Skip to the content
The Update Bureau

Windows 10

Windows 10 updates

All published releases for Windows 10, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

14 active known issues →

Windows 10 updates

  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5062560

    Critical SPNEGO and Hyper-V remote-code flaws addressed

    The update addresses 69 vulnerabilities, including five critical flaws. It also causes reported input problems with the Microsoft Changjie IME; KB5063871 resolves that issue.

    Check the newer update, KB5063871
    Secure Boot certificates used by most Windows devices started expiring in June 2026. Some personal and business devices might be unable to boot securely if their certificates are not updated in time; Microsoft recommends reviewing its guidance and preparing in advance.

    Key changes 69 CVEs · 1 change

    • Improved Internal Windows OS: The update includes general security improvements to Windows; no specific issues are listed.
    • Critical CVE-2025-47981: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
    • Critical CVE-2025-48822: Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8246
    Security
    69 fixed · 5 critical
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5061087

    Start menu and dual-protocol printer scanning fixed

    Fixes Start menu problems and scanning failures on USB-connected multifunction printers with dual protocol interfaces. Windows 10 support ends October 14, 2025.

    Check the newer update, KB5062554
    Windows 10 support ends October 14, 2025. After that date, Microsoft will no longer provide free Windows Update software updates, technical assistance, or security fixes.
    Known issues: 1 open
    • Noto fonts

    Key changes 13 changes

    • Improved Mobile Operator Profiles: Country and mobile operator settings profiles are updated.
    • Improved App Platforms and Frameworks: The curl tool included with Windows is updated.
    • Improved WinSaS: In the European Economic Area, a new default browser is automatically pinned to the taskbar and Start menu.

    Read update Source: Microsoft

    Build
    19045.6036
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Out-of-band update
    Out-of-band

    KB5063159

    Surface Hub v1 start failure prevented; Noto text issue remains

    This out-of-band update prevents a start failure on Surface Hub v1 devices and includes fixes and quality improvements from KB5060533. Blurry CJK text might still appear in Chromium-based browsers at 96 DPI.

    Check the newer update, KB5061087
    Windows 10 support ended on October 14, 2025. Microsoft recommends moving to Windows 11.
    Known issues: 1 open
    • Noto fonts

    Key changes 3 changes

    • Improved Includes the fixes and quality improvements that were part of KB5060533.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Surface Hub v1: Surface Hub v1 devices avoid the start failure seen after installing KB5060533.

    Read update Source: Microsoft

    Build
    19045.5968
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5060533

    Exploited shortcut-file flaw patched; Netlogon flaw rated critical

    The update fixes 34 vulnerabilities, including an exploited flaw in Internet Shortcut Files and a critical Netlogon flaw. It also carries an open issue that can delay delivery when organizations use quality-update deferral policies.

    Check the newer update, KB5062554
    Windows 10 support ends on October 14, 2025. Microsoft recommends moving to Windows 11.
    Known issues: 2 open
    • Noto fonts
    • Update delay with deferral policies

    Key changes 34 CVEs · 3 changes

    • Improved Internal Windows OS: Windows 10, version 21H2, gets miscellaneous security improvements to internal Windows functions; no specific issues are documented.
    • Improved Internal Windows OS: Windows 10, version 22H2, gets miscellaneous security improvements to internal Windows functions; no specific issues are documented.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

    Read update Source: Microsoft

    Builds
    19044.5965 · 19045.5965
    Security
    34 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5060531

    Exploited shortcut-file flaw patched; GDI text rendering fixed

    The update closes an actively exploited remote-code-execution flaw in Internet Shortcut Files and fixes distorted GDI text. It also addresses a Windows Hello for Business certificate sign-in problem.

    Check the newer update, KB5062557
    The page says Windows 10 support ends on October 14, 2025, and recommends moving to Windows 11. It does not state an action specific to this update.

