Windows 10 Enters Its ESU Era: The First Extended Security Update Arrives With Critical Fixes and a Patch for the False Support Alert

When Microsoft officially ended support for Windows 10 on October 14, 2025, many users wondered what life would look like for the operating system going forward. Windows 10 still powers millions of devices worldwide, and even though Microsoft has moved its primary focus to Windows 11 and future AI-centric versions of Windows, the company had already announced a transition plan: the Extended Security Updates (ESU) program.

With support now over, Windows 10 will no longer receive feature improvements, design changes, or major enhancements — but users who choose to enroll in ESU will continue receiving monthly security updates to protect against vulnerabilities. And now, the first of those updates has arrived.

Let’s dive into what this first ESU update brings, what issues it fixes, which vulnerabilities it addresses, and why this matters for anyone still running Windows 10.


1. A New Chapter for Windows 10 Begins

Before reviewing the update itself, it’s important to understand where Windows 10 now stands. Since official support ended in mid-October, Microsoft has shifted the OS into a phase where only critical maintenance is provided — and only to systems enrolled in the ESU program.

This means:

  • No more new features
  • No interface changes
  • No quality-of-life improvements
  • No new versions of Windows 10

Instead, the focus now is entirely on keeping the operating system secure.

So far, we’ve done a good job laying the foundation. Now let’s move to the specifics of the first ESU update.


2. KB5068781 — The First Windows 10 ESU Update

Microsoft has now released KB5068781, officially recognized as the first Extended Security Update for Windows 10 after support ended.

To find it on your system:

  1. Open Settings
  2. Navigate to Update & Security
  3. Go to Windows Update
  4. Select View update history

If enrolled in ESU, you will see KB5068781 listed there.

This update installs automatically because ESU patches are mandatory — Microsoft wants all ESU-enrolled devices to stay protected with minimal delay.


3. A Quick Look at the Updated Build Number

Before discussing what the update fixes, let’s take a moment to look at the new system build number.

To check this:

  1. Open Run (Win + R)
  2. Type winver
  3. Press Enter

After installing KB5068781, Windows 10 Version 22H2 should show:
OS Build 19045.6575

This confirms that the ESU update has been successfully applied.


4. Understanding What ESU Updates Actually Provide

Let’s move to the next important discussion — what ESU updates include.

Microsoft has been clear:
ESU updates contain only security fixes and essential maintenance.

No new features will be introduced. No system redesigns. No “hidden surprises.”
The job of ESU is simple: keep the operating system secure while giving organizations and home users more time before migrating.

But even though ESU is “security-only,” that doesn’t mean nothing else is improved. Sometimes Microsoft bundles small fixes or corrects known issues alongside security patches — and that’s exactly what happened this month.


5. 34 Vulnerabilities Patched — Including Two Critical Ones

Now let’s talk about what this first ESU update actually fixed.

For the month, Windows 10 22H2 received patches for 34 security vulnerabilities:

  • 2 Critical vulnerabilities
  • 32 Important vulnerabilities

It’s helpful to understand the difference:

  • Critical vulnerabilities typically allow remote code execution or deep system compromise.
  • Important vulnerabilities usually involve privilege escalation, spoofing, denial of service, or information disclosure.

Let’s walk through each critical security issue.


The Two Critical Vulnerabilities Patched

Before listing them, let’s understand their significance. Critical vulnerabilities allow attackers to do far more damage compared to regular ones — sometimes even remotely without user interaction.

1. GDI+ Remote Code Execution Vulnerability

This would have allowed attackers to exploit the graphics component responsible for rendering images. In practical terms, a maliciously crafted file could lead to code execution on the system.

2. DirectX Graphics Kernel Elevation of Privilege Vulnerability

This flaw could let attackers elevate their system privileges, gaining deeper access than intended — potentially taking complete control of the PC.

Both issues have now been patched through KB5068781.


6. Microsoft Fixes the “End of Support” Alert Bug

One of the most interesting parts of this update is the fix for a bug introduced earlier in October.

After installing the final non-ESU Windows 10 update (KB5066791), many users began seeing messages stating:

“Your version of Windows has reached the end of support.”

