651

    Windows Shell exploit covered; BitLocker access restored

    An exploited Windows Shell security bypass is covered, and older systems can access drives encrypted on newer systems again. The update also addresses File History and Storage Spaces problems.

    Check the newer update, KB5134124

    Key changes 946 CVEs · 7 changes

    • New Date and Time: A new Manitoba Standard Time zone is available.
    • New ReFS security: ReFS volumes on external storage get auditing and optional security controls. Auditing is on by default, while enforcement is off by de...
    • Improved Date and Time: Devices using British Columbia or Alberta time zones get permanent daylight saving time support starting in November 2026.

    Read update Source: Microsoft

    Build
    17763.9376
    Security
    946 fixed · 24 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day Updated

    KB5126868

    Actively exploited Windows Shell flaw patched; storage issues addressed

    An actively exploited Windows Shell flaw is patched, alongside fixes for File History and offline Storage Spaces Direct disks. Free support for these 2016 LTSB editions ends on release day.

    Check the newer update, KB5134123
    Free support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB ends October 13, 2026.

    Key changes 748 CVEs · 6 changes

    • New Date and Time: A new Manitoba time zone is available.
    • New ReFS security: ReFS volumes on external storage devices gain auditing and optional security controls.
    • Improved Date and Time: Permanent daylight saving time support starts in British Columbia and Alberta in November 2026.

    Read update Source: Microsoft

    Build
    14393.9612
    Security
    748 fixed · 20 critical · 1 exploited
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band Updated

    KB5129236

    Remote Desktop instability and USB multichannel audio fixed

    Fixes Remote Desktop failures, Linux VM shared-folder access, and 8-channel or 3D USB audio problems. Other USB Audio Class 1.0 symptoms remain unresolved.

    Check the newer update, KB5126657
    Free support for Windows 10 Enterprise LTSC 2021 ends January 12, 2027. Microsoft points users to its ESU guidance.

    Key changes 6 changes

    • Improved Servicing stack: The update improves how Windows checks whether a device is hosted on Azure.
    • Fix Remote Desktop Services (known issue): Remote Desktop connections and sign-ins, along with related tools, are less likely to fail or stop responding in affected environments.
    • Fix Hyper-V (known issue): Linux virtual machines can see and access folders shared from the Windows host again.

    Read update Source: Microsoft

    Builds
    19044.7727 · 19045.7727
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5129238

    Remote Desktop failures and multichannel USB audio fixed

    Addresses Remote Desktop connection and sign-in failures and fixes 8-channel or 3D audio problems on some USB Audio Class 1.0 devices.

    Check the newer update, KB5126651

    Key changes 2 changes

    • Fix Remote Desktop Services (known issue): Addresses Remote Desktop connection and sign-in failures, instability, and servers becoming unresponsive during Remote Desktop configur...
    • Fix 8-channel or 3D audio modes: Some USB Audio Class 1.0 devices work again with 8-channel or 3D audio modes.

    Read update Source: Microsoft

    Build
    17763.9247
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band

    KB5129239

    Remote Desktop instability and multichannel USB audio addressed

    Addresses Remote Desktop instability and fixes failures in 8-channel or 3D audio on some USB Audio Class 1.0 devices. Other USB audio symptoms remain unresolved.

    Check the newer update, KB5126868
    Free support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB ends October 13, 2026. Microsoft points to information about Extended Security Updates.

    Key changes 2 changes

    • Fix Remote Desktop Services (known issue): Addresses Remote Desktop instability that could cause connection or sign-in failures, unresponsive servers, and related tools to stop r...
    • Fix 8-channel or 3D audio modes: Some USB Audio Class 1.0 devices that worked in standard stereo no longer fail when using 8-channel or 3D audio modes.

    Read update Source: Microsoft

    Build
    14393.9514
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day Updated

    KB5122878

    Windows ALPC flaw under attack; remote audio issue addressed

    An actively exploited Windows ALPC flaw is among the security fixes. The update also addresses Remote Desktop audio and a BitLocker recovery-key issue.

    Check the newer update, KB5129236
    Windows 10 Enterprise LTSC 2021 support ends January 12, 2027. Its users need to plan for the end of free updates and support.

