Don’t miss out on our latest stories. Add PCMag as a preferred source on Google.
A software bug has prevented at least some Windows 10 PCs from receiving an extra year of security patches, following Microsoft’s end-of-support date for the OS.
Microsoft today released a fix for the problem, which affects its Extended Security Updates (ESU) program. For those who aren’t yet ready to upgrade to Windows 11 or don’t have a compatible PC, ESU allows them to continue receiving security updates for Windows 10 through October 2026, even though Microsoft officially ended support on Oct. 14.
An estimated 41.74% of global PCs still run Windows 10; another 55.17% are on Windows 11.
Microsoft has been offering the ESU program through a built-in enrollment tool in Windows Update. But apparently, the enrollment system wasn’t working for every Windows 10 PC.
“This update addresses an issue in the Windows 10 Consumer Extended Security Update (ESU) enrollment process, where the enrollment wizard may fail during enrollment,” the company wrote. “After applying this update, consumer devices should be able to successfully enroll in ESU using the ESU wizard.”
(Credit: PCMag)
The patch is an “out-of-band” update, meaning it’s rolling out even though the company has stopped officially supporting Windows 10. “This update is marked as a security update for devices that are not enrolled in the Windows 10 consumer ESU as it resolves an issue that was preventing affected customers from receiving essential security updates,” the company added.
Recommended by Our Editors
To install this update, affected users should go to the Windows Update settings page, select Check for updates, and look for an option to install update KB5071959, which requires a restart. Once the fix is installed, go to Settings > Update & Security > Windows Update, which should bring up the ESU enrollment tool.
Users can receive access to the ESU program for free by syncing their Windows backup to Microsoft OneDrive or cashing in 1,000 Microsoft Rewards points. Otherwise, they’ll need to pay $30 for security patches through Oct. 13, 2026.
Get Our Best Stories!
Stay Safe With the Latest Security News and Updates
By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
About Our Expert
Michael Kan
Senior Reporter
Experience
I’ve been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I’m currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.
Since 2020, I’ve covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I’ve combed through FCC filings for the latest news and driven to remote corners of California to test Starlink’s cellular service.
I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. Earlier this year, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.
I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I’m now following how President Trump’s tariffs will affect the industry. I’m always eager to learn more, so please jump in the comments with feedback and send me tips.
Read Full Bio
