Summary
Microsoft released KB5131096, the November 2026 cumulative update for Windows 10. It targets Windows 10 Enterprise LTSC and devices enrolled in the Extended Security Updates (ESU) program. Microsoft no longer releases new features for Windows 10.
Builds
| Edition | Build |
|---|---|
| Windows 10 21H2/22H2 | 19045.7846 |
| Windows 10 Enterprise LTSC 2021 | 19044.7846 |
Install via Settings > Windows Update > Check for updates.
Security Content
The update includes the November 2026 Patch Tuesday fixes, among them an actively exploited Outlook zero-day. See our Patch Tuesday coverage.
Fixes and Changes
- Time zones: Updates Cuba's DST rules. Cuba stays at UTC-04:00 through the November 2026 and March 2027 transitions, returning to UTC-05:00 in November 2027.
- Printing: Fixes error 87 when adding an Active Directory-published printer through Settings, introduced in the October 2026 update.
- Remote Desktop: Fixes Intune configuration of the trusted .rdp publisher thumbprint policy, and "Unspecified error" failures in RDS shadow connections on Windows Server 2016 and 2012 R2 after the October 14 update.
- PowerShell: Adds stricter encoding validation for script signing. Scripts with invalid UTF-8 may now fail signature checks. Re-save them as UTF-8 with a BOM and sign them again (Microsoft support article 5135999).
Known Issues
Microsoft says remaining USB Audio Class 1.0 problems introduced by the September 2026 updates (lost audio, Code 10 errors, unresponsive volume controls) are resolved. No open known issues are listed for this update.
Recommended Actions
- Test the PowerShell signing change on any signed script libraries before broad rollout.
- Deploy to pilot rings, then production, and verify ESU enrollment on remaining Windows 10 devices.
- Plan migration to Windows 11 for anything not covered by ESU or LTSC.