Skip to the content
The Update Bureau

Windows 10 1809

Windows 10 Enterprise LTSC 2019

Every published release for Windows 10 Enterprise LTSC 2019, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5136490 Nov 13, 2026
Build
17763.9488
Released
Nov 13, 2018
All editions
updates until Jan 9, 2029
Known issues
4 open

Build history

  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5062557

    NEGOEX remote-code flaw patched; language-pack cleanup fixed

    The update fixes 75 security vulnerabilities, including five critical flaws, and resolves an issue that wasted storage and slowed updates. It also improves Windows update servicing.

    Check the newer update, KB5063877
    The page's October 14, 2025 Windows 10 end-of-support notice does not give the support deadline for Enterprise LTSC 2019. This edition's support ends January 9, 2029.

    Key changes 75 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Input and Composition: Unused language packs and Feature on Demand packages are removed completely, avoiding unnecessary storage use and longer update install...
    • Critical CVE-2025-47981: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    17763.7558
    Security
    75 fixed · 5 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5060531

    Exploited shortcut-file flaw patched; GDI text rendering fixed

    The update closes an actively exploited remote-code-execution flaw in Internet Shortcut Files and fixes distorted GDI text. It also addresses a Windows Hello for Business certificate sign-in problem.

    Check the newer update, KB5062557
    The page says Windows 10 support ends on October 14, 2025, and recommends moving to Windows 11. It does not state an action specific to this update.

    Key changes 34 CVEs · 3 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix GDI and GDI+: Some characters display at the correct width, and the sample paragraph is no longer broken.
    • Fix Windows Hello: The update addresses a problem that can prevent sign-in with self-signed certificates using Windows Hello for Business.

    Read update Source: Microsoft

    Build
    17763.7434
    Security
    34 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5061978

    Hyper-V confidential VMs stop freezing or restarting unexpectedly

    Fixes an issue that caused confidential virtual machines on Hyper-V with Windows Server 2022 to stop responding or restart unexpectedly, affecting service availability.

    Check the newer update, KB5060531
    The KB page warns that Windows 10 support ends October 14, 2025, after which Microsoft will no longer provide free Windows Update updates, technical assistance, or security fixes.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements intended to improve the reliability of the update process.
    • Fix Hyper-V Platform: Confidential virtual machines on Hyper-V with Windows Server 2022 no longer stop responding or restart unexpectedly because of the dire...

    Read update Source: Microsoft

    Build
    17763.7322
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5058392

    Exploited CLFS driver and DWM flaws patched

    Addresses 36 vulnerabilities, including three critical flaws and five that attackers are exploiting. It also improves Linux detection through Secure Boot and addresses a blue-screen error.

    Check the newer update, KB5061978
    The page says Windows 10 support ends October 14, 2025, and recommends moving to Windows 11. This update is for Enterprise LTSC 2019, which has a later end-of-updates date in the dossier: January 9, 2029.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 36 CVEs · 4 changes

    • Improved OS Security: The blocklist includes more vulnerable drivers, helping prevent their use in attacks.
    • Improved GRFX-Graphics: Addresses a blue-screen error that can occur in cases linked to recent GDI updates and CHS GB18030-2022 fonts.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux system detection improves.

    Read update Source: Microsoft

    Build
    17763.7314
    Security
    36 fixed · 3 critical · 5 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5059091

    Hyper-V-isolated containers start reliably after an image mismatch fix

    Fixes startup failures for some Windows containers running in Hyper-V isolation when their update level differs from the host utility virtual machine. The required servicing stack update must be installed first.

    Check the newer update, KB5058392
    Windows 10 Enterprise LTSC 2019 is scheduled to receive updates through January 9, 2029; the KB page’s general Windows 10 end-of-support notice for October 14, 2025 does not describe this edition.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Windows containers: Some Windows containers running in Hyper-V isolation can start even when their update level does not match the host utility virtual mac...

    Read update Source: Microsoft

    Build
    17763.7249
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5058922

    Local audit policy status mismatch addressed

    Addresses a misleading status for local logon auditing and improves the Windows update installation component. Devices with Citrix Session Recording Agent 2411 may still encounter a separate installation problem with the January 2025 update.

