April 19, 2026—KB5091575 (OS Build 20348.5024) Out-of-band

April 19, 2026—KB5091575 OS Build 20348.5024 Out-of-band ​​​​​​​Announcements and messages This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices. Windows Secure Boot certificate expiration Windows Secure Boot certificate...

April 14, 2026—KB5082127 (Monthly Rollup)

April 14, 2026—KB5082127 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure all Subset of endpoints for ESU only ar...

April 14, 2026—KB5082052 (OS Build 22631.6936)

April 14, 2026—KB5082052 OS Build 22631.6936 ​​​​​This cumulative update for Windows 11, version 23H2 KB5082052, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security update...

February 10, 2026—KB5075970 (Monthly Rollup)

February 10, 2026—KB5075970 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make sure all Subset of endpoints for ESU...

January 13, 2026—KB5073698 (Monthly Rollup)

January 13, 2026—KB5073698 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure all Subset of endpoints for ESU only...

January 13, 2026—KB5073724 (OS Builds 19045.6809 and 19044.6809)

January 13, 2026—KB5073724 OS Builds 19045.6809 and 19044.6809 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business...

December 18, 2025—KB5074975 (OS Build 17763.8148) Out-of-band

December 18, 2025—KB5074975 OS Build 17763.8148 Out-of-band Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devic...

December 18, 2025—KB5074974 (OS Build 14393.8692) Out-of-band

December 18, 2025—KB5074974 OS Build 14393.8692 Out-of-band Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devic...

November 11, 2025—KB5068905 (Monthly Rollup)

November 11, 2025—KB5068905 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make sure all Subset of endpoints for ESU...

November 11, 2025—Hotpatch KB5068840 (OS Build 20348.4346)

November 11, 2025—Hotpatch KB5068840 OS Build 20348.4346 To learn more about differences between security updates, optional non-security preview updates, out-of-band OOB updates, and continuous innovation, see Windows monthly updates explained. For information on Windows update terminology, see t...

KB5070247: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 11, 2025

KB5070247: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 11, 2025 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these...

October 14, 2025—KB5066877 (Security-only update)

October 14, 2025—KB5066877 Security-only update Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the...

October 14, 2025—KB5066876 (Security-only update)

October 14, 2025—KB5066876 Security-only update Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the...

September 9, 2025—Hotpatch KB5065474 (OS Build 26100.6508)

September 9, 2025—Hotpatch KB5065474 OS Build 26100.6508 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices...

September 9, 2025—KB5065427 (OS Build 14393.8422)

September 9, 2025—KB5065427 OS Build 14393.8422 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the...

August 19, 2025—KB5066187 (OS Build 17763.7683) Out-of-band

August 19, 2025—KB5066187 OS Build 17763.7683 Out-of-band Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices...