Skip to the content
The Update Bureau

Windows 10

Windows 10 updates

All published releases for Windows 10, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

14 active known issues →

Windows 10 updates

  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5051974

    Exploited Storage and WinSock flaws put Windows at risk

    Attackers are exploiting flaws in Windows Storage and the WinSock ancillary function driver. An LDAP flaw also allows remote code execution; USB printer and other known issues are listed.

    As of March 31, 2026, this update is no longer available. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 4 open
    • Citrix
    • System Guard Runtime Monitor Broker service
    • and 2 more

    Key changes 32 CVEs · 3 changes

    • Improved Windows 10, version 22H2: Version 22H2 includes all improvements from supported version 21H2 editions.
    • Improved Windows 10, version 21H2: Windows gets miscellaneous security improvements to internal features.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    Builds
    19044.5487 · 19045.5487
    Security
    32 fixed · 1 critical · 2 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5052000

    Storage and WinSock flaws under attack; camera detection fixed

    Attackers are exploiting Windows Storage and WinSock driver flaws. The update also restores USB camera detection and fixes several USB audio problems.

    As of March 31, 2026, this update is no longer available from Microsoft. The page recommends moving devices to the latest Windows version.
    Known issues: 2 open Organizations and IT administrators
    • Citrix
    • Open Secure Shell service

    Key changes 32 CVEs · 7 changes

    • New GB18030-2022: Adds support for the GB18030-2022 amendment.
    • Improved Windows Kernel Vulnerable Driver Blocklist file: Adds drivers at risk of attacks that use vulnerable drivers to the blocklist.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    Build
    17763.6893
    Security
    32 fixed · 1 critical · 2 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5052006

    Exploited storage and WinSock flaws patched; USB audio fixed

    Fixes 31 vulnerabilities, including two actively exploited flaws, and resolves issues with USB cameras and audio devices.

    Check the newer update, KB5053594

    Key changes 31 CVEs · 3 changes

    • Fix USB cameras: USB cameras are recognized as on again after the January 2025 security update.
    • Fix USB audio device drivers: The code 10 “This device cannot start” error with certain external audio management devices is fixed.
    • Fix Digital/Analog converter (DAC): USB audio devices are less likely to stop working and interrupt playback, especially when using a DAC audio driver based on USB 1.0.
    Build
    14393.7785
    Security
    31 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5050081

    Screen capture and audio failures fixed; Outlook app added

    Adds the new Outlook app and fixes several problems, including unresponsive screen capture, USB audio failures, and virtual memory depletion.

    Check the newer update, KB5052077

    Key changes 12 changes

    • New Mail: The new Outlook for Windows app appears in the Start menu near classic Outlook. Settings and defaults do not change.
    • New GB18030-2022: Support is added for the GB18030-2022 amendment.
    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The list of drivers at risk for Bring Your Own Vulnerable Driver attacks is expanded.
    Build
    19045.5440
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5049981

    Exploited Hyper-V flaws fixed among 121 vulnerabilities

    Addresses 121 vulnerabilities, including five critical flaws and three exploited Hyper-V vulnerabilities. It also adds drivers to the vulnerable driver blocklist for LTSC editions.

    As of March 31, 2026, this update is no longer available through Microsoft release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 121 CVEs · 3 changes

    • Improved Windows 10, version 22H2: Version 22H2 includes all the improvements from supported Windows 10 version 21H2 editions.
    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable driver blocklist includes more drivers that could be used in BYOVD attacks.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    Builds
    19044.5371 · 19045.5371
    Security
    121 fixed · 5 critical · 3 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server

    KB5050008

    Fixes 112 vulnerabilities (5 critical)

    The update fixes 112 vulnerabilities, including five critical ones and the publicly disclosed Windows Themes flaw CVE-2025-21308. It also expands the blocklist of drivers at risk of BYOVD attacks.

    Check the newer update, KB5058922

    Key changes 112 CVEs · 2 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist includes more drivers that could be used in BYOVD attacks.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Critical CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability
    Build
    17763.6775
    Security
    112 fixed · 5 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5049993

    Critical OLE and multicast code-execution flaws addressed

    The update adds drivers to the vulnerable-driver blocklist and addresses 105 security vulnerabilities, including five critical ones. CVE-2025-21308, a Windows Themes spoofing flaw, was publicly disclosed.

