Skip to the content
The Update Bureau

Windows 10

Windows 10 updates

All published releases for Windows 10, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

14 active known issues →

Windows 10 updates

  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5071546

    PowerShell adds a warning before running web content

    The update adds a security warning and confirmation prompt to PowerShell 5.1’s Invoke-WebRequest command. It also includes a fix for an actively exploited Cloud Files driver vulnerability.

    Check the newer update, KB5074976
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing its guidance and updating certificates in advance.

    Key changes 28 CVEs · 3 changes

    • Improved PowerShell 5.1: PowerShell now warns about script execution risk and asks before continuing when you use Invoke-WebRequest.
    • Improved PowerShell 5.1: PowerShell now warns about script execution risk and asks before continuing when you use Invoke-WebRequest.
    • Improved Servicing stack: Azure-hosted devices get improved verification to help future updates install.

    Read update Source: Microsoft

    Builds
    19044.6691 · 19045.6691
    Security
    28 vulnerabilities fixed · 1 actively exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5071544

    Exploited Cloud Files flaw fixed; PowerShell adds a script warning

    Fixes 26 vulnerabilities, including an exploited Cloud Files driver flaw and a publicly disclosed PowerShell vulnerability. It also adds a web-script warning to PowerShell 5.1 and retires the taskbar People icon.

    Check the newer update, KB5074975
    Secure Boot certificates used by most Windows devices start expiring in June 2026. Microsoft recommends reviewing its guidance and preparing to update certificates.

    Key changes 26 CVEs · 3 changes

    • Improved PowerShell 5.1: Invoke-WebRequest now asks for confirmation and warns that processing web content can run scripts. You can continue or cancel.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Removed People app: The People icon on the taskbar no longer responds because this feature is being deprecated in Windows 10, version 1809.

    Read update Source: Microsoft

    Build
    17763.8146
    Security
    26 vulnerabilities fixed · 1 actively exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5071543

    PowerShell web requests warn before running scripts

    PowerShell 5.1 now warns and asks for confirmation before `Invoke-WebRequest` can run web content, adding a safeguard against script execution risks. The update also addresses 15 Important vulnerabilities.

    Check the newer update, KB5074974
    Windows 10 Enterprise LTSB 2016 reaches end of support on October 13, 2026. Microsoft will no longer provide free updates, technical assistance, or security fixes after that date.

    Key changes 15 CVEs · 1 change

    • Improved PowerShell 5.1: Invoke-WebRequest warns about script execution risk and asks for confirmation before continuing.
    • CVSS 8.8 CVE-2025-62549: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
    • CVSS 7.8 CVE-2025-54100: PowerShell Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8688
    Security
    15 vulnerabilities fixed
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5068781

    Closes exploited kernel flaw and fixes false support warning

    Closes 33 vulnerabilities, including the actively exploited Windows Kernel flaw CVE-2025-62215, and fixes a false end-of-support warning. Secure Boot certificates begin expiring in June 2026; Microsoft recommends reviewing its guidance and updating certificates in advance.

    Check the newer update, KB5071546
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to help avoid boot-security disruption.

    Key changes 33 CVEs · 3 changes

    • Improved Servicing stack: The update improves how Azure-hosted devices are identified when installing updates.
    • Fix Update (known issue): On Windows 10, version 22H2 ESU devices, this update fixes the message that might incorrectly say Windows has reached the end of suppor...
    • Fix Update (known issue): On Windows 10 Enterprise LTSC 2021 devices, this update fixes the message that might incorrectly say Windows has reached the end of sup...

    Read update Source: Microsoft

    Builds
    19044.6575 · 19045.6575
    Security
    33 fixed · 2 critical · 1 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Out-of-band update
    Out-of-band

    KB5071959

    Consumer ESU enrollment failures addressed

    The update addresses failures in the Windows 10 Consumer ESU enrollment wizard and includes the October 14, 2025 security fixes and improvements. Secure Boot certificates have started expiring in June 2026, so affected devices should be prepared in advance.

