Microsoft has released KB5075912, an Extended Security Update (ESU) for Windows 10 versions 22H2 and 21H2, targeting OS builds 19045.6937 and 19044.6937.
This patch addresses critical vulnerabilities and prepares systems for upcoming Secure Boot certificate expirations.
Update Overview
Released on February 10, 2026, KB5075912 combines prior fixes from January updates like KB5073724, KB5077796, and KB5078129.
It includes a Servicing Stack Update (SSU) KB5077456 for better reliability on Azure-hosted devices and certificate validation.
Users should install via Windows Update or the Microsoft Update Catalog, ensuring the latest SSU is present first.
Key non-security fixes cover Chinese font compliance, Secure Launch shutdown issues on VSM-enabled PCs, File Explorer folder renaming, and GPU stability.
It also rolls out new Secure Boot certificates gradually based on device update history to avoid boot failures by June 2026.
This ESU tackles flaws from Microsoft’s February 2026 Patch Tuesday, including six zero-days exploited in the wild.
Notable issues involve security feature bypasses in Windows Shell and MSHTML, plus elevation of privilege in Remote Desktop Services. No known issues post-install, but admins must review Secure Boot guidance.
| CVE ID | Title | CVSS Score | Exploitation Status | Max Severity |
|---|---|---|---|---|
| CVE-2026-21510 | Windows Shell Security Feature Bypass | 8.8 | Actively Exploited (Zero-Day) | Important |
| CVE-2026-21513 | MSHTML Framework Security Feature Bypass | 8.8 | Actively Exploited | Important |
| CVE-2026-21533 | Windows Remote Desktop Services Elevation of Privilege | 7.8 | Actively Exploited | Important |
| CVE-2026-21519 | Desktop Window Manager Elevation of Privilege | 7.8 | Actively Exploited | Important |
| CVE-2026-21525 | Windows Remote Access Connection Manager Denial of Service | 6.2 | Actively Exploited | Important |
| CVE-2026-21514 | Microsoft Word Security Feature Bypass | 7.8 | Actively Exploited | Important |
Apply immediately, especially for ESU customers delaying Windows 11 migration. Use EKB KB5015684 for version 22H2 upgrades.
Monitor @WindowsUpdate for health dashboard news, and check the Security Update Guide for full CVE details. This ensures protection against real-world attacks while maintaining boot security.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.
%20(1).webp?fit=1600,900&ssl=1&description=This patch addresses critical vulnerabilities and prepares systems for upcoming Secure Boot certificate expirations.){kind=link}