Windows 10 KB5131096 is live — the final extended security update for Windows 10 Enterprise LTSC and ESU subscribers, released Tuesday, November 10, 2026. It carries build 19045.7846 (19044.7846 for LTSC 2021), and delivers the full November 2026 Patch Tuesday slate: 1,235 fixes across Microsoft’s product stack, including a zero-day vulnerability actively exploited in Outlook.
No new features. No UI tweaks. Just security patches, daylight-saving rule updates, and three specific bug fixes, one of them long overdue. The update is installable now via Settings > Windows Update > Check for Updates, but only for users still covered under the Extended Security Updates (ESU) program or running Windows 10 Enterprise LTSC.
Everyone else, including Windows 10 Home, Pro, and Education users, lost official support on October 14, 2025. That cutoff remains absolute. This isn’t a reprieve. It’s maintenance for the last remaining supported cohort.
The Cuba DST fix adjusts clocks for the extended 2026–2027 period: the island stays on UTC−04:00 through November 2027, skipping this year’s November and next year’s March transitions entirely. Then it reverts to UTC−05:00 in November 2027 and resumes its standard biannual schedule in 2028. The printer bug, error 87 (“The parameter is incorrect”) when adding Active Directory–published printers via Settings, was introduced in October’s update.
It didn’t break existing printers. It just blocked new ones from being added through the modern interface. The PowerShell change is stricter, not broader: signature validation now rejects scripts with invalid UTF-8 encoding, even if they previously passed. Microsoft says affected scripts must be resaved with valid UTF-8 and a byte order mark (BOM), then resigned.
No workaround is offered. And yes, the USB Audio Class 1.0 issues are finally closed. September’s security rollouts broke some legacy audio devices: no sound, Code 10 errors, frozen volume sliders. Microsoft shipped an emergency out-of-band patch on September 14 for 8-channel and 3D modes.
Today’s update resolves the rest. This is the end of the line for Windows 10 as a supported OS. KB5131096 is not a preview. Not a beta.
Not a stopgap. It’s the last scheduled ESU release. Microsoft’s public documentation confirms no further updates will follow. Users still on Windows 10 outside LTSC or ESU are now running unsupported, unpatched code, including against that actively exploited Outlook flaw.
Windows 10 release date? It was October 2015. Windows 10 update? This is the final one.
Microsoft 365 subscribers aren’t shielded, the Outlook zero-day affects standalone Outlook clients, not just web or M365-integrated versions. Next: Windows 11 25H2 and 26H2 both receive their November 2026 Patch Tuesday updates today, too, but those are separate releases, tracked under different KB numbers and builds. They’re not part of this ESU package.
Windows 10’s chapter closes. The rollout is complete.
SDFiled by The Software Desk
Apps, platforms, operating system releases, security fixes and the features arriving in them.
More from this desk →
Be the first to comment
Join the argument. No password, just your email or a passkey.