All published releases for Windows 10, newest first: what each update changes, whether to install it and any confirmed known issues.
Latest release: November 13, 2026.
Attackers are exploiting flaws in Windows Storage and the WinSock ancillary function driver. An LDAP flaw also allows remote code execution; USB printer and other known issues are listed.
As of March 31, 2026, this update is no longer available. Microsoft recommends updating devices to the latest version of Windows.
Known issues: 4 open
Citrix
System Guard Runtime Monitor Broker service
and 2 more
Key changes32 CVEs · 3 changes
ImprovedWindows 10, version 22H2: Version 22H2 includes all improvements from supported version 21H2 editions.
ImprovedWindows 10, version 21H2: Windows gets miscellaneous security improvements to internal features.
ImprovedServicing stack: The component that installs Windows updates gets quality improvements.
FixUSB cameras: USB cameras are recognized as on again after the January 2025 security update.
FixUSB audio device drivers: The code 10 “This device cannot start” error with certain external audio management devices is fixed.
FixDigital/Analog converter (DAC): USB audio devices are less likely to stop working and interrupt playback, especially when using a DAC audio driver based on USB 1.0.
NewMail: The new Outlook for Windows app appears in the Start menu near classic Outlook. Settings and defaults do not change.
NewGB18030-2022: Support is added for the GB18030-2022 amendment.
ImprovedWindows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The list of drivers at risk for Bring Your Own Vulnerable Driver attacks is expanded.
Addresses 121 vulnerabilities, including five critical flaws and three exploited Hyper-V vulnerabilities. It also adds drivers to the vulnerable driver blocklist for LTSC editions.
As of March 31, 2026, this update is no longer available through Microsoft release channels. Microsoft recommends updating devices to the latest version of Windows.
Key changes121 CVEs · 3 changes
ImprovedWindows 10, version 22H2: Version 22H2 includes all the improvements from supported Windows 10 version 21H2 editions.
ImprovedWindows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable driver blocklist includes more drivers that could be used in BYOVD attacks.
ImprovedServicing stack: The component that installs Windows updates receives quality improvements.
The update fixes 112 vulnerabilities, including five critical ones and the publicly disclosed Windows Themes flaw CVE-2025-21308. It also expands the blocklist of drivers at risk of BYOVD attacks.
The update adds drivers to the vulnerable-driver blocklist and addresses 105 security vulnerabilities, including five critical ones. CVE-2025-21308, a Windows Themes spoofing flaw, was publicly disclosed.
ImprovedWindows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist covers more drivers that are at risk of attacks using vulnerable drivers.
CriticalCVE-2025-21298: Windows OLE Remote Code Execution Vulnerability
CriticalCVE-2025-21307: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
The update fixes 46 vulnerabilities, including nine critical ones and an actively exploited flaw in the Common Log File System driver. It also fixes a Sysprep error on Windows 10 Enterprise and IoT Enterprise LTSC 2021.
As of March 31, 2026, the update is no longer available from the Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.
Key changes46 CVEs · 3 changes
ImprovedWindows 10, version 22H2: Includes all improvements from supported Windows 10, version 21H2 editions.
ImprovedServicing stack: The component that installs Windows updates receives quality improvements.
FixSysprep /generalize: On Windows 10 Enterprise LTSC 2021 and IoT Enterprise LTSC 2021, Sysprep no longer fails with error 0x80073cf when you remove a package...
The update addresses 46 security vulnerabilities, including an exploited flaw in the Common Log File System Driver, and fixes Windows activation after a motherboard replacement.
This update has not been available through Microsoft Update Catalog or other release channels since March 31, 2026. Microsoft recommends updating devices to the latest Windows version.
Key changes46 CVEs · 2 changes
ImprovedServicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates.
FixMotherboard replacement: Windows activates again after a motherboard replacement.
ExploitedCVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Fixes cloud backup and file-copy problems, motherboard reactivation, mobile-operator profiles, and freezes with some USB printers. It also includes servicing stack improvements.
Closes 31 vulnerabilities, including two exploited flaws, and restores startup for some games and apps. The update is no longer available from Microsoft release channels.
As of March 31, 2026, this update is no longer available from Microsoft release channels. Microsoft recommends updating devices to the latest version of Windows.
Key changes31 CVEs · 4 changes
ImprovedWindows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist includes more drivers that are at risk of attacks using vulnerable drivers.
ImprovedServicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates reliably.
FixSome games fail to start: Some games that failed to start or stopped responding after KB5045594 can start again.
The update addresses 28 security vulnerabilities, including two that attackers are exploiting, and fixes a vmswitch stop error in a specific virtual-machine setup.
KB5046615 has not been available from the Microsoft Update Catalog or other release channels since March 31, 2026. Microsoft recommends updating devices to the latest version of Windows.
Key changes28 CVEs · 3 changes
ImprovedWindows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The list of drivers identified as at risk for attacks using vulnerable drivers is expanded.
ImprovedServicing stack: The component that installs Windows updates receives quality improvements.
Fixvmswitch: A stop error is fixed in a virtual-machine setup using two virtual switches, when one switch uses SR-IOV and the VM uses LBFO teaming.
The update addresses 24 Important vulnerabilities, including exploited CVE-2024-43451 (NTLM hash disclosure) and CVE-2024-49039 (Task Scheduler privilege escalation); CVE-2024-43451 was also publicly disclosed. It also fixes a vmswitch stop error in a specific virtual-machine setup.
A new Start menu account manager begins rolling out, while USB-connected multifunction printers get printing and scanner-driver fixes. The preview also addresses virtualization, upgrade, controller-input, and Azure Virtual Desktop problems.