    Check the newer update, KB5059091
    The page carries a general Windows 10 support notice for October 14, 2025; Windows 10 version 1809 is listed with an end-of-updates date of January 9, 2029.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Active Directory Group Policy: Enabled, working local logon audit policies might appear as “No auditing” in policy settings; this update addresses that misleading sta...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.7240
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5055519

    Exploited Common Log File System Driver flaw addressed

    Addresses 59 vulnerabilities, including an actively exploited Common Log File System Driver flaw. It also changes daylight-saving-time handling, security behavior, and the servicing stack.

    This update has not been available through Microsoft's release channels since March 31, 2026. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 59 CVEs · 5 changes

    • Improved Daylight Saving Time (DST): Daylight-saving-time support is updated for the Aysen region in Chile to follow the government's 2025 change.
    • Improved OS Security: A new %systemdrive%\inetpub folder is created on the device. Do not delete it, whether or not IIS is enabled.
    • Improved Kerberos Authentication: Kerberos authentication gains protections that might cause Event ID 45 events to be logged on domain controllers.

    Read update Source: Microsoft

    Build
    17763.7136
    Security
    59 fixed · 5 critical · 1 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5053596

    Exploited NTFS and FAT flaws patched; Citrix issue remains

    Fixes 29 vulnerabilities, including flaws in NTFS and the Fast FAT driver that attackers are exploiting. It also fixes an OpenSSH startup problem; Citrix SRA 2411 can still block installation of the January 2025 update.

    Microsoft says Windows 10 support ended October 14, 2025, and recommends moving to the latest Windows version. Windows 10 Enterprise LTSC 2019 has updates listed through January 9, 2029.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 29 CVEs · 5 changes

    • New GB18030-2022: Support is added for the GB18030-2022 amendment.
    • Improved Daylight saving time (DST): Daylight saving time changes for Paraguay are updated.
    • Improved Temporary files: System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.

    Read update Source: Microsoft

    Build
    17763.7009
    Security
    29 fixed · 2 critical · 5 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5052000

    Storage and WinSock flaws under attack; camera detection fixed

    Attackers are exploiting Windows Storage and WinSock driver flaws. The update also restores USB camera detection and fixes several USB audio problems.

    As of March 31, 2026, this update is no longer available from Microsoft. The page recommends moving devices to the latest Windows version.
    Known issues: 2 open Organizations and IT administrators
    • Citrix
    • Open Secure Shell service

    Key changes 32 CVEs · 7 changes

    • New GB18030-2022: Adds support for the GB18030-2022 amendment.
    • Improved Windows Kernel Vulnerable Driver Blocklist file: Adds drivers at risk of attacks that use vulnerable drivers to the blocklist.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.6893
    Security
    32 fixed · 1 critical · 2 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5050008

    Fixes 112 vulnerabilities (5 critical)

    The update fixes 112 vulnerabilities, including five critical ones and the publicly disclosed Windows Themes flaw CVE-2025-21308. It also expands the blocklist of drivers at risk of BYOVD attacks.

    Check the newer update, KB5058922

    Key changes 112 CVEs · 2 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist includes more drivers that could be used in BYOVD attacks.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Critical CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    17763.6775
    Security
    112 fixed · 5 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5048661

    Exploited CLFS driver flaw addressed; motherboard activation fixed

    The update addresses 46 security vulnerabilities, including an exploited flaw in the Common Log File System Driver, and fixes Windows activation after a motherboard replacement.

    This update has not been available through Microsoft Update Catalog or other release channels since March 31, 2026. Microsoft recommends updating devices to the latest Windows version.

    Key changes 46 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates.
    • Fix Motherboard replacement: Windows activates again after a motherboard replacement.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    17763.6659
    Security
    46 fixed · 9 critical · 1 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5046615

    Exploited Task Scheduler and NTLM flaws addressed; vmswitch fixed

    The update addresses 28 security vulnerabilities, including two that attackers are exploiting, and fixes a vmswitch stop error in a specific virtual-machine setup.

    KB5046615 has not been available from the Microsoft Update Catalog or other release channels since March 31, 2026. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 28 CVEs · 3 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The list of drivers identified as at risk for attacks using vulnerable drivers is expanded.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix vmswitch: A stop error is fixed in a virtual-machine setup using two virtual switches, when one switch uses SR-IOV and the VM uses LBFO teaming.