    Key changes 34 CVEs · 3 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix GDI and GDI+: Some characters display at the correct width, and the sample paragraph is no longer broken.
    • Fix Windows Hello: The update addresses a problem that can prevent sign-in with self-signed certificates using Windows Hello for Business.

    Read update Source: Microsoft

    Build
    17763.7434
    Security
    34 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5061010

    Exploited Internet Shortcut flaw patched; Remote Web Access fixed

    The update closes 32 vulnerabilities, including exploited remote-code-execution flaw CVE-2025-33053, and fixes Remote Web Access connection instability and a Windows Hello sign-in issue.

    Check the newer update, KB5062560
    The page says Windows 10 support ends October 14, 2025. Microsoft says it will no longer provide free software updates, technical assistance, or security fixes after that date.

    Key changes 32 CVEs · 2 changes

    • Fix Cloud Infrastructure: Remote Web Access no longer causes remote connections to act unpredictably.
    • Fix Windows Hello: Signing in with Windows Hello for Business works with self-signed certificates in the Key Trust model.
    • Exploited CVE-2025-33053: Internet Shortcut Files Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8148
    Security
    32 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5058481

    Calendar clock seconds return; missing GB18030 characters fixed

    Restores a calendar clock view with seconds and fixes specific GB18030 character rendering problems. It also has an open issue that can make CJK text look blurry at 96 DPI in Chromium-based browsers.

    Check the newer update, KB5063159
    Windows 10 support ends October 14, 2025. After that date, Microsoft will no longer provide free updates through Windows Update, technical assistance, or security fixes.
    Known issues: 1 open
    • Noto fonts

    Key changes 8 changes

    • New Calendar flyout: The calendar flyout regains a clock view that displays seconds.
    • New Calendar flyout: The Weather button in Rich Calendar has description text.
    • Improved Calendar flyout: Rich Calendar shows upcoming events for up to 30 days.

    Read update Source: Microsoft

    Build
    19045.5917
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band

    KB5061979

    Hyper-V fix stops confidential VMs from hanging or restarting

    Fixes an issue that could make confidential virtual machines on Hyper-V stop responding or restart unexpectedly, affecting service availability. CJK text can still look blurry in some browsers at 96 DPI.

    Check the newer update, KB5058481
    Windows 10 support ended on October 14, 2025. Microsoft no longer provides free Windows Update updates, technical assistance, or security fixes.
    Known issues: 1 open
    • Noto fonts

    Key changes 4 changes

    • Improved Windows 10, version 22H2: This version includes the improvements listed for supported Windows 10, version 21H2 editions.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Hyper-V Platform: Confidential virtual machines could stop responding or restart unexpectedly, disrupting service and requiring manual intervention. Azur...

    Read update Source: Microsoft

    Builds
    19044.5859 · 19045.5859
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5061978

    Hyper-V confidential VMs stop freezing or restarting unexpectedly

    Fixes an issue that caused confidential virtual machines on Hyper-V with Windows Server 2022 to stop responding or restart unexpectedly, affecting service availability.

    Check the newer update, KB5060531
    The KB page warns that Windows 10 support ends October 14, 2025, after which Microsoft will no longer provide free Windows Update updates, technical assistance, or security fixes.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements intended to improve the reliability of the update process.
    • Fix Hyper-V Platform: Confidential virtual machines on Hyper-V with Windows Server 2022 no longer stop responding or restart unexpectedly because of the dire...

    Read update Source: Microsoft

    Build
    17763.7322
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band

    KB5061768

    LSASS and BitLocker recovery issue fixed

    Fixes an issue that could crash LSASS and send some Intel vPro PCs into BitLocker recovery. Blurry CJK text at 96 DPI remains a known issue.

    Check the newer update, KB5061979
    Windows 10 support ended October 14, 2025. Microsoft recommends moving to Windows 11; after that date, Windows 10 no longer receives free updates, technical assistance, or security fixes.
    Known issues: 1 open
    • Noto fonts

    Key changes 3 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix OS Security (Known Issue): The issue that could stop LSASS and trigger Automatic Repair with a BitLocker recovery prompt is fixed for the listed Intel vPro device...
    • Fix OS Security (Known Issue): The issue that could stop LSASS and trigger Automatic Repair with a BitLocker recovery prompt is fixed for the listed Intel vPro device...