    Check the newer update, KB5052006

    Key changes 105 CVEs · 1 change

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist covers more drivers that are at risk of attacks using vulnerable drivers.
    • Critical CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability
    • Critical CVE-2025-21307: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
    Build
    14393.7699
    Security
    105 fixed · 5 critical
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5048652

    Exploited Common Log File System flaw patched; Sysprep error fixed

    The update fixes 46 vulnerabilities, including nine critical ones and an actively exploited flaw in the Common Log File System driver. It also fixes a Sysprep error on Windows 10 Enterprise and IoT Enterprise LTSC 2021.

    As of March 31, 2026, the update is no longer available from the Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.

    Key changes 46 CVEs · 3 changes

    • Improved Windows 10, version 22H2: Includes all improvements from supported Windows 10, version 21H2 editions.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Sysprep /generalize: On Windows 10 Enterprise LTSC 2021 and IoT Enterprise LTSC 2021, Sysprep no longer fails with error 0x80073cf when you remove a package...
    Builds
    19044.5247 · 19045.5247
    Security
    46 fixed · 9 critical · 1 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5048661

    Exploited CLFS driver flaw addressed; motherboard activation fixed

    The update addresses 46 security vulnerabilities, including an exploited flaw in the Common Log File System Driver, and fixes Windows activation after a motherboard replacement.

    This update has not been available through Microsoft Update Catalog or other release channels since March 31, 2026. Microsoft recommends updating devices to the latest Windows version.

    Key changes 46 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates.
    • Fix Motherboard replacement: Windows activates again after a motherboard replacement.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
    Build
    17763.6659
    Security
    46 fixed · 9 critical · 1 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5048671

    Closes exploited flaw in the Common Log File System Driver

    Fixes 23 security flaws, including 7 critical ones. It closes an actively exploited flaw in the Common Log File System Driver.

    Check the newer update, KB5049993

    Key changes 23 CVEs · 1 change

    • Improved Windows operating system: The update adds general security improvements inside Windows.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
    • Critical CVE-2024-49112: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
    Build
    14393.7606
    Security
    23 fixed · 7 critical · 1 exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview Also for Windows 11
    Preview

    KB5046714

    Cloud shortcut backups and drag-and-drop copying fixed

    Fixes cloud backup and file-copy problems, motherboard reactivation, mobile-operator profiles, and freezes with some USB printers. It also includes servicing stack improvements.

    Check the newer update, KB5050081

    Key changes 6 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix App list backup: Win32 shortcuts can back up to the cloud again.
    • Fix Copy cloud files: Dragging files from a cloud provider folder copies them instead of moving them.
    Build
    19045.5198
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5046613

    Exploited Task Scheduler flaw patched; game startup restored

    Closes 31 vulnerabilities, including two exploited flaws, and restores startup for some games and apps. The update is no longer available from Microsoft release channels.

    As of March 31, 2026, this update is no longer available from Microsoft release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 31 CVEs · 4 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist includes more drivers that are at risk of attacks using vulnerable drivers.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates reliably.
    • Fix Some games fail to start: Some games that failed to start or stopped responding after KB5045594 can start again.
    Builds
    19044.5131 · 19045.5131
    Security
    31 vulnerabilities fixed · 2 actively exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5046615

    Exploited Task Scheduler and NTLM flaws addressed; vmswitch fixed

    The update addresses 28 security vulnerabilities, including two that attackers are exploiting, and fixes a vmswitch stop error in a specific virtual-machine setup.

    KB5046615 has not been available from the Microsoft Update Catalog or other release channels since March 31, 2026. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 28 CVEs · 3 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The list of drivers identified as at risk for attacks using vulnerable drivers is expanded.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix vmswitch: A stop error is fixed in a virtual-machine setup using two virtual switches, when one switch uses SR-IOV and the VM uses LBFO teaming.
    Build
    17763.6532
    Security
    28 vulnerabilities fixed · 2 actively exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5046612

    Exploited NTLM and Task Scheduler flaws patched; vmswitch crash fixed

    The update addresses 24 Important vulnerabilities, including exploited CVE-2024-43451 (NTLM hash disclosure) and CVE-2024-49039 (Task Scheduler privilege escalation); CVE-2024-43451 was also publicly disclosed. It also fixes a vmswitch stop error in a specific virtual-machine setup.

