Microsoft releases Windows 10 KB5131096 extended security update
Microsoft released the Windows 10 KB5131096 extended security update, which includes this month's November 2026 Patch Tuesday fixes and a few bug fixes and changes.
Microsoft released the Windows 10 KB5131096 extended security update, which includes this month's November 2026 Patch Tuesday fixes and a few bug fixes and changes.
If you are running Windows 10 Enterprise LTSC or are enrolled in the ESU program, you can install this update as normal by going to Settings, clicking Windows Update, and manually running a 'Check for Updates.'
After installing this update, Windows 10 will be updated to build 19045.7846, and Windows 10 Enterprise LTSC 2021 will be updated to build 19044.7846.
Microsoft no longer releases new features for Windows 10, and the KB5131096 update mainly includes security updates and bug fixes.
The update also includes fixes released as part of today's November 2026 Patch Tuesday, which addressed 1,235 vulnerabilities across Microsoft's products, including one actively exploited Outlook zero-day flaw.
[Printing] - Fixed: Adding a printer published in Active Directory through Settings > Bluetooth & devices > Printers & scanners > Add device might fail with error 87,
To resolve this issue, review the affected scripts, save them using valid UTF-8 encoding with a byte order mark (BOM), and sign them again.
See what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
[Date and Time] This update adjusts daylight saving time (DST) rules for Cuba for the extended 2026-2027 DST period; this issue was introduced by the October 2026 update and does not generally affect existing printers or printing.
[Windows PowerShell] This update strengthens security for PowerShell script signing and signature verification by introducing stricter encoding validation.
For further guidance, see Encoding Guidance for Signed PowerShell Scripts.
What happened
Microsoft released the Windows 10 KB5131096 extended security update, which includes this month's November 2026 Patch Tuesday fixes and a few bug fixes and changes.
If you are running Windows 10 Enterprise LTSC or are enrolled in the ESU program, you can install this update as normal by going to Settings, clicking Windows Update, and manually running a 'Check for Updates.'
After installing this update, Windows 10 will be updated to build 19045.7846, and Windows 10 Enterprise LTSC 2021 will be updated to build 19044.7846.
What changed
Microsoft no longer releases new features for Windows 10, and the KB5131096 update mainly includes security updates and bug fixes.
The update also includes fixes released as part of today's November 2026 Patch Tuesday, which addressed 1,235 vulnerabilities across Microsoft's products, including one actively exploited Outlook zero-day flaw.
Who is affected
[Printing] - Fixed: Adding a printer published in Active Directory through Settings > Bluetooth & devices > Printers & scanners > Add device might fail with error 87,
To resolve this issue, review the affected scripts, save them using valid UTF-8 encoding with a byte order mark (BOM), and sign them again.
Why it matters
See what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
Response
[Date and Time] This update adjusts daylight saving time (DST) rules for Cuba for the extended 2026-2027 DST period; this issue was introduced by the October 2026 update and does not generally affect existing printers or printing.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.
Watch for revised vendor guidance, fixed versions and mitigation updates.