Skip to the content
The Update Bureau

Windows 10

Windows 10 updates

All published releases for Windows 10, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

14 active known issues →

Windows 10 updates

  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5094122

    Secure Boot reaches more devices; folder icons may disappear

    More devices can qualify for Secure Boot certificate updates, while stricter folder handling may hide custom icons or names. Support ends October 13, 2026.

    Check the newer update, KB5099535
    Windows 10 Enterprise LTSB 2016 and IoT Enterprise 2016 LTSB support ends October 13, 2026.

    Key changes 73 CVEs · 3 changes

    • New Secure Boot: A new policy can limit the Secure Boot service data Windows sends to Microsoft.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates after showing enough successful update signals.
    • Improved Folder customization: Custom folder icons or localized folder names might be missing for content from downloaded or remote locations. Folder access is not af...

    Read update Source: Microsoft

    Build
    14393.9234
    Security
    73 fixed · 11 critical
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5087544

    Secure Boot certificates begin expiring; Remote Desktop warning fixed

    Secure Boot certificates have started expiring in June 2026, which might affect secure booting on some devices if they are not updated in time; Microsoft recommends reviewing its preparation guidance. The update also fixes a Remote Desktop warning display issue.

    Check the newer update, KB5094127
    Windows 10 Enterprise LTSC 2021 support ends January 12, 2027. Windows 10, version 22H2, and version 21H2 have already reached their general support end dates; 22H2 updates are for ESU devices.

    Key changes 54 CVEs · 5 changes

    • New Secure Boot: Eligible devices get a SecureBoot folder with sample scripts for organizations that manage updates across a device fleet.
    • Improved Secure Boot: Windows Security can report Secure Boot status dynamically.
    • Improved Secure Boot: More eligible devices can be identified for automatic Secure Boot certificate updates, which continue to roll out in phases.

    Read update Source: Microsoft

    Builds
    19044.7291 · 19045.7291
    Security
    54 fixed · 3 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5087538

    Secure Boot certificate coverage expands; sign-in errors fixed

    The update expands Secure Boot certificate targeting and fixes Microsoft-account sign-in errors and a Remote Desktop display warning. Secure Boot certificates have started expiring in June 2026, so Microsoft recommends preparing devices.

    Check the newer update, KB5094123
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing its guidance and preparing certificate updates in advance.

    Key changes 52 CVEs · 6 changes

    • New Secure Boot: Windows Security can report Secure Boot states dynamically.
    • New Secure Boot: Eligible devices get a SecureBoot folder containing sample scripts for checking certificate status and automating deployment.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically after demonstrating sufficient successful update signals.

    Read update Source: Microsoft

    Build
    17763.8755
    Security
    52 fixed · 3 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5087537

    Remote Desktop warnings and Microsoft account sign-in fixed

    Fixes a Remote Desktop warning display issue and a Microsoft account sign-in error, and addresses 44 vulnerabilities, including three Critical ones.

    Check the newer update, KB5094122
    Support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB ends October 13, 2026. Secure Boot certificates used by most Windows devices have started expiring in June 2026; Microsoft recommends preparing certificate updates in advance.

    Key changes 44 CVEs · 4 changes

    • New Secure Boot: Eligible devices get a SecureBoot folder containing example scripts for checking and managing Secure Boot certificate updates.
    • Improved Daylight Savings Time (DST): Daylight-saving-time support is updated for the Arab Republic of Egypt to reflect its 2023 government change order.
    • Fix Remote Desktop security warnings: The Remote Desktop Connection security warning dialog no longer might render incorrectly across monitors with different display scaling...

    Read update Source: Microsoft

    Build
    14393.9140
    Security
    44 fixed · 3 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5091573

    Secure Boot certificates face expiration; Azure checks updated

    Includes updated Azure-hosted device certificate checks. Microsoft also warns that Secure Boot certificates have started expiring and recommends preparing in advance.

    Check the newer update, KB5087538
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Personal and business device owners should review the guidance and update certificates in advance to avoid possible boot disruption.

    Key changes 1 change

    • Improved Servicing stack update (SSU): The included SSU improves checks that determine whether a device is hosted on Azure.

    Read update Source: Microsoft

    Build
    17763.8647
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band

    KB5091572

    Remote Desktop security warnings display correctly again

    The update adds a resolution for incorrectly displayed Remote Desktop security warnings. It is available only from the Update Catalog and requires the latest servicing stack update.

    Check the newer update, KB5087537
    Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support on October 13, 2026.

    Key changes 1 change

    • Fix Remote Desktop: The KB page adds a resolution for Remote Desktop security warnings that might not display correctly.