    Check the newer update, KB5048671

    Key changes 24 CVEs · 1 change

    • Fix vmswitch: A virtual machine no longer hits a stop error in the described two-switch setup.
    • Exploited CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability
    • Exploited CVE-2024-43451: NTLM Hash Disclosure Spoofing Vulnerability
    Build
    14393.7515
    Security
    24 vulnerabilities fixed · 2 actively exploited
    Restart
    Required
  • Windows 10 22H2 Windows 10 22H2 Optional preview
    Preview

    KB5045594

    Start menu account controls arrive; USB printer issues fixed

    A new Start menu account manager begins rolling out, while USB-connected multifunction printers get printing and scanner-driver fixes. The preview also addresses virtualization, upgrade, controller-input, and Azure Virtual Desktop problems.

    Check the newer update, KB5046714

    Key changes 10 changes

    • New Start menu: A new account manager makes your account and account settings easier to reach. The Lock command moves to the power menu.
    • Improved Product activation phone numbers: New product activation phone numbers are available for several regions.
    • Improved Country and Operator Settings Asset (COSA): Mobile operator profiles are brought up to date for certain operators.
    Build
    19045.5073
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5044273

    Exploited MMC and MSHTML flaws patched

    Addresses 57 vulnerabilities, including exploited flaws in Microsoft Management Console and the MSHTML Platform. It is no longer available; several reported AVD, app-launch and OpenSSH issues were later addressed by other updates.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 57 CVEs · 3 changes

    • Improved Windows 10, version 22H2: This build includes the improvements from supported Windows 10, version 21H2 editions.
    • Improved Miscellaneous security improvements to internal OS functionality: Windows 10, version 21H2 LTSC editions receive miscellaneous security improvements to internal operating system functionality.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    Builds
    19044.5011 · 19045.5011
    Security
    57 fixed · 1 critical · 2 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5044277

    Exploited MMC and MSHTML flaws addressed; Remote Desktop fixed

    Addresses 55 vulnerabilities, including two exploited flaws, and fixes Remote Desktop disruptions on some Windows Servers. It is no longer available as of March 31, 2026.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 55 CVEs · 3 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix FrameShutdownDelay: The browser no longer ignores the FrameShutdownDelay setting.
    • Fix Remote Desktop (known issue): Some Windows Servers no longer sporadically disrupt Remote Desktop sessions when a legacy Remote Desktop Gateway protocol is in use.
    Build
    17763.6414
    Security
    55 fixed · 1 critical · 2 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5044293

    Exploited MMC flaw patched; legacy-protocol gateway drops fixed

    Patches an actively exploited MMC remote-code-execution flaw and fixes sporadic Remote Desktop disconnects on Windows Servers using a legacy Remote Desktop Gateway protocol.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 33 CVEs · 1 change

    • Fix Remote Desktop: The update fixes sporadic Remote Desktop disconnections on Windows Servers using a legacy Remote Desktop Gateway protocol, such as Remo...
    • Exploited CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability
    • Exploited CVE-2024-43573: Windows MSHTML Platform Spoofing Vulnerability
    Build
    14393.7428
    Security
    33 vulnerabilities fixed · 2 actively exploited
  • Windows 10 22H2 Windows 10 22H2 Optional preview
    Preview

    KB5043131

    Start menu appearance changes; IE mode and media playback issues addressed

    This optional preview changes the Start menu and addresses problems with Edge in IE mode, surround-sound playback, and other Windows features. It also includes a servicing stack update.

    Check the newer update, KB5045594
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 10 changes

    • New Start menu: Your profile picture might appear in a different position in the Start menu, which also gets a new background color in its left pane.
    • Improved Country and Operator Settings Asset: COSA profiles are updated for certain mobile operators.
    • Improved Windows Update opt-in notifications: Windows Update opt-in notifications now appear when you sign in.
    Build
    19045.4957
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5043064

    Windows Installer prompts for credentials; dual-boot Linux may fail

    The update changes Windows Installer repairs to prompt for administrator credentials and addresses security issues. A known dual-boot issue can prevent Linux from starting, and some other issues affect profile pictures and Azure Virtual Desktop.