    Read update Source: Microsoft

    Builds
    19044.5856 · 19045.5856
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5058379

    Exploited scripting and Windows privilege flaws patched

    The update fixes 36 vulnerabilities, including five that attackers are already exploiting. It also improves Linux-system detection and servicing, but the update is no longer available.

    Windows 10 support ended on October 14, 2025. Microsoft no longer provides free updates, technical assistance, or security fixes through Windows Update.
    Known issues: 2 open
    • Noto fonts
    • Citrix

    Key changes 36 CVEs · 3 changes

    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Detection of Linux systems is improved.
    • Improved Windows 10, version 22H2: The 22H2 build includes the improvements listed for the supported 21H2 editions; no additional issues are documented for this release.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Builds
    19044.5854 · 19045.5854
    Security
    36 fixed · 3 critical · 5 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5058392

    Exploited CLFS driver and DWM flaws patched

    Addresses 36 vulnerabilities, including three critical flaws and five that attackers are exploiting. It also improves Linux detection through Secure Boot and addresses a blue-screen error.

    Check the newer update, KB5061978
    The page says Windows 10 support ends October 14, 2025, and recommends moving to Windows 11. This update is for Enterprise LTSC 2019, which has a later end-of-updates date in the dossier: January 9, 2029.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 36 CVEs · 4 changes

    • Improved OS Security: The blocklist includes more vulnerable drivers, helping prevent their use in attacks.
    • Improved GRFX-Graphics: Addresses a blue-screen error that can occur in cases linked to recent GDI updates and CHS GB18030-2022 fonts.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux system detection improves.

    Read update Source: Microsoft

    Build
    17763.7314
    Security
    36 fixed · 3 critical · 5 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5058383

    Exploited scripting and Windows driver flaws addressed

    Addresses 33 vulnerabilities, including four that attackers are exploiting. It also improves Secure Boot detection of Linux systems.

    Check the newer update, KB5061010

    Key changes 33 CVEs · 1 change

    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Secure Boot detection of Linux systems is improved.
    • Exploited CVE-2025-32701: Windows Common Log File System Driver Elevation of Privilege Vulnerability
    • Exploited CVE-2025-32706: Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14393.8066
    Security
    33 fixed · 3 critical · 4 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5055612

    WSL2 GPU support and System Guard service errors fixed

    Fixes a WSL2 GPU paravirtualization check and a System Guard Runtime Monitor Broker error in Event Viewer. It also updates the vulnerable driver blocklist.

    Check the newer update, KB5061768
    Windows 10 support ends on October 14, 2025. After that date, Microsoft will no longer provide free updates, technical assistance, or security fixes.
    Known issues: 2 open
    • Citrix
    • Noto fonts issue

    Key changes 5 changes

    • Improved Internal Windows OS: Internal Windows OS functionality gets miscellaneous security improvements.
    • Improved OS Security: The vulnerable driver blocklist adds drivers with security vulnerabilities that have been used in attacks.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

    Read update Source: Microsoft

    Build
    19045.5796
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5059091

    Hyper-V-isolated containers start reliably after an image mismatch fix

    Fixes startup failures for some Windows containers running in Hyper-V isolation when their update level differs from the host utility virtual machine. The required servicing stack update must be installed first.

    Check the newer update, KB5058392
    Windows 10 Enterprise LTSC 2019 is scheduled to receive updates through January 9, 2029; the KB page’s general Windows 10 end-of-support notice for October 14, 2025 does not describe this edition.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Windows containers: Some Windows containers running in Hyper-V isolation can start even when their update level does not match the host utility virtual mac...