    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Certain personal and business devices could lose secure boot capability if certificates are not updated in time; review the guidance and prepare in advance.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix ESU enrollment: Consumer devices should be able to complete enrollment in the Windows 10 Consumer ESU program when the enrollment wizard previously fai...

    Read update Source: Microsoft

    Build
    19045.6466
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5068791

    Exploited kernel flaw patched; unexpected UAC prompts addressed

    Patches an actively exploited Windows kernel flaw and addresses unexpected User Account Control prompts in some apps, including Autodesk AutoCAD.

    Check the newer update, KB5071544
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. The page recommends reviewing the guidance and taking action to update certificates in advance to avoid possible secure-boot disruption.

    Key changes 33 CVEs · 3 changes

    • Improved Internal Windows OS: Includes miscellaneous security improvements to internal Windows functions; the page does not list specific issues.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix App compatibility (known issue): The update addresses unexpected User Account Control prompts for some apps, including Autodesk AutoCAD.

    Read update Source: Microsoft

    Build
    17763.8027
    Security
    33 fixed · 2 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5068864

    Critical GDI+ flaw fixed; unexpected app prompts addressed

    Fixes 25 security vulnerabilities, including the critical GDI+ remote-code execution flaw CVE-2025-60724. It also addresses unexpected UAC prompts for some apps, including Autodesk AutoCAD.

    Check the newer update, KB5071543
    Windows 10 Enterprise LTSB 2016 reaches end of support on October 13, 2026. Microsoft recommends reviewing its Extended Security Updates availability.

    Key changes 25 CVEs · 2 changes

    • Improved Internal Windows OS: The update includes miscellaneous security improvements to internal Windows OS functionality.
    • Fix App compatibility (known issue): Unexpected UAC prompts for some apps, including Autodesk AutoCAD, are addressed.
    • Critical CVE-2025-60724: Windows GDI+ Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8594
    Security
    25 fixed · 1 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5070883

    Version 1809 moves to build 17763.7922

    An out-of-band cumulative update brings Windows 10 Enterprise LTSC 2019, version 1809, to build 17763.7922. The available source does not describe specific fixes or other changes.

    Key security notes

    • Other The out-of-band cumulative update is for Windows 10 Enterprise LTSC 2019, version 1809, and brings the build to 17763.7922.

    Read update Source: Microsoft

    Build
    17763.7922
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band

    KB5070882

    Version 1607 gets an out-of-band update

    Moves Enterprise LTSB 2016 to build 14393.8524. Support for version 1607 ends October 13, 2026.

    Support for version 1607 ends October 13, 2026.

    Key security notes

    • Other The cumulative update is an out-of-band release and updates version 1607 to build 14393.8524.

    Read update Source: Microsoft

    Build
    14393.8524
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5066791

    Exploited modem and Remote Access flaws patched

    The update fixes 99 vulnerabilities, including 2 critical ones and 3 exploited flaws affecting the modem driver, IGEL OS Secure Boot, and Remote Access Connection Manager. Windows 10 support ended on October 14, 2025.

    Check the newer update, KB5068781
    Windows 10 support ended on October 14, 2025. Microsoft recommends moving to Windows 11.

    Key changes 99 CVEs · 7 changes

    • New Licensing: Azure-hosted devices get improved environment validation from an updated certificate chain in the servicing stack.
    • Improved Cryptography: RSA-based smart card certificates now use Key Storage Provider instead of Cryptographic Service Provider. Smart card authentication mig...
    • Improved File Explorer: File Explorer automatically disables previews for files downloaded from the internet, helping prevent a vulnerability when previewing p...