    Read update Source: Microsoft

    Build
    17763.6532
    Security
    28 vulnerabilities fixed · 2 actively exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5044277

    Exploited MMC and MSHTML flaws addressed; Remote Desktop fixed

    Addresses 55 vulnerabilities, including two exploited flaws, and fixes Remote Desktop disruptions on some Windows Servers. It is no longer available as of March 31, 2026.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 55 CVEs · 3 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix FrameShutdownDelay: The browser no longer ignores the FrameShutdownDelay setting.
    • Fix Remote Desktop (known issue): Some Windows Servers no longer sporadically disrupt Remote Desktop sessions when a legacy Remote Desktop Gateway protocol is in use.

    Read update Source: Microsoft

    Build
    17763.6414
    Security
    55 fixed · 1 critical · 2 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5043050

    Exploited Installer, Mark of the Web and MSHTML flaws closed

    Fixes 30 vulnerabilities, including three exploited Windows flaws and two critical remote-code-execution vulnerabilities. It also addresses AppContainer printing and BitLocker decryption problems.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 30 CVEs · 5 changes

    • Improved Windows Installer: Windows Installer repairs now prompt for your credentials through User Account Control. Automation scripts might need updating, and app...
    • Improved Windows Server 2019: The page notes reports of some devices slowing down, becoming unresponsive, and using high CPU.
    • Improved Dual boot of Windows and Linux: The page notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.

    Read update Source: Microsoft

    Build
    17763.6293
    Security
    30 fixed · 2 critical · 3 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5041578

    Exploited kernel flaws patched; Linux dual-boot failures remain

    Addresses four exploited vulnerabilities and adds protections against vulnerable Linux bootloaders. Some Windows-and-Linux dual-boot devices might fail to start Linux.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 39 CVEs · 9 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The driver blocklist includes more drivers at risk of Bring Your Own Vulnerable Driver attacks.
    • Improved BitLocker: A BitLocker recovery screen might appear when the device starts after the July 9, 2024 update. This is more likely when device encrypti...
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Windows applies SBAT to block vulnerable Linux EFI bootloaders. Older Linux ISO images might not boot after SBAT is applied; contact yo...

    Read update Source: Microsoft

    Build
    17763.6189
    Security
    39 fixed · 2 critical · 4 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5040430

    Exploited MSHTML spoofing flaw patched; update is expired

    Addresses the exploited MSHTML spoofing flaw CVE-2024-38112 and changes BitLocker and other Windows behavior. It is no longer available from Microsoft as of March 31, 2026.

    As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 72 CVEs · 6 changes

    • Improved Windows Local Administrator Password Solution (LAPS): LAPS post-authentication actions occur at restart instead of at the end of the grace period.
    • Improved Remote Authentication Dial-In User Service (RADIUS) protocol: Addresses an issue related to MD5 collisions in the RADIUS protocol.
    • Improved BitLocker: The default Secure Boot validation profile now includes PCR 4 alongside PCR 7 and 11.

    Read update Source: Microsoft

    Build
    17763.6054
    Security
    72 fixed · 1 critical · 1 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5039217

    Exploited Mark of the Web bypass addressed; LSASS issues fixed

    Addresses 28 vulnerabilities, including an exploited Mark of the Web security-feature bypass and a critical MSMQ remote-code-execution flaw. It also fixes two LSASS problems and updates curl.exe.

    As of March 31, 2026, this update is no longer available through Microsoft release channels; Microsoft recommends updating devices to the latest Windows version.

    Key changes 28 CVEs · 5 changes

    • Improved curl.exe: The version of curl.exe included with Windows is now 8.7.1.
    • Improved File Explorer: Files and folders from untrusted locations receive a Mark of the Web tag. Their LastWriteTime timestamp might change, which can affect...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.5936
    Security
    28 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5039705

    English (US) language-pack errors addressed; update expired

    Addresses installation failures tied to the English (United States) language pack, but it has been unavailable since March 31, 2026.

    KB5039705 has been unavailable from the Microsoft Update Catalog and other release channels since March 31, 2026. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates.
    • Fix English (United States) language pack: The update addresses installation failures that can occur with the English (United States) language pack.