    Read update Source: Microsoft

    Build
    17763.7249
    Restart
    Required
  • Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band

    KB5058922

    Local audit policy status mismatch addressed

    Addresses a misleading status for local logon auditing and improves the Windows update installation component. Devices with Citrix Session Recording Agent 2411 may still encounter a separate installation problem with the January 2025 update.

    Check the newer update, KB5059091
    The page carries a general Windows 10 support notice for October 14, 2025; Windows 10 version 1809 is listed with an end-of-updates date of January 9, 2029.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Active Directory Group Policy: Enabled, working local logon audit policies might appear as “No auditing” in policy settings; this update addresses that misleading sta...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.7240
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band

    KB5058921

    Audit logon status can appear disabled even when auditing works

    The out-of-band update fixes a misleading display of local audit settings: logon auditing can appear disabled even when it is enabled and working.

    Check the newer update, KB5058383

    Key changes 1 change

    • Fix Group Policy: The local audit policy no longer appears to have logon auditing turned off when it is enabled and working.

    Read update Source: Microsoft

    Build
    14393.7973
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5055518

    Exploited log file driver flaw fixed; Hello sign-in tightened

    Attackers are exploiting a Windows Common Log File System Driver flaw to gain higher privileges. The update also changes Windows Hello face sign-in and other security protections.

    Windows 10 support ended on October 14, 2025.
    Known issues: 3 open
    • Citrix
    • Noto fonts issue
    • System Guard Runtime Monitor Broker service

    Key changes 62 CVEs · 5 changes

    • New OS Security: A new folder appears on the system drive for added protection. Do not delete it; no action is needed.
    • Improved Windows 10, version 22H2: Version 22H2 includes the improvements listed for supported Windows 10, version 21H2 editions.
    • Improved Daylight Saving Time (DST): Devices in Chile’s Aysén region get the 2025 daylight saving time change.

    Read update Source: Microsoft

    Builds
    19044.5737 · 19045.5737
    Security
    62 fixed · 5 critical · 1 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5055519

    Exploited Common Log File System Driver flaw addressed

    Addresses 59 vulnerabilities, including an actively exploited Common Log File System Driver flaw. It also changes daylight-saving-time handling, security behavior, and the servicing stack.

    This update has not been available through Microsoft's release channels since March 31, 2026. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 59 CVEs · 5 changes

    • Improved Daylight Saving Time (DST): Daylight-saving-time support is updated for the Aysen region in Chile to follow the government's 2025 change.
    • Improved OS Security: A new %systemdrive%\inetpub folder is created on the device. Do not delete it, whether or not IIS is enabled.
    • Improved Kerberos Authentication: Kerberos authentication gains protections that might cause Event ID 45 events to be logged on domain controllers.

    Read update Source: Microsoft

    Build
    17763.7136
    Security
    59 fixed · 5 critical · 1 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5055521

    Exploited CLFS driver flaw patched; audit-policy display issue noted

    Addresses 46 vulnerabilities, including an actively exploited flaw in the Common Log File System driver. It also changes daylight saving time support in Chile and adds Kerberos protections that might log Event ID 45 on domain controllers.

    Check the newer update, KB5058921

    Key changes 46 CVEs · 3 changes

    • Improved Daylight Saving Time (DST): Daylight saving time support is updated for the Aysen region in Chile to follow the government’s 2025 change order.
    • Improved OS Security: A new inetpub folder is created on the system drive. Leave it in place.
    • Improved Kerberos Authentication: Kerberos protections are enabled by default. On domain controllers, this change might cause Event ID 45 events to be logged.

    Read update Source: Microsoft

    Build
    14393.7969
    Security
    46 fixed · 5 critical · 1 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5053643

    Noto fonts add CJK support but can blur browser text

    Chinese, Japanese, and Korean text gains Noto font support, but can look blurry in Chromium browsers at 100% scaling. The calendar's seconds-view rollout is paused.