    As of March 31, 2026, this update is no longer available through Microsoft release channels; Microsoft recommends updating devices to the latest Windows version.
    Known issues: 2 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 31 CVEs · 3 changes

    • Improved Windows Installer: When Windows Installer repairs an application, you are now prompted for credentials. Automation scripts may need updating.
    • Improved Dual boot of Windows and Linux: Linux might fail to start on devices set up to dual-boot Windows and Linux. The failure can show a Secure Boot policy violation message...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    Builds
    19044.4894 · 19045.4894
    Security
    31 fixed · 1 critical · 3 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5043050

    Exploited Installer, Mark of the Web and MSHTML flaws closed

    Fixes 30 vulnerabilities, including three exploited Windows flaws and two critical remote-code-execution vulnerabilities. It also addresses AppContainer printing and BitLocker decryption problems.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 30 CVEs · 5 changes

    • Improved Windows Installer: Windows Installer repairs now prompt for your credentials through User Account Control. Automation scripts might need updating, and app...
    • Improved Windows Server 2019: The page notes reports of some devices slowing down, becoming unresponsive, and using high CPU.
    • Improved Dual boot of Windows and Linux: The page notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.
    Build
    17763.6293
    Security
    30 fixed · 2 critical · 3 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5043051

    Exploited Windows Installer flaw; repairs now prompt for credentials

    Windows Installer now prompts for administrator credentials when repairing apps. The update addresses 30 security vulnerabilities, including three that are being exploited.

    As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.

    Key changes 30 CVEs · 2 changes

    • Improved Windows Installer: When Windows Installer repairs an application, you now see a User Account Control prompt asking for credentials.
    • Improved Dual boot of Windows and Linux: The update notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.
    • Exploited CVE-2024-43461: Windows MSHTML Platform Spoofing Vulnerability
    Build
    14393.7336
    Security
    30 fixed · 1 critical · 3 exploited
  • Windows 10 22H2 Windows 10 22H2 Optional preview
    Preview

    KB5041582

    Fixes system hangs; dual-boot Linux may fail to start

    Addresses memory leaks and hangs in Windows 10, version 22H2. Devices that dual-boot Linux might have trouble starting Linux after the update.

    Check the newer update, KB5043131
    Known issues: 2 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 6 changes

    • Improved Country and Operator Settings Asset: COSA profiles are updated for certain mobile operators.
    • Improved Servicing stack: The update includes quality improvements to the component that installs Windows updates.
    • Fix Input Method Editor (IME): Addresses a memory leak that might occur when you close a window after a combo box has input focus.
    Build
    19045.4842
    Restart
    Required
  • Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day

    KB5041580

    Exploited Windows flaws and critical TCP/IP risk patched

    Fixes 43 vulnerabilities, including four being exploited and three rated critical. It also adds Secure Boot protections, but can disrupt Linux dual-boot startup and profile-picture changes.

    As of March 31, 2026, this update is no longer available through Microsoft release channels; Microsoft recommends updating devices to the latest Windows version.
    Known issues: 2 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 43 CVEs · 6 changes

    • Improved Windows 10, version 22H2: This build includes the improvements from the supported Windows 10, version 21H2 editions.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Windows blocks vulnerable Linux bootloaders from running. The SBAT change is not applied when Windows and Linux dual-booting is detecte...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install Microsoft updates.
    Builds
    19044.4780 · 19045.4780
    Security
    43 fixed · 3 critical · 4 exploited
  • Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day

    KB5041578

    Exploited kernel flaws patched; Linux dual-boot failures remain

    Addresses four exploited vulnerabilities and adds protections against vulnerable Linux bootloaders. Some Windows-and-Linux dual-boot devices might fail to start Linux.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 39 CVEs · 9 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The driver blocklist includes more drivers at risk of Bring Your Own Vulnerable Driver attacks.
    • Improved BitLocker: A BitLocker recovery screen might appear when the device starts after the July 9, 2024 update. This is more likely when device encrypti...
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Windows applies SBAT to block vulnerable Linux EFI bootloaders. Older Linux ISO images might not boot after SBAT is applied; contact yo...
    Build
    17763.6189
    Security
    39 fixed · 2 critical · 4 exploited