    Read update Source: Microsoft

    Builds
    19044.6456 · 19045.6456
    Security
    99 fixed · 2 critical · 3 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5066586

    Exploited modem and Remote Access flaws fixed; file previews blocked

    Addresses 92 vulnerabilities, including flaws reported as exploited, and changes File Explorer so it disables previews of files downloaded from the internet. Review the Secure Boot certificate guidance and prepare for upcoming expirations.

    Check the newer update, KB5068791
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing the guidance and preparing to update certificates in advance to avoid possible boot problems.

    Key changes 92 CVEs · 7 changes

    • Improved Cryptography: RSA-based smart card certificates now require a different storage provider; some smart card authentication might have problems as a res...
    • Improved File Explorer: File Explorer automatically disables previews for files downloaded from the internet, helping prevent a vulnerability when potentially...
    • Improved Servicing stack: The update includes a servicing stack improvement intended to make the Windows update installation process more reliable.

    Read update Source: Microsoft

    Build
    17763.7919
    Security
    92 fixed · 2 critical · 3 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5066836

    Closes an exploited Remote Access Manager flaw; disables file previews

    Patches an exploited Windows Remote Access Connection Manager vulnerability and changes how File Explorer previews downloaded files. It also fixes long-running remote command timeouts and removes support for a fax modem driver.

    Check the newer update, KB5068864
    The KB applies to Windows 10 IoT Enterprise 2016 LTSB. The dossier lists October 13, 2026 as the end of updates for this edition; the KB also states that Windows 10 support ended on October 14, 2025.

    Key changes 71 CVEs · 4 changes

    • Improved Cryptography: RSA-based smart card certificates must use Key Storage Provider instead of Cryptographic Service Provider, which might affect smart car...
    • Improved File Explorer: File Explorer automatically disables previews for files downloaded from the internet. The KB links to instructions for unblocking files...
    • Fix Windows Remote Management (WinRM): PowerShell remote commands no longer time out after running for 600 seconds.

    Read update Source: Microsoft

    Build
    14393.8519
    Security
    71 fixed · 1 critical · 3 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5066198

    SMBv1 file sharing and Autopilot enrollment issues fixed

    Fixes SMBv1 file-sharing connection problems and an Autopilot enrollment page that could fail to load. Windows 10 support ended October 14, 2025.

    Check the newer update, KB5066791
    Windows 10 support ended October 14, 2025. Microsoft recommends moving to Windows 11.

    Key changes 3 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements intended to make the update process more reliable.
    • Fix SMBv1 protocol connectivity: Connections to shared files and folders work again when using SMBv1 over NetBIOS over TCP/IP.
    • Fix Autopilot Enrollment Status Page (ESP): The Enrollment Status Page loads during Autopilot setup instead of failing to load during the Out-of-Box Experience.

    Read update Source: Microsoft

    Build
    19045.6396
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5065429

    SMB hardening support added; SMBv1 connections may fail

    Adds support for SMB hardening and fixes problems with MSI repairs and NDI streaming. SMBv1 file sharing might fail until a later update is installed.

    Check the newer update, KB5066198
    Windows 10 support ended on October 14, 2025. Microsoft recommends moving to Windows 11; Secure Boot certificates also started expiring in June 2026.
    Known issues: 1 open
    • SMBv1 protocol connectivity

    Key changes 49 CVEs · 4 changes

    • New File Server: IT administrators can deploy measures that harden SMB file sharing.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix App compatibility (known issue): Some non-admin users see fewer unexpected permission prompts during MSI app installs or repairs. The change can help apps such as Offic...

    Read update Source: Microsoft

    Builds
    19044.6332 · 19045.6332
    Security
    49 fixed · 8 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5065428

    Critical Hyper-V flaws patched; Chinese IME boxes fixed

    Fixes 42 security vulnerabilities, including 7 rated Critical, and fixes empty boxes in the Chinese Simplified IME. It also narrows unexpected UAC prompts during some MSI repairs.

    Check the newer update, KB5066586
    The KB's October 14, 2025 Windows 10 end-of-support notice does not mean the LTSC editions covered here stop receiving updates then; version 1809 LTSC editions are listed with updates through January 9, 2029.