    Check the newer update, KB5055612
    Windows 10 support ends October 14, 2025. After that date, Microsoft will no longer provide free updates, technical assistance, or security fixes.
    Known issues: 3 open
    • Citrix
    • Noto fonts issue
    • System Guard Runtime Monitor Broker service

    Key changes 10 changes

    • New Noto Fonts: Web browsing gains modern font support for Chinese, Japanese, and Korean text.
    • Improved Calendar flyout: The change that hides the seconds view in the calendar flyout is paused. Microsoft plans to bring the view back in a future update.
    • Improved Mobile Operator Profiles: Country and mobile operator settings profiles are updated.

    Read update Source: Microsoft

    Build
    19045.5679
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5053606

    Exploited NTFS, Fast FAT, and MMC flaws patched

    Attackers are exploiting flaws in NTFS, Fast FAT, and Microsoft Management Console; the update also covers critical Remote Desktop code-execution flaws. Windows 10 support has since ended.

    Windows 10 support ended October 14, 2025. Microsoft no longer provides free updates, technical help, or security fixes for Windows 10.
    Known issues: 4 open
    • Citrix
    • System Guard Runtime Monitor Broker service
    • and 2 more

    Key changes 30 CVEs · 3 changes

    • Improved Windows 10, version 22H2: Version 22H2 includes all improvements from supported Windows 10, version 21H2 editions.
    • Improved Windows 10, version 21H2: The update makes security improvements to internal Windows functions.
    • Improved Servicing stack: The part of Windows that installs updates gets quality improvements.

    Read update Source: Microsoft

    Builds
    19044.5608 · 19045.5608
    Security
    30 fixed · 2 critical · 5 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5053596

    Exploited NTFS and FAT flaws patched; Citrix issue remains

    Fixes 29 vulnerabilities, including flaws in NTFS and the Fast FAT driver that attackers are exploiting. It also fixes an OpenSSH startup problem; Citrix SRA 2411 can still block installation of the January 2025 update.

    Microsoft says Windows 10 support ended October 14, 2025, and recommends moving to the latest Windows version. Windows 10 Enterprise LTSC 2019 has updates listed through January 9, 2029.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 29 CVEs · 5 changes

    • New GB18030-2022: Support is added for the GB18030-2022 amendment.
    • Improved Daylight saving time (DST): Daylight saving time changes for Paraguay are updated.
    • Improved Temporary files: System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.

    Read update Source: Microsoft

    Build
    17763.7009
    Security
    29 fixed · 2 critical · 5 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5053594

    Exploited kernel, NTFS and FAT flaws patched

    Fixes 30 security vulnerabilities, including six actively exploited flaws, and makes system temporary files safer. It also fixes a process-creation race condition and updates Paraguay’s daylight saving time.

    Check the newer update, KB5055521
    Windows 10 support ended October 14, 2025. After that date, Microsoft no longer provides free software updates from Windows Update, technical assistance, or security fixes; PCs continue to work.

    Key changes 30 CVEs · 4 changes

    • Improved Temporary files: System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.
    • Improved Daylight saving time (DST): Daylight saving time changes for Paraguay are updated.
    • Fix Security: The update addresses security issues in Windows.

    Read update Source: Microsoft

    Build
    14393.7876
    Security
    30 fixed · 2 critical · 6 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5052077

    Narrator and Chinese IME problems fixed; SSH starts again

    Narrator now reports Chinese IME controls correctly, and the OpenSSH service starts so SSH connections work again. The preview also fixes repeated stops in Dwm.exe.

    Check the newer update, KB5053643
    Windows 10 support ended on October 14, 2025. Microsoft recommends moving to Windows 11.
    Known issues: 3 open
    • Citrix
    • System Guard Runtime Monitor Broker service
    • USB Printer Issue

    Key changes 10 changes

    • Improved Daylight saving time (DST): Daylight saving time changes in Paraguay are supported.
    • Improved Country and Operator Settings Asset: Mobile operator settings are updated for certain carriers.
    • Improved Servicing stack: The component that installs Windows updates gets reliability improvements.

    Read update Source: Microsoft

    Build
    19045.5555
    Restart
    Required