    Read update Source: Microsoft

    Build
    14393.9062
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5082200

    Critical IKE and TCP/IP remote-code flaws patched

    The update fixes 106 security flaws, including two critical remote-code execution vulnerabilities in IKE and TCP/IP. It also fixes Microsoft-account sign-in problems and adds safer handling of Remote Desktop files.

    Check the newer update, KB5087544
    Windows 10 Enterprise LTSC 2021 support ends January 12, 2027.

    Key changes 106 CVEs · 13 changes

    • New Secure Boot: The Windows Security app can report Secure Boot status dynamically and show alerts. This is disabled by default on commercial devices a...
    • New Secure Boot: The Windows Security app can report Secure Boot status dynamically and show alerts. This is disabled by default on commercial devices a...
    • Improved Remote Desktop: When you open an .rdp file, Remote Desktop shows the requested connection settings before connecting, with each setting off by default....

    Read update Source: Microsoft

    Builds
    19044.7184 · 19045.7184
    Security
    106 fixed · 2 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5082123

    Critical IKE and TCP/IP flaws patched; .rdp files get safer prompts

    Fixes 99 vulnerabilities, including two critical remote code execution flaws in IKE service extensions and TCP/IP. It also adds security checks when opening .rdp files and changes Secure Boot reporting.

    Check the newer update, KB5091573

    Key changes 99 CVEs · 5 changes

    • New Secure Boot: The Windows Security app can report Secure Boot status. These status alerts are off by default on commercial devices and servers.
    • Improved Remote Desktop: Before connecting from an .rdp file, Remote Desktop shows the requested connection settings, with each setting turned off by default. A...
    • Improved Secure Boot: More eligible devices can automatically receive new Secure Boot certificates, with a controlled rollout based on successful update sign...

    Read update Source: Microsoft

    Build
    17763.8644
    Security
    99 fixed · 2 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5082198

    Critical IKE and TCP/IP remote-code flaws patched

    Fixes 79 vulnerabilities, including two critical remote-code execution flaws in Windows IKE Service Extensions and TCP/IP. It also expands the phased rollout of new Secure Boot certificates.

    Check the newer update, KB5091572
    Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support on October 13, 2026.

    Key changes 79 CVEs · 3 changes

    • Improved Remote Desktop: When you open an .rdp file, Remote Desktop shows its requested connection settings before connecting. Each setting is off by default, a...
    • Improved Secure Boot: More eligible devices may automatically receive new Secure Boot certificates, but only after successful update signals.
    • Fix Windows Configuration System (WinCS): Secure Boot can be enabled through WinCS again when its components are present.

    Read update Source: Microsoft

    Build
    14393.9060
    Security
    79 fixed · 2 critical
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5078885

    Secure Boot certificate rollout expands; File History handles more names

    Addresses 43 Important-severity vulnerabilities and improves Secure Boot certificate targeting, File History backups, and graphics stability. Secure Boot certificates have started expiring in June 2026, so review Microsoft's guidance.

    Check the newer update, KB5082200
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to help avoid disruption.

    Key changes 43 CVEs · 10 changes

    • New Windows System Image Manager: A warning helps you check that a selected catalog file comes from a trusted source.
    • New Windows System Image Manager: A warning helps you check that a selected catalog file comes from a trusted source.
    • Improved File History: File History can back up new files with names containing certain Chinese and Private Use Area characters.

    Read update Source: Microsoft

    Builds
    19044.7058 · 19045.7058
    Security
    43 vulnerabilities fixed
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5078752

    Secure Boot certificate rollout expands; File History backs up more names

    Secure Boot certificates have started expiring in June 2026, and this update expands phased targeting for devices eligible to receive replacements. It also adds a trusted-source warning in Windows System Image Manager and lets File History back up more filenames.

    Check the newer update, KB5082123

    Key changes 40 CVEs · 3 changes

    • New Windows System Image Manager: A warning helps you check that a selected catalog file comes from a trusted source.
    • Improved File History: File History can back up new files with names containing some Chinese and Private Use Area characters.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically through a phased rollout.

    Read update Source: Microsoft

    Build
    17763.8511
    Security
    40 vulnerabilities fixed
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5078938

    Secure Boot certificate targeting expands; catalog warning added

    Secure Boot certificate targeting now covers more eligible devices, and Windows System Image Manager warns users to confirm a catalog is trusted. The update addresses 35 Important vulnerabilities.

    Check the newer update, KB5082198
    Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support on October 13, 2026.

    Key changes 35 CVEs · 2 changes

    • New Windows System Image Manager: A warning dialog helps you confirm that a selected catalog file comes from a trusted source.
    • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, through a controlled, phased rollout.
    • CVSS 8.8 CVE-2026-23669: RPC Runtime Library Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8957
    Security
    35 vulnerabilities fixed
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5075912

    Exploited Shell and MSHTML flaws patched

    Fixes 24 security vulnerabilities, including five that attackers are exploiting, and resolves a restart-on-shutdown issue affecting some Secure Launch PCs with Virtual Secure Mode enabled.

    Check the newer update, KB5078885
    Support for Windows 10 Enterprise LTSC 2021, version 21H2, ends on January 12, 2027.

    Key changes 24 CVEs · 6 changes

    • Improved Fonts: Chinese fonts are updated to meet GB18030-2022A compliance.
    • Improved Secure Boot: Devices receive new Secure Boot certificates only after showing sufficient successful update signals, supporting a phased rollout.
    • Improved Servicing stack: The update process better checks whether a device is hosted on Azure.

    Read update Source: Microsoft

    Builds
    19044.6937 · 19045.6937
    Security
    24 vulnerabilities fixed · 5 actively exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5075904

    Exploited Shell and MSHTML bypasses patched; shutdown issue fixed

    Fixes 22 vulnerabilities, including five that are being exploited, and fixes a shutdown problem on some Secure Launch-capable PCs with Virtual Secure Mode enabled.

    Check the newer update, KB5078752

    Key changes 22 CVEs · 5 changes

    • Improved Fonts: Chinese fonts are updated to meet GB18030-2022A compliance.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix OS Security: Some Secure Launch-capable PCs with Virtual Secure Mode enabled can shut down or hibernate again instead of restarting.

    Read update Source: Microsoft

    Build
    17763.8389
    Security
    22 vulnerabilities fixed · 5 actively exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5075999

    Exploited Shell and MSHTML flaws patched; GPU stability fixed

    The update fixes 20 vulnerabilities, including two publicly disclosed and exploited Shell and MSHTML security bypasses, and resolves a stability issue on some GPU configurations.

    Check the newer update, KB5078938
    Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support October 13, 2026. Windows Server 2016 reaches end of support January 12, 2027; free updates, technical assistance, and security fixes end on these dates.

    Key changes 20 CVEs · 1 change

    • Fix Graphics: A stability issue affecting some GPU configurations is fixed.
    • Exploited CVE-2026-21510: Windows Shell Security Feature Bypass Vulnerability
    • Exploited CVE-2026-21513: MSHTML Framework Security Feature Bypass Vulnerability

    Read update Source: Microsoft

    Build
    14393.8868
    Security
    20 vulnerabilities fixed · 5 actively exploited
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band

    KB5078129

    Cloud-file errors and Outlook hangs fixed

    Fixes errors affecting some apps that open or save cloud-stored files, including Outlook hangs in certain configurations. Some PCs with Virtual Secure Mode enabled might still restart instead of shutting down; KB5075912 resolves that issue.

    Check the newer update, KB5075912
    Windows 10 Enterprise LTSC 2021, version 21H2, reaches the end of updates on January 12, 2027.

    Key changes 2 changes

    • Improved Servicing stack: The update improves checks used to verify whether a device is hosted on Azure, supporting the installation of future updates on Azure-h...
    • Fix File System: Some applications no longer become unresponsive or encounter errors when opening files from or saving files to cloud storage. In certai...

    Read update Source: Microsoft

    Builds
    19044.6812 · 19045.6812
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5078131

    Cloud-file errors and Outlook hangs fixed

    Fixes file access errors in cloud storage and hangs in some Outlook setups that store PST files on OneDrive. A restart is required.

    Check the newer update, KB5075904
    Secure Boot certificates began expiring in June 2026. Certain personal and business devices could be unable to boot securely if their certificates are not updated in time; review Microsoft's guidance and prepare in advance.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix File System: Some applications can open and save files in cloud storage again. In certain Outlook setups, email no longer hangs or goes missing beca...

    Read update Source: Microsoft

    Build
    17763.8281
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band

    KB5077796

    Remote Desktop sign-in failures fixed; cloud app hangs remain

    Remote Desktop sign-in failures are fixed, but some apps may still hang when opening or saving cloud files. The update also improves Azure checks in the servicing stack.

    Check the newer update, KB5078129
    Windows 10 Enterprise LTSC 2021 updates end on January 12, 2027.
    Known issues: 1 open
    • Apps might become unresponsive when saving files to cloud-based storage

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates improves its checks for devices hosted on Azure.
    • Fix Remote Desktop: Some users can sign in to Remote Desktop again after failures with the Windows App and other Remote Desktop apps.

    Read update Source: Microsoft

    Builds
    19044.6811 · 19045.6811
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5077795

    Remote Desktop sign-ins fixed; cloud-file hangs remain possible

    Some users can sign in over Remote Desktop again. Apps may still hang when opening or saving cloud files, and the update also improves the servicing stack.