The issue?
This message appeared incorrectly — even on systems that were eligible for ESU or had already started the enrollment process.

Microsoft acknowledged the fault soon after and marked it as a known issue. With the release of KB5068781, the company has finally resolved the problem.

This fix ensures:

  • The “end of support” message no longer shows incorrectly
  • Systems enrolled in ESU will reflect accurate support status
  • Windows Update behaves consistently for ESU users

If you were seeing this alert despite being enrolled, this update should correct it automatically.

Let’s move forward to another part of this update that often goes unnoticed.


7. Servicing Stack Update Included

Alongside the ESU update, Microsoft also refreshed the Servicing Stack Update (SSU). This is the internal component responsible for installing future Windows updates.

Why does this matter?

Because a broken servicing stack can prevent updates from installing correctly. By updating it alongside ESU patches, Microsoft ensures smoother updates for the coming months.


8. Understanding What This Means for Windows 10 Users

As we move deeper into the ESU era, it’s important to understand what this first update represents.

This update marks the beginning of a three-year security maintenance period. During this time:

  • Windows 10 remains safe to use (with ESU)
  • No new UX features will arrive
  • Stability remains unchanged
  • Patch Tuesday updates will continue once per month

Some users may be hoping for small feature improvements, but realistically, Microsoft’s development focus is now entirely on Windows 11, Copilot+, AI-enhanced features, and future Windows versions.

Windows 10 ESU, therefore, is maintenance mode only — not an active development platform.


9. Should You Still Use Windows 10 in 2026?

Let’s shift gears and discuss something many readers might wonder.

Is Windows 10 still worth using?

Here are some things to keep in mind:

  • With ESU, Windows 10 remains secure
  • Most apps will continue supporting it for several years
  • Older PCs run Windows 10 far better than Windows 11
  • Windows 10 remains extremely stable and mature
  • Businesses may prefer it due to compatibility and familiarity

However:

  • No new features will arrive
  • Software vendors may slowly start shifting focus
  • Newer Microsoft experiences (especially AI) will prioritize Windows 11

If your hardware supports Windows 11, upgrading eventually is a wise long-term move — but it’s not urgent thanks to ESU.


10. Frequently Asked Questions

Let’s move into a helpful Q&A section to clarify common concerns.

Q1. Do I need to manually install KB5068781?

No. ESU updates are mandatory and install automatically.


Q2. What happens if I’m not enrolled in ESU?

You will not receive KB5068781 or any future security updates. Your PC remains unsupported.


Q3. Does ESU include feature updates?

No. ESU only delivers security fixes and minor maintenance corrections.


Q4. Is Windows 10 still safe to use?

Yes — but only with ESU. Unsupported systems are exposed to vulnerabilities.


Q5. Where can I learn more about ESU?

Microsoft maintains an official documentation page for ESU enrollment and support.
Official ESU Info: https://learn.microsoft.com/windows/


11. Final Thoughts

The release of KB5068781 marks an important milestone in the post-support life of Windows 10. While the OS will no longer evolve with new features or modern enhancements, Microsoft is keeping its promise to maintain security for those who choose ESU.

This first update delivers essential fixes, patches two major vulnerabilities, corrects a misleading end-of-support alert, and updates the servicing stack for smoother updates ahead. For anyone still relying on Windows 10 — whether at home or in a business environment — these updates ensure that the system remains reliable and secure for the foreseeable future.

Even though Windows 11 and the next generation of AI-driven Windows experiences are in the spotlight, Windows 10 continues to serve millions of users. ESU allows it to remain stable, functional, and safe during this transition period.

If you’re enrolled in the ESU program, make sure your system receives this update promptly. And if you’re not enrolled yet, consider doing so to continue receiving critical protections.


#Windows10 #ESU #KB5068781 #MicrosoftUpdates #PatchTuesday #Cybersecurity #WindowsSupport #TechNews

Visited 12 times, 1 visit(s) today

Emily Carter

Emily Carter

Emily is a Windows power user and technical writer from the UK. She has spent 7+ years in IT consulting, helping businesses migrate to new Windows versions, optimize performance, and solve common errors. Emily’s articles combine professional experience with step-by-step clarity, making even registry hacks accessible to everyday users.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.