Skip to the content
The Update Bureau

Windows 10 1809

Windows 10 Enterprise LTSC 2019

Every published release for Windows 10 Enterprise LTSC 2019, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5136490 Nov 13, 2026
Build
17763.9488
Released
Nov 13, 2018
All editions
updates until Jan 9, 2029
Known issues
4 open

Latest update

  • KB5136490 Released Nov 13, 2026
    Build 17763.9488

Build history

  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5136490

    SLMGR licensing and activation errors fixed

    Some Windows licensing and activation tasks no longer fail with error 0x80041008. The problem mainly affected organizations managing activation or product keys with commands.

    Key changes 2 changes

    • Improved Servicing stack update (SSU): The servicing stack update adds a check to verify whether a device is hosted on Azure.
    • Fix Licensing and Activation: Windows licensing and activation tasks that failed with error 0x80041008 are fixed.
    Build
    17763.9488
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Updated

    KB5131085

    Cuba clock rules adjusted; printer and remote access failures fixed

    Cuba’s clock stays on UTC-04:00 through the 2026–2027 daylight-saving period, and the update fixes printer and remote access problems. It also includes security updates for Windows.

    Check the newer update, KB5136490

    Key changes 523 CVEs · 10 changes

    • Improved Date and Time: Cuba stays on UTC-04:00 through the 2026–2027 daylight-saving period, without clock changes in November 2026 or March 2027. It returns...
    • Improved Windows PowerShell: PowerShell checks script signatures more strictly. Scripts with invalid UTF-8 encoding might fail validation, even if they passed befor...
    • Improved Security: NTLM clients offer message signing by default for non-anonymous connections, helping reduce exposure to relay attacks.
    Build
    17763.9487
    Security
    523 fixed · 28 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5134124

    Updated trusted-root certificates for disconnected devices

    Devices that miss automatic certificate trust updates get an updated trusted-root certificate payload. This out-of-band release is intended for systems that cannot reach Microsoft's certificate service or have automatic updates disabled.

    Check the newer update, KB5131085

    Key changes 3 changes

    • Improved Certificates: Devices that cannot get certificate updates from the usual service receive an updated trusted root certificate payload.
    • Improved Servicing stack: The servicing stack update adds checks to confirm whether a device is hosted on Azure.
    • Improved Certificates: The release note now links to more information about certificate trust changes related to eMudhra.
    Build
    17763.9378
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5126651

    Windows Shell exploit covered; BitLocker access restored

    An exploited Windows Shell security bypass is covered, and older systems can access drives encrypted on newer systems again. The update also addresses File History and Storage Spaces problems.

    Check the newer update, KB5134124

    Key changes 946 CVEs · 7 changes

    • New Date and Time: A new Manitoba Standard Time zone is available.
    • New ReFS security: ReFS volumes on external storage get auditing and optional security controls. Auditing is on by default, while enforcement is off by de...
    • Improved Date and Time: Devices using British Columbia or Alberta time zones get permanent daylight saving time support starting in November 2026.
    Build
    17763.9376
    Security
    946 fixed · 24 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated

    KB5129238

    Remote Desktop failures and multichannel USB audio fixed

    Addresses Remote Desktop connection and sign-in failures and fixes 8-channel or 3D audio problems on some USB Audio Class 1.0 devices.

    Check the newer update, KB5126651

    Key changes 2 changes

    • Fix Remote Desktop Services (known issue): Addresses Remote Desktop connection and sign-in failures, instability, and servers becoming unresponsive during Remote Desktop configur...
    • Fix 8-channel or 3D audio modes: Some USB Audio Class 1.0 devices work again with 8-channel or 3D audio modes.
    Build
    17763.9247
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5122876

    Exploited ALPC flaw patched; remote-session audio addressed

    Attackers are exploiting a Windows ALPC flaw to gain higher access. Remote-session audio also gets a fix, though some USB audio problems remain.

    Check the newer update, KB5129238

    Key changes 622 CVEs · 5 changes

    • Improved Secure Boot: More eligible PCs can automatically receive new Secure Boot certificates.
    • Improved Date and Time: Morocco's local time will display correctly after the September 20, 2026, time change.
    • Improved Windows Code Integrity policies: Apps work more smoothly during Windows certificate-authority changes.
    Build
    17763.9245
    Security
    622 fixed · 55 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5120238

    Exploited networking flaw; File History backups fixed

    Attackers are exploiting a Windows networking flaw to gain higher privileges. File History backups to SMB network shares also work again.

    Check the newer update, KB5122876

    Key changes 162 CVEs · 2 changes

    • Improved Secure Boot: More supported PCs become eligible to receive new Secure Boot certificates automatically over the coming months.
    • Fix Backup: File History automatic backups to SMB network shares copy files again instead of failing with an incorrect credentials error.
    • Exploited CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
    Build
    17763.9121
    Security
    162 fixed · 12 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day Updated

    KB5099538

    Exploited Shell and AD FS flaws patched; Secure Boot coverage expands

    Patches exploited Windows Shell and Active Directory Federation Services flaws, and expands automatic Secure Boot certificate coverage. Some keyboard shortcuts might briefly stop working in rare cases.

    Check the newer update, KB5120238

    Key changes 313 CVEs · 9 changes

    • New Secure Boot: Windows Security can now report the status of Secure Boot states.
    • Improved Input: Some built-in Windows features might briefly stop responding to keyboard shortcuts in rare cases.
    • Improved Secure Boot: More eligible devices can receive newer Secure Boot certificates automatically.
    Build
    17763.9020
    Security
    313 fixed · 27 critical · 2 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5094123

    Remote Desktop Client flaws patched; Secure Boot reporting expands

    Secure Boot gets new status reporting and data controls, while a security change might hide some custom folder icons or names. Outlook and other apps that use push notifications get a fix for hangs.

    Check the newer update, KB5099538

    Key changes 85 CVEs · 5 changes

    • New Secure Boot: Windows Security can now report Secure Boot status changes.
    • New Secure Boot: A new policy lets administrators limit Secure Boot data sent to Microsoft.
    • Improved Secure Boot: More devices can qualify to receive new Secure Boot certificates automatically. Certificates roll out in phases after devices show enou...
    Build
    17763.8880
    Security
    85 fixed · 12 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5087538

    Secure Boot certificate coverage expands; sign-in errors fixed

    The update expands Secure Boot certificate targeting and fixes Microsoft-account sign-in errors and a Remote Desktop display warning. Secure Boot certificates have started expiring in June 2026, so Microsoft recommends preparing devices.

    Check the newer update, KB5094123
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing its guidance and preparing certificate updates in advance.

    Key changes 52 CVEs · 6 changes

    • New Secure Boot: Windows Security can report Secure Boot states dynamically.
    • New Secure Boot: Eligible devices get a SecureBoot folder containing sample scripts for checking certificate status and automating deployment.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically after demonstrating sufficient successful update signals.
    Build
    17763.8755
    Security
    52 fixed · 3 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5091573

    Secure Boot certificates face expiration; Azure checks updated

    Includes updated Azure-hosted device certificate checks. Microsoft also warns that Secure Boot certificates have started expiring and recommends preparing in advance.

    Check the newer update, KB5087538
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Personal and business device owners should review the guidance and update certificates in advance to avoid possible boot disruption.

    Key changes 1 change

    • Improved Servicing stack update (SSU): The included SSU improves checks that determine whether a device is hosted on Azure.
    Build
    17763.8647
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5082123

    Critical IKE and TCP/IP flaws patched; .rdp files get safer prompts

    Fixes 99 vulnerabilities, including two critical remote code execution flaws in IKE service extensions and TCP/IP. It also adds security checks when opening .rdp files and changes Secure Boot reporting.

    Check the newer update, KB5091573

    Key changes 99 CVEs · 5 changes

    • New Secure Boot: The Windows Security app can report Secure Boot status. These status alerts are off by default on commercial devices and servers.
    • Improved Remote Desktop: Before connecting from an .rdp file, Remote Desktop shows the requested connection settings, with each setting turned off by default. A...
    • Improved Secure Boot: More eligible devices can automatically receive new Secure Boot certificates, with a controlled rollout based on successful update sign...
    Build
    17763.8644
    Security
    99 fixed · 2 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5078752

    Secure Boot certificate rollout expands; File History backs up more names

    Secure Boot certificates have started expiring in June 2026, and this update expands phased targeting for devices eligible to receive replacements. It also adds a trusted-source warning in Windows System Image Manager and lets File History back up more filenames.

    Check the newer update, KB5082123

    Key changes 40 CVEs · 3 changes

    • New Windows System Image Manager: A warning helps you check that a selected catalog file comes from a trusted source.
    • Improved File History: File History can back up new files with names containing some Chinese and Private Use Area characters.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically through a phased rollout.
    Build
    17763.8511
    Security
    40 vulnerabilities fixed
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5075904

    Exploited Shell and MSHTML bypasses patched; shutdown issue fixed

    Fixes 22 vulnerabilities, including five that are being exploited, and fixes a shutdown problem on some Secure Launch-capable PCs with Virtual Secure Mode enabled.

    Check the newer update, KB5078752

    Key changes 22 CVEs · 5 changes

    • Improved Fonts: Chinese fonts are updated to meet GB18030-2022A compliance.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix OS Security: Some Secure Launch-capable PCs with Virtual Secure Mode enabled can shut down or hibernate again instead of restarting.
    Build
    17763.8389
    Security
    22 vulnerabilities fixed · 5 actively exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5078131

    Cloud-file errors and Outlook hangs fixed

    Fixes file access errors in cloud storage and hangs in some Outlook setups that store PST files on OneDrive. A restart is required.

    Check the newer update, KB5075904
    Secure Boot certificates began expiring in June 2026. Certain personal and business devices could be unable to boot securely if their certificates are not updated in time; review Microsoft's guidance and prepare in advance.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix File System: Some applications can open and save files in cloud storage again. In certain Outlook setups, email no longer hangs or goes missing beca...
    Build
    17763.8281
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5077795

    Remote Desktop sign-ins fixed; cloud-file hangs remain possible

    Some users can sign in over Remote Desktop again. Apps may still hang when opening or saving cloud files, and the update also improves the servicing stack.

    Check the newer update, KB5078131
    Secure Boot certificates have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid possible boot problems.
    Known issues: 1 open
    • Apps might become unresponsive when saving files to cloud-based storage

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Remote Desktop: Some users can sign in over Remote Desktop again.
    Build
    17763.8280
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5073723

    Exploited Desktop Window Manager flaw gets a security fix

    An exploited Desktop Window Manager flaw is patched. Some apps can no longer autofill credentials during remote support or automated sign-in workflows.

    Check the newer update, KB5077795
    Known issues: 1 open
    • Apps might become unresponsive when saving files to cloud-based storage

    Key changes 70 CVEs · 4 changes

    • Improved Credentials autofill: Some apps can no longer autofill credentials during remote support or automated sign-in.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix WinSqlite3.dll: Security software is less likely to flag the Windows WinSqlite3.dll component as vulnerable.
    Build
    17763.8276
    Security
    70 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5074975

    Message Queuing disruption fixed for managed environments

    The update fixes Message Queuing problems that followed the December 9, 2025 updates, an issue that primarily affected enterprise and managed IT environments.

    Check the newer update, KB5073723
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and prepare to update certificates to avoid possible boot disruption.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Message queuing (MSMQ) (known issue): Message Queuing problems following the December 9, 2025 updates are fixed. The issue primarily affected enterprise and managed IT envir...
    Build
    17763.8148
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5071544

    Exploited Cloud Files flaw fixed; PowerShell adds a script warning

    Fixes 26 vulnerabilities, including an exploited Cloud Files driver flaw and a publicly disclosed PowerShell vulnerability. It also adds a web-script warning to PowerShell 5.1 and retires the taskbar People icon.

    Check the newer update, KB5074975
    Secure Boot certificates used by most Windows devices start expiring in June 2026. Microsoft recommends reviewing its guidance and preparing to update certificates.

    Key changes 26 CVEs · 3 changes

    • Improved PowerShell 5.1: Invoke-WebRequest now asks for confirmation and warns that processing web content can run scripts. You can continue or cancel.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Removed People app: The People icon on the taskbar no longer responds because this feature is being deprecated in Windows 10, version 1809.
    Build
    17763.8146
    Security
    26 vulnerabilities fixed · 1 actively exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5068791

    Exploited kernel flaw patched; unexpected UAC prompts addressed

    Patches an actively exploited Windows kernel flaw and addresses unexpected User Account Control prompts in some apps, including Autodesk AutoCAD.

    Check the newer update, KB5071544
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. The page recommends reviewing the guidance and taking action to update certificates in advance to avoid possible secure-boot disruption.