    Read update Source: Microsoft

    Build
    17763.5830
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5037765

    Exploited MSHTML and DWM flaws; IE mode and VPN fixes

    It fixes 45 security vulnerabilities, including exploited flaws in MSHTML and DWM, and addresses IE mode and VPN failures. Installation might fail on some devices; KB5039705 resolves that issue.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 45 CVEs · 8 changes

    • Improved DNS Server: DNS validation uses a default limit of 1,000 computations, which DNS Server administrators can change.
    • Improved Windows Kernel Vulnerable Driver Blocklist: The vulnerable driver blocklist gains drivers that could be used in BYOVD attacks.
    • Improved Servicing stack: Includes quality improvements to the component that installs Windows updates.

    Read update Source: Microsoft

    Build
    17763.5820
    Security
    45 vulnerabilities fixed · 2 actively exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5036896

    Exploited proxy-driver spoofing flaw addressed; touch keyboard fixed

    Addresses 60 vulnerabilities, including the exploited and publicly disclosed CVE-2024-26234 proxy-driver spoofing flaw, and fixes a touch keyboard opening problem. It is no longer available from Microsoft since March 31, 2026.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 60 CVEs · 9 changes

    • Improved Daylight saving time: Time changes for daylight saving time in Palestine are supported.
    • Improved Daylight saving time: Time changes for daylight saving time in Kazakhstan are supported.
    • Improved Daylight saving time: Time changes for daylight saving time in Samoa are supported.

    Read update Source: Microsoft

    Build
    17763.5696
    Security
    60 vulnerabilities fixed · 1 actively exploited
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5037425

    Stops LSASS memory leaks that could restart domain controllers

    Addresses an LSASS memory leak that could cause domain controllers to stop responding and restart unexpectedly while handling Kerberos requests.

    Check the newer update, KB5039217

    Key changes 2 changes

    • Improved Servicing stack: Includes quality improvements to the component that installs Windows updates.
    • Fix Local Security Authority Subsystem Service (LSASS): Addresses a memory leak that might cause domain controllers to stop responding and restart unexpectedly while processing Kerberos authe...

    Read update Source: Microsoft

    Build
    17763.5579
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5035849

    DC memory leak risk flagged; touch keyboard issue fixed

    Fixes a touch-keyboard opening problem and changes certificate-mapping support for some Active Directory domains. LSASS might leak memory on domain controllers after installation; KB5037425 addresses the issue.

    Key changes 34 CVEs · 3 changes

    • Improved Active Directory domains: Active Directory domains hosting MDM providers can transition from Compatibility mode to strong certificate mapping Enforcement mode.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Touch keyboard: The touch keyboard opens when it sometimes would not open.

    Read update Source: Microsoft

    Build
    17763.5576
    Security
    34 fixed · 2 critical
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5034768

    Exploited kernel, SmartScreen and shortcut flaws addressed

    The update addresses 38 vulnerabilities, including three exploited flaws in the Windows kernel, SmartScreen and internet shortcut files, plus one critical flaw in Windows PGM.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 38 CVEs · 9 changes

    • Improved Windows nesting limit: The Windows nesting limit can now be set as low as 35 instead of 50.
    • Improved UEFI Secure Boot: UEFI Secure Boot systems can opt to add a renewed signing certificate.
    • Improved Windows Kernel Vulnerable Driver Blocklist: The vulnerable driver blocklist gets its quarterly update, adding drivers at risk of being used in BYOVD attacks.

    Read update Source: Microsoft

    Build
    17763.5458
    Security
    38 fixed · 1 critical · 3 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5034127

    IE mode hangs and multi-monitor touch input issues addressed

    Addresses problems that can make IE mode stop responding and touchscreens work improperly with multiple monitors. As of March 31, 2026, it is no longer available through Microsoft release channels.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 32 CVEs · 13 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install Microsoft updates.
    • Fix IE mode: IE mode can stop responding when you press the left arrow key in an empty text box. This update addresses the issue when caret browsing...
    • Fix Touchscreens: This update addresses touchscreen problems that occur when you use more than one monitor.

    Read update Source: Microsoft

    Build
    17763.5329
    Security
    32 fixed · 2 critical