    Key changes 42 CVEs · 4 changes

    • New File Server: IT administrators can check whether devices or software might be incompatible with SMB Server signing and SMB Server EPA before deployi...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements intended to help the update process.
    • Fix Input and Composition: Chinese Simplified IME extended characters that showed as empty boxes display correctly.

    Read update Source: Microsoft

    Build
    17763.7792
    Security
    42 fixed · 7 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5065427

    Critical Hyper-V flaw patched; MSI repair prompts reduced

    Fixes five critical security flaws, including a Hyper-V remote code execution vulnerability, and reduces unexpected UAC prompts during some MSI repairs.

    Check the newer update, KB5066836

    Key changes 35 CVEs · 2 changes

    • New File Server: IT teams can check whether devices and software are compatible with SMB Server security measures before deploying them.
    • Fix App compatibility (known issue): Non-admin users get fewer unexpected UAC prompts when certain apps run installation or repair actions.
    • Critical CVE-2025-54918: Windows NTLM Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14393.8422
    Security
    35 fixed · 5 critical
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5063842

    ESU eligibility check and organizational backup arrive

    Adds an opt-in way for eligible organizations to check Windows 10 ESU eligibility and makes Windows Backup for Organizations generally available. It also fixes several input, search, and app-approval problems.

    Check the newer update, KB5065429
    Windows 10 support ended October 14, 2025. Microsoft recommends moving to Windows 11.

    Key changes 11 changes

    • New Licensing: Administrators can opt in to allow outbound network traffic so eligible users can check whether they qualify for Extended Security Upda...
    • New Windows Backup for Organizations: Windows Backup for Organizations is generally available for organizational device backup and restore.
    • Improved Mobile Operator Profiles: Country and operator settings profiles are updated.

    Read update Source: Microsoft

    Build
    19045.6282
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band

    KB5066188

    Reset and recovery failures addressed

    Addresses failures when resetting or recovering Windows 10 devices introduced by the August security update. Install it if you encountered the problem or plan to use the affected recovery methods.

    Check the newer update, KB5063842
    Support for Windows 10 ended on October 14, 2025. Microsoft recommends moving to Windows 11; after that date, Windows 10 no longer receives free updates from Windows Update, technical assistance, or security fixes.

    Key changes 3 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Reset and recovery: Addresses failures when resetting or recovering a Windows 10 version 21H2 device using the listed recovery methods.
    • Fix Reset and recovery: Addresses failures when resetting or recovering a Windows 10 version 22H2 device using the listed recovery methods.

    Read update Source: Microsoft

    Builds
    19044.6218 · 19045.6218
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5066187

    Reset and recovery failures addressed

    Addresses failures when resetting or recovering Windows 10 version 1809 devices after the August security update. It is intended for affected devices and is available from the Update Catalog.

    Check the newer update, KB5065428

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Fix for reset and recovery issue: Addresses failures when resetting or recovering the device using the Windows recovery options or RemoteWipe CSP.

    Read update Source: Microsoft

    Build
    17763.7683
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5063709

    Critical GDI+ flaw patched; reset and recovery issue resolved

    Addresses 44 vulnerabilities, including three critical flaws, and resolves a reset and recovery failure. The critical flaws affect GDI+, Microsoft Message Queuing, and Windows NTLM.

    Check the newer update, KB5066188
    Support for Windows 10 ended on October 14, 2025. Microsoft recommends moving to Windows 11.

    Key changes 44 CVEs · 5 changes

    • Improved Internal Windows OS: Internal Windows functionality receives miscellaneous security improvements.
    • Improved Windows 10, version 22H2: Version 22H2 includes the improvements from the supported version 21H2 editions.
    • Improved Internal Windows OS: Internal Windows functionality receives miscellaneous security improvements.