Addresses 57 vulnerabilities, including exploited flaws in Microsoft Management Console and the MSHTML Platform. It is no longer available; several reported AVD, app-launch and OpenSSH issues were later addressed by other updates.
As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
Key changes57 CVEs · 3 changes
ImprovedWindows 10, version 22H2: This build includes the improvements from supported Windows 10, version 21H2 editions.
ImprovedMiscellaneous security improvements to internal OS functionality: Windows 10, version 21H2 LTSC editions receive miscellaneous security improvements to internal operating system functionality.
ImprovedServicing stack: The component that installs Windows updates receives quality improvements.
Addresses 55 vulnerabilities, including two exploited flaws, and fixes Remote Desktop disruptions on some Windows Servers. It is no longer available as of March 31, 2026.
As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
Key changes55 CVEs · 3 changes
ImprovedServicing stack: The component that installs Windows updates gets quality improvements.
FixFrameShutdownDelay: The browser no longer ignores the FrameShutdownDelay setting.
FixRemote Desktop (known issue): Some Windows Servers no longer sporadically disrupt Remote Desktop sessions when a legacy Remote Desktop Gateway protocol is in use.
Patches an actively exploited MMC remote-code-execution flaw and fixes sporadic Remote Desktop disconnects on Windows Servers using a legacy Remote Desktop Gateway protocol.
As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
Key changes33 CVEs · 1 change
FixRemote Desktop: The update fixes sporadic Remote Desktop disconnections on Windows Servers using a legacy Remote Desktop Gateway protocol, such as Remo...
ExploitedCVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability
ExploitedCVE-2024-43573: Windows MSHTML Platform Spoofing Vulnerability
This optional preview changes the Start menu and addresses problems with Edge in IE mode, surround-sound playback, and other Windows features. It also includes a servicing stack update.
After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
Key changes10 changes
NewStart menu: Your profile picture might appear in a different position in the Start menu, which also gets a new background color in its left pane.
ImprovedCountry and Operator Settings Asset: COSA profiles are updated for certain mobile operators.
ImprovedWindows Update opt-in notifications: Windows Update opt-in notifications now appear when you sign in.
The update changes Windows Installer repairs to prompt for administrator credentials and addresses security issues. A known dual-boot issue can prevent Linux from starting, and some other issues affect profile pictures and Azure Virtual Desktop.
As of March 31, 2026, this update is no longer available through Microsoft release channels; Microsoft recommends updating devices to the latest Windows version.
Known issues: 2 open
After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.
Key changes31 CVEs · 3 changes
ImprovedWindows Installer: When Windows Installer repairs an application, you are now prompted for credentials. Automation scripts may need updating.
ImprovedDual boot of Windows and Linux: Linux might fail to start on devices set up to dual-boot Windows and Linux. The failure can show a Secure Boot policy violation message...
ImprovedServicing stack: The component that installs Windows updates receives quality improvements.
Fixes 30 vulnerabilities, including three exploited Windows flaws and two critical remote-code-execution vulnerabilities. It also addresses AppContainer printing and BitLocker decryption problems.
As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.
Key changes30 CVEs · 5 changes
ImprovedWindows Installer: Windows Installer repairs now prompt for your credentials through User Account Control. Automation scripts might need updating, and app...
ImprovedWindows Server 2019: The page notes reports of some devices slowing down, becoming unresponsive, and using high CPU.
ImprovedDual boot of Windows and Linux: The page notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.
Windows Installer now prompts for administrator credentials when repairing apps. The update addresses 30 security vulnerabilities, including three that are being exploited.
As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.
Key changes30 CVEs · 2 changes
ImprovedWindows Installer: When Windows Installer repairs an application, you now see a User Account Control prompt asking for credentials.
ImprovedDual boot of Windows and Linux: The update notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.
ExploitedCVE-2024-43461: Windows MSHTML Platform Spoofing Vulnerability
After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.
Key changes6 changes
ImprovedCountry and Operator Settings Asset: COSA profiles are updated for certain mobile operators.
ImprovedServicing stack: The update includes quality improvements to the component that installs Windows updates.
FixInput Method Editor (IME): Addresses a memory leak that might occur when you close a window after a combo box has input focus.
Fixes 43 vulnerabilities, including four being exploited and three rated critical. It also adds Secure Boot protections, but can disrupt Linux dual-boot startup and profile-picture changes.
As of March 31, 2026, this update is no longer available through Microsoft release channels; Microsoft recommends updating devices to the latest Windows version.
Known issues: 2 open
After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.
Key changes43 CVEs · 6 changes
ImprovedWindows 10, version 22H2: This build includes the improvements from the supported Windows 10, version 21H2 editions.
ImprovedSecure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Windows blocks vulnerable Linux bootloaders from running. The SBAT change is not applied when Windows and Linux dual-booting is detecte...
ImprovedServicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install Microsoft updates.
Addresses four exploited vulnerabilities and adds protections against vulnerable Linux bootloaders. Some Windows-and-Linux dual-boot devices might fail to start Linux.
As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
Known issues: 1 open
After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.
Key changes39 CVEs · 9 changes
ImprovedWindows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The driver blocklist includes more drivers at risk of Bring Your Own Vulnerable Driver attacks.
ImprovedBitLocker: A BitLocker recovery screen might appear when the device starts after the July 9, 2024 update. This is more likely when device encrypti...
ImprovedSecure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Windows applies SBAT to block vulnerable Linux EFI bootloaders. Older Linux ISO images might not boot after SBAT is applied; contact yo...