Microsoft has released the Windows 10 KB5078885 extended security update, which addresses vulnerabilities identified during the March 2026 Patch Tuesday. This update resolves two zero-day vulnerabilities and a critical issue preventing certain devices from shutting down properly. Users of Windows 10 Enterprise LTSC or those in the ESU program can install it via Settings under Windows Update. The update upgrades Windows 10 to build 19045.7058 and Windows 10 Enterprise LTSC 2021 to build 19044.7058.
The update focuses on security enhancements and bug fixes, addressing a total of 79 vulnerabilities, including two actively exploited ones. Key fixes include:
- A new warning dialog in Windows System Image Manager for confirming trusted catalog files.
- Enhancements to File History for backing up files with specific Chinese and Private Use Area characters.
- Stability improvements for specific GPU configurations.
- Additional high-confidence device targeting data for Secure Boot certificates.
- Adjustments to Chinese fonts for compliance with GB18030-2022A standards.
- A fix for Secure Launch-capable PCs with Virtual Secure Mode unable to shut down or hibernate after a previous security update.
- Resolution of an issue affecting folder renaming with desktop.ini files in File Explorer.
The update also addresses a known issue preventing Windows 10 devices from shutting down or hibernating when System Guard Secure Launch is enabled. Microsoft is deploying new Secure Boot certificates to replace those expiring in June 2026, which are crucial for validating boot components and preventing security risks. There are currently no known issues associated with this update.