    Read update Source: Microsoft

    Builds
    19044.6216 · 19045.6216
    Security
    44 fixed · 3 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5063877

    GDI+ remote-code flaw patched; Changjie word selection restored

    Fixes 43 vulnerabilities, including three critical flaws, and restores word selection in the Microsoft Changjie Input Method.

    Check the newer update, KB5066187
    The page says Windows 10 support ended on October 14, 2025, and recommends moving to Windows 11. It says free Windows Update updates, technical assistance, and security fixes are no longer provided after that date.

    Key changes 43 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Input and Composition: Users of the Microsoft Changjie Input Method can select words again after a recent update prevented it.
    • Critical CVE-2025-53766: GDI+ Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    17763.7678
    Security
    43 fixed · 3 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5063871

    GDI+ remote-code flaw patched; Changjie word selection restored

    The update fixes 37 security vulnerabilities, including three critical flaws in GDI+, MSMQ, and NTLM, and restores word selection in the Microsoft Changjie Input Method.

    Check the newer update, KB5065427
    Secure Boot certificates used by most Windows devices began expiring in June 2026. Microsoft recommends reviewing its guidance and preparing to update them in advance.

    Key changes 37 CVEs · 1 change

    • Fix Input and Composition: Users of the Microsoft Changjie Input Method can select words again.
    • Critical CVE-2025-53766: GDI+ Remote Code Execution Vulnerability
    • Critical CVE-2025-53778: Windows NTLM Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14393.8330
    Security
    37 fixed · 3 critical
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5062649

    Core file system hangs and input-method failures addressed

    Addresses rare stability problems that could leave some PCs unresponsive, along with several input-method and emoji-search failures. It also adds a Secure Boot protection deployment option.

    Check the newer update, KB5063709
    Support for Windows 10 ended on October 14, 2025. Microsoft recommends moving to Windows 11; free software updates, technical assistance, and security fixes are no longer provided after that date.

    Key changes 8 changes

    • New Secure Boot: Adds an option for deploying a new Secure Boot protection.
    • Improved Mobile Operator Profiles: Country and operator settings profiles are updated.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements intended to make the update process more reliable.

    Read update Source: Microsoft

    Build
    19045.6159
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update

    KB5062554

    SPNEGO and Hyper-V flaws patched; CJK text may blur

    Fixes 75 vulnerabilities, including 5 critical ones. Some CJK text may look blurry at 96 DPI in Chromium-based browsers, and two input-related issues are resolved by KB5062649.

    Check the newer update, KB5062649
    Windows 10 support ended on October 14, 2025. Microsoft recommends moving to Windows 11; Secure Boot certificates have also started expiring, so devices might need certificate updates to boot securely.
    Known issues: 1 open
    • Noto fonts

    Key changes 75 CVEs · 3 changes

    • Improved Internal Windows OS: Internal Windows components receive miscellaneous security improvements; no specific user-facing change is listed.
    • Improved Internal Windows OS: Internal Windows components receive miscellaneous security improvements; no specific user-facing change is listed.
    • Improved Servicing stack: The component that installs Windows updates gets reliability improvements.

    Read update Source: Microsoft

    Builds
    19044.6093 · 19045.6093
    Security
    75 fixed · 5 critical
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5062557

    NEGOEX remote-code flaw patched; language-pack cleanup fixed

    The update fixes 75 security vulnerabilities, including five critical flaws, and resolves an issue that wasted storage and slowed updates. It also improves Windows update servicing.

    Check the newer update, KB5063877
    The page's October 14, 2025 Windows 10 end-of-support notice does not give the support deadline for Enterprise LTSC 2019. This edition's support ends January 9, 2029.

    Key changes 75 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Input and Composition: Unused language packs and Feature on Demand packages are removed completely, avoiding unnecessary storage use and longer update install...
    • Critical CVE-2025-47981: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    17763.7558
    Security
    75 fixed · 5 critical
    Restart
    Required