As usual, Microsoft has fixed numerous security vulnerabilities in Windows 10 and Windows 11 with the big November patch this week. But this is the first big month forward for Windows 10 users, who should heed the following statement from Microsoft in the wake of Windows 10 ending official support back in October:
The Extended Security Updates (ESU) program for Windows 10 provides customers with a more secure option to continue using their Windows 10 PCs after October 14, 2025, while they transition to Windows 11. The ESU program helps reduce the risk of malware and cybersecurity attacks by providing access to critical and important security updates […] for devices running Windows 10, version 22H2.
ESU enrollment does not provide other types of fixes, feature improvements, or product enhancements. It also does not come with technical support. […] You can enroll in ESU any time until the program ends on October 13, 2026.
The first Windows 10 ESU update is here
The first ESU update for Windows 10 PCs is update KB5068781, officially known as “2025-11 Cumulative Update for Windows 10 Version 22H2 (KB5068781)” and now available to those enrolled in the ESU.
This is the first security update for Windows 10 PCs, and you should install it (as well as all future security updates) to keep your system guarded against ongoing risks and threats. These updates will keep coming over the next year until Microsoft ends the ESU program.
What does update KB5068781 do?
With the ESU program being a source of security updates, Windows 10 PCs will no longer receive feature updates. That means no new features will be coming to your Windows 10 PC anymore.
Update KB5068781 fixes 63 security vulnerabilities, one of which is already being actively exploited by hackers in the wild and is therefore considered a zero-day vulnerability. The update also fixes a bug that issued a false warning on PCs eligible for the ESU program that they had reached the end of Windows support. Microsoft recently released an emergency update that fixed that false warning.
How to get the KB5068781 update
As soon as your Windows 10 PC is registered for ESU, it will automatically install KB5068781 (about 200MB) because it’s an important security update. You don’t need to install it manually. After installing this update, your Windows 10 PC will have Build Number 19045.6575.
Update KB5068781 is also available for manual download via the Microsoft Update Catalog. Depending on your system architecture, this download ranges in size from 430MB to 776MB. But again, this manual download isn’t necessary for most—only in exceptional cases.
Further reading: How to upgrade from Windows 10 to Windows 11
