Microsoft Releases Windows 10 KB5131096 Extended Security Update

Summary
KB5131096 brings November 2026 security fixes and bug fixes to eligible Windows 10 systems, including stricter PowerShell script-signature validation. The fixes address 1,235 vulnerabilities across Microsoft products, including an actively exploited Outlook zero-day.
Key points
- Eligible Windows 10 Enterprise LTSC and ESU users can install KB5131096 through Windows Update.
- The update moves Windows 10 to build 19045.7846 and Windows 10 Enterprise LTSC 2021 to build 19044.7846.
- It includes November 2026 Patch Tuesday fixes addressing 1,235 vulnerabilities across Microsoft products, including one actively exploited Outlook zero-day.
- Stricter UTF-8 encoding validation may cause PowerShell scripts with invalid encoding to fail signature validation; Microsoft advises correcting the encoding and signing affected scripts again.
- Microsoft says the update resolves remaining known issues affecting USB Audio Class 1.0 devices.
Article Details
- Event Type
- Microsoft released the Windows 10 KB5131096 extended security update, including November 2026 Patch Tuesday fixes and bug fixes.
- Impact
- The update brings Windows 10 to build 19045.7846 and Windows 10 Enterprise LTSC 2021 to build 19044.7846. It includes security fixes addressing vulnerabilities across Microsoft products, including one actively exploited Outlook zero-day, and fixes for printing, Remote Desktop, PowerShell script-signature validation, and USB Audio Class 1.0 issues.
Vendors
Products
Microsoft IntuneFixed: The “Specify thumbprints of certificates representing trusted .rdp publishers” policy could not be configured successfully through Microsoft Intune.OutlookThe update also includes fixes released as part of today's November 2026 Patch Tuesday, which addressed 1,235 vulnerabilities across Microsoft's products, including one actively exploited Outlook zero-day flaw.Windows 10Microsoft releases Windows 10 KB5131096 extended security updateWindows 10 Enterprise LTSC 2021After installing this update, Windows 10 will be updated to build 19045.7846, and Windows 10 Enterprise LTSC 2021 will be updated to build 19044.7846.Windows PowerShell[Windows PowerShell] This update strengthens security for PowerShell script signing and signature verification by introducing stricter encoding validation.Windows Server 2012 R2Fixed: Remote Desktop shadow connections might fail with an “Unspecified error” on Windows Server 2016 and Windows Server 2012 R2 after installing the October 14, 2026, update.Windows Server 2016Fixed: Remote Desktop shadow connections might fail with an “Unspecified error” on Windows Server 2016 and Windows Server 2012 R2 after installing the October 14, 2026, update.