    Check the newer update, KB5078131
    Secure Boot certificates have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid possible boot problems.
    Known issues: 1 open
    • Apps might become unresponsive when saving files to cloud-based storage

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Remote Desktop: Some users can sign in over Remote Desktop again.

    Read update Source: Microsoft

    Build
    17763.8280
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5073724

    Exploited Desktop Window Manager flaw patched; modem drivers removed

    The update fixes 73 security vulnerabilities, including an actively exploited Desktop Window Manager flaw, and removes several modem drivers. Some Windows 10 devices might also have trouble saving files to cloud storage.

    Check the newer update, KB5077796
    Secure Boot certificates used by most Windows devices began expiring in June 2026. Certain personal and business devices might be affected if their certificates are not updated; Microsoft recommends reviewing its preparation guidance.
    Known issues: 1 open
    • Apps might become unresponsive when saving files to cloud-based storage

    Key changes 73 CVEs · 5 changes

    • Improved Credentials autofill: In certain remote support and automated sign-in workflows, credential dialogs ignore virtual keyboard input from remote desktop or scre...
    • Improved Secure Boot: Eligible devices receive new Secure Boot certificates in phases, after showing enough successful update signals.
    • Improved Servicing stack: Update installation improves verification for devices hosted on Azure.

    Read update Source: Microsoft

    Builds
    19044.6809 · 19045.6809
    Security
    73 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5073723

    Exploited Desktop Window Manager flaw gets a security fix

    An exploited Desktop Window Manager flaw is patched. Some apps can no longer autofill credentials during remote support or automated sign-in workflows.

    Check the newer update, KB5077795
    Known issues: 1 open
    • Apps might become unresponsive when saving files to cloud-based storage

    Key changes 70 CVEs · 4 changes

    • Improved Credentials autofill: Some apps can no longer autofill credentials during remote support or automated sign-in.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix WinSqlite3.dll: Security software is less likely to flag the Windows WinSqlite3.dll component as vulnerable.

    Read update Source: Microsoft

    Build
    17763.8276
    Security
    70 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5073722

    Exploited Desktop Window Manager flaw patched; modem drivers removed

    The update fixes 51 vulnerabilities, including an exploited Desktop Window Manager information-disclosure flaw, and removes four modem drivers, disabling hardware that depends on them.

    Check the newer update, KB5075999
    Secure Boot certificates have started expiring in June 2026; certain personal and business devices might not boot securely if certificates are not updated in time. The page recommends reviewing the guidance and updating certificates in advance.

    Key changes 51 CVEs · 3 changes

    • New Credentials autofill: Credential dialogs do not accept virtual keyboard input from remote desktop or screen-sharing tools or apps.
    • Fix WinSqlite3.dll: The Windows component WinSqlite3.dll is updated because some security software might have detected it as vulnerable.
    • Removed Drivers: Modem hardware that relies on the removed drivers will no longer work in Windows.

    Read update Source: Microsoft

    Build
    14393.8783
    Security
    51 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band

    KB5074976

    Message Queuing disruption fixed for managed environments

    Fixes Message Queuing problems introduced by the December 9 updates, including under load in clustered environments. It is available only from the Microsoft Update Catalog.

    Check the newer update, KB5073724
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing its guidance and updating certificates in advance.

    Key changes 3 changes

    • Improved Servicing stack: The component that installs Windows updates can better check whether a device is hosted on Azure.
    • Fix Message queuing (MSMQ): Message Queuing works again after problems that followed the December 9, 2025 updates. Personal devices running Windows Home or Pro are...
    • Fix Message queuing (MSMQ): Message Queuing works again after problems that followed the December 9, 2025 updates. Personal devices running Windows Home or Pro are...

    Read update Source: Microsoft

    Builds
    19044.6693 · 19045.6693
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5074975

    Message Queuing disruption fixed for managed environments

    The update fixes Message Queuing problems that followed the December 9, 2025 updates, an issue that primarily affected enterprise and managed IT environments.

    Check the newer update, KB5073723
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and prepare to update certificates to avoid possible boot disruption.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Message queuing (MSMQ) (known issue): Message Queuing problems following the December 9, 2025 updates are fixed. The issue primarily affected enterprise and managed IT envir...

    Read update Source: Microsoft

    Build
    17763.8148
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band

    KB5074974

    Restores Message Queuing after the December updates

    Message Queuing issues caused by the December 9 updates are fixed, including problems in clustered environments under load. This out-of-band update is available only from the Microsoft Update Catalog.

    Check the newer update, KB5073722
    Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support on October 13, 2026.

    Key changes 1 change

    • Fix Message queuing (MSMQ) (known issue): Message Queuing issues that appeared after the December 9 updates are fixed. They included inactive queues, resource errors, and proble...

    Read update Source: Microsoft

    Build
    14393.8692
    Restart
    Required