    Key changes 33 CVEs · 3 changes

    • Improved Internal Windows OS: Includes miscellaneous security improvements to internal Windows functions; the page does not list specific issues.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix App compatibility (known issue): The update addresses unexpected User Account Control prompts for some apps, including Autodesk AutoCAD.
    Build
    17763.8027
    Security
    33 fixed · 2 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5070883

    Version 1809 moves to build 17763.7922

    An out-of-band cumulative update brings Windows 10 Enterprise LTSC 2019, version 1809, to build 17763.7922. The available source does not describe specific fixes or other changes.

    Key security notes

    • Other The out-of-band cumulative update is for Windows 10 Enterprise LTSC 2019, version 1809, and brings the build to 17763.7922.
    Build
    17763.7922
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5066586

    Exploited modem and Remote Access flaws fixed; file previews blocked

    Addresses 92 vulnerabilities, including flaws reported as exploited, and changes File Explorer so it disables previews of files downloaded from the internet. Review the Secure Boot certificate guidance and prepare for upcoming expirations.

    Check the newer update, KB5068791
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing the guidance and preparing to update certificates in advance to avoid possible boot problems.

    Key changes 92 CVEs · 7 changes

    • Improved Cryptography: RSA-based smart card certificates now require a different storage provider; some smart card authentication might have problems as a res...
    • Improved File Explorer: File Explorer automatically disables previews for files downloaded from the internet, helping prevent a vulnerability when potentially...
    • Improved Servicing stack: The update includes a servicing stack improvement intended to make the Windows update installation process more reliable.
    Build
    17763.7919
    Security
    92 fixed · 2 critical · 3 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5065428

    Critical Hyper-V flaws patched; Chinese IME boxes fixed

    Fixes 42 security vulnerabilities, including 7 rated Critical, and fixes empty boxes in the Chinese Simplified IME. It also narrows unexpected UAC prompts during some MSI repairs.

    Check the newer update, KB5066586
    The KB's October 14, 2025 Windows 10 end-of-support notice does not mean the LTSC editions covered here stop receiving updates then; version 1809 LTSC editions are listed with updates through January 9, 2029.

    Key changes 42 CVEs · 4 changes

    • New File Server: IT administrators can check whether devices or software might be incompatible with SMB Server signing and SMB Server EPA before deployi...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements intended to help the update process.
    • Fix Input and Composition: Chinese Simplified IME extended characters that showed as empty boxes display correctly.
    Build
    17763.7792
    Security
    42 fixed · 7 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5066187

    Reset and recovery failures addressed

    Addresses failures when resetting or recovering Windows 10 version 1809 devices after the August security update. It is intended for affected devices and is available from the Update Catalog.

    Check the newer update, KB5065428

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Fix for reset and recovery issue: Addresses failures when resetting or recovering the device using the Windows recovery options or RemoteWipe CSP.
    Build
    17763.7683
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5063877

    GDI+ remote-code flaw patched; Changjie word selection restored

    Fixes 43 vulnerabilities, including three critical flaws, and restores word selection in the Microsoft Changjie Input Method.

    Check the newer update, KB5066187
    The page says Windows 10 support ended on October 14, 2025, and recommends moving to Windows 11. It says free Windows Update updates, technical assistance, and security fixes are no longer provided after that date.

    Key changes 43 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Input and Composition: Users of the Microsoft Changjie Input Method can select words again after a recent update prevented it.
    • Critical CVE-2025-53766: GDI+ Remote Code Execution Vulnerability
    Build
    17763.7678
    Security
    43 fixed · 3 critical
    Restart
    Required

.NET Framework updates

All .NET Framework updates →

.NET Framework is updated separately from Windows 10: each of these updates has its own KB and reaches Windows 10 Enterprise LTSC 2019 through Windows Update.

  • KB5127685 Oct 13, 2026
    3.5, 4.8 Patch Tuesday
  • KB5127666 Oct 13, 2026
    3.5, 4.7.2 Patch Tuesday
  • KB5126048 Sep 8, 2026
    3.5, 4.8 Patch Tuesday
  • KB5126043 Sep 8, 2026
    3.5, 4.7.2 Patch Tuesday
  • KB5120703 Aug 11, 2026
    3.5, 4.8 Patch Tuesday
  • KB5120698 Aug 11, 2026
    3.5, 4.7.2 Patch Tuesday