    Key changes 578 CVEs · 6 changes

    • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically. Certificate deployment continues over the coming months.
    • Improved Date and Time: The local time in Morocco reflects the change to permanent UTC+00:00 on September 20, 2026.
    • Improved OMA DM protocol: More debug details are saved when a device connects to a server.

    Read update Source: Microsoft

    Builds
    19044.7725 · 19045.7725
    Security
    578 fixed · 49 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5122876

    Exploited ALPC flaw patched; remote-session audio addressed

    Attackers are exploiting a Windows ALPC flaw to gain higher access. Remote-session audio also gets a fix, though some USB audio problems remain.

    Check the newer update, KB5129238

    Key changes 622 CVEs · 5 changes

    • Improved Secure Boot: More eligible PCs can automatically receive new Secure Boot certificates.
    • Improved Date and Time: Morocco's local time will display correctly after the September 20, 2026, time change.
    • Improved Windows Code Integrity policies: Apps work more smoothly during Windows certificate-authority changes.

    Read update Source: Microsoft

    Build
    17763.9245
    Security
    622 fixed · 55 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day Updated

    KB5123099

    Windows ALPC flaw under attack; Remote Desktop audio addressed

    Attackers are exploiting a Windows ALPC privilege flaw. The update also addresses Remote Desktop audio problems and adds Secure Boot certificate targeting data.

    Check the newer update, KB5129239
    Free updates and security fixes for Enterprise LTSB 2016 end on October 13, 2026. Microsoft points to information about Extended Security Updates.

    Key changes 559 CVEs · 4 changes

    • Improved Secure Boot: More eligible PCs can receive new Secure Boot certificates automatically.
    • Improved Date and Time: Morocco's local time will reflect its move to permanent UTC+00:00 on September 20, 2026.
    • Improved Windows Code Integrity policies: Application compatibility improves during Windows certificate-authority changes.

    Read update Source: Microsoft

    Build
    14393.9512
    Security
    559 fixed · 45 critical · 1 exploited
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day Updated

    KB5120249

    Exploited Winsock driver flaw patched; File History backups fixed

    Attackers are exploiting a flaw in the Winsock Ancillary Function Driver that can let them gain higher access. Scheduled File History backups to network shares also work again.

    Check the newer update, KB5122878
    Windows 10 Enterprise LTSC 2021 support ends January 12, 2027. Windows 10, version 22H2, is available here for devices enrolled in the ESU program.

    Key changes 160 CVEs · 2 changes

    • Improved Secure Boot: More eligible PCs can automatically receive new Secure Boot certificates. Delivery continues over the coming months.
    • Fix Backup: File History scheduled backups to network shares no longer fail with an “invalid credentials” error.
    • Exploited CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Builds
    19044.7663 · 19045.7663
    Security
    160 fixed · 6 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5120238

    Exploited networking flaw; File History backups fixed

    Attackers are exploiting a Windows networking flaw to gain higher privileges. File History backups to SMB network shares also work again.

    Check the newer update, KB5122876

    Key changes 162 CVEs · 2 changes

    • Improved Secure Boot: More supported PCs become eligible to receive new Secure Boot certificates automatically over the coming months.
    • Fix Backup: File History automatic backups to SMB network shares copy files again instead of failing with an incorrect credentials error.
    • Exploited CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    17763.9121
    Security
    162 fixed · 12 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day Updated

    KB5120418

    Exploited WinSock driver flaw patched; File History backups restored

    An exploited WinSock driver flaw is patched, and failed File History network backups are fixed. Secure Boot certificate updates continue to reach eligible devices.

    Check the newer update, KB5123099
    Windows 10 Enterprise LTSB 2016 and IoT Enterprise 2016 LTSB reach end of support on October 13, 2026.

    Key changes 147 CVEs · 2 changes

    • Improved Secure Boot: More devices can receive updated Secure Boot certificates automatically. The rollout continues over the coming months.
    • Fix Backup: File History backups to network shares work again instead of failing with an incorrect credentials error.
    • Exploited CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14393.9418
    Security
    147 fixed · 11 critical · 1 exploited
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day Updated

    KB5099539

    Shell spoofing flaw exploited; Secure Boot and RDP protections updated

    A Windows Shell spoofing flaw is already being exploited, and the update adds Secure Boot status reporting and SHA-2 support for trusted RDP publishers. Some keyboard shortcuts might stop responding in rare cases.

    Check the newer update, KB5120249
    Windows 10 Enterprise LTSC 2021 support ends January 12, 2027. Windows 10 IoT Enterprise LTSC 2021 support continues until January 13, 2032.

    Key changes 315 CVEs · 8 changes

    • New Remote Desktop (RDP) Security: Trusted Remote Desktop publishers can use SHA-2 certificates. Administrators also get guidance for controlling which Remote Desktop fil...
    • Improved Input: Hotkey cleanup behavior changes. In rare cases, some built-in Windows experiences might temporarily stop responding to keyboard shortcu...
    • Improved Secure Boot: Windows Security can now report Secure Boot status changes.

    Read update Source: Microsoft

    Builds
    19044.7548 · 19045.7548
    Security
    315 fixed · 21 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5099538

    Exploited Shell and AD FS flaws patched; Secure Boot coverage expands

    Patches exploited Windows Shell and Active Directory Federation Services flaws, and expands automatic Secure Boot certificate coverage. Some keyboard shortcuts might briefly stop working in rare cases.

    Check the newer update, KB5120238

    Key changes 313 CVEs · 9 changes

    • New Secure Boot: Windows Security can now report the status of Secure Boot states.
    • Improved Input: Some built-in Windows features might briefly stop responding to keyboard shortcuts in rare cases.
    • Improved Secure Boot: More eligible devices can receive newer Secure Boot certificates automatically.

    Read update Source: Microsoft

    Build
    17763.9020
    Security
    313 fixed · 27 critical · 2 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day Updated

    KB5099535

    Exploited AD FS flaw patched; unregistered TDI apps may stop working

    Attackers are exploiting an AD FS privilege flaw. This release also tightens TDI transport rules, which might stop apps using unregistered third-party transports.

    Check the newer update, KB5120418
    Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support on October 13, 2026.

    Key changes 250 CVEs · 6 changes

    • New Remote Desktop (RDP) Security: Trusted Remote Desktop publishers can use SHA-2 certificate thumbprints. SHA-1 remains for compatibility but is planned for removal.
    • Improved Secure Boot: More devices qualify for automatic Secure Boot certificate updates. Certificates began expiring in June 2026, but devices without repla...
    • Improved Networking: Some apps using unregistered third-party network transports might stop working.

    Read update Source: Microsoft

    Build
    14393.9339
    Security
    250 fixed · 25 critical · 2 exploited
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5094127

    HTTP.sys remote-code flaw patched; Secure Boot reporting added

    Patches a critical HTTP.sys remote-code execution flaw and adds Secure Boot status reporting. File Explorer search also handles Chinese text and UTF-8 files better.

    Check the newer update, KB5099539
    Support for Windows 10 Enterprise LTSC 2021 ends January 12, 2027.

    Key changes 147 CVEs · 5 changes

    • New Secure Boot: Administrators can set a policy to limit Secure Boot data sent to Microsoft.
    • Improved File Explorer: File Explorer search handles Chinese text and UTF-8 files without a byte order mark. Text appears more clearly in search results, Conte...
    • Improved Secure Boot: Windows Security can now report Secure Boot status dynamically.

    Read update Source: Microsoft

    Builds
    19044.7417 · 19045.7417
    Security
    147 fixed · 17 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5094123

    Remote Desktop Client flaws patched; Secure Boot reporting expands

    Secure Boot gets new status reporting and data controls, while a security change might hide some custom folder icons or names. Outlook and other apps that use push notifications get a fix for hangs.

    Check the newer update, KB5099538

    Key changes 85 CVEs · 5 changes

    • New Secure Boot: Windows Security can now report Secure Boot status changes.
    • New Secure Boot: A new policy lets administrators limit Secure Boot data sent to Microsoft.
    • Improved Secure Boot: More devices can qualify to receive new Secure Boot certificates automatically. Certificates roll out in phases after devices show enou...

    Read update Source: Microsoft

    Build
    17763.8880
    Security
    85 fixed · 12 critical
    Restart
    Required