Key Changes & What’s New:
- Security Fixes: Patches 79 vulnerabilities, and two publicly disclosed zero-day vulnerabilities including Elevation of privilege in SQL Server and Denial-of-service vulnerability in .NET.
- Secure Boot Certificate Updates: Includes data that enables devices to automatically receive new certificates to ensure Secure Boot continues to function securely.
- Windows System Image Manager: This update adds a warning dialog to help users confirm that the selected catalog file comes from a trusted source.
- Build Number: Updates Windows 10 to OS Build 19045.7058 (or 19044.7058 for LTSC).
- ESU Program: Primarily for Windows 10 Enterprise LTSC or ESU-enrolled devices, mandatory for security.
Microsoft has released KB5078885, the Windows 10 Extended Security Update (ESU), since the operating system’s official support ended on October 14, 2025. This update is exclusively available to devices enrolled in the ESU program and upgrades.
- Windows 10 version 22H2 to build 19045.7058
- Windows 10 Enterprise LTSC 2021 to build 19044.7058
Contents
Windows 10 KB5078885 Update
The update resolves a critical GPU stability issue affecting certain graphics configurations, which previously led to crashes and interface problems such as unresponsive Start menus and taskbars. By improving how Windows interacts with specific GPUs, the update aims to provide a more reliable desktop experience, particularly on systems that were prone to sudden hangs or UI freezes.
KB5078885 also strengthens the operating system’s defenses at boot time. Under the Secure Boot 2023 initiative, Windows now uses updated Secure Boot certificates to replace expiring ones, incorporating stronger SHA-256 verification. This helps protect against boot‑level attacks by ensuring only trusted, properly signed code can run during the startup process.
File backup and data protection also see meaningful improvements. The update enhances File History so it can successfully back up files whose names contain specific Chinese characters and Private Use Area (PUA) characters. This change improves compatibility for users and organizations that rely on international or specialized naming conventions, reducing failures or skipped files in backup jobs.
To support more secure deployment workflows, KB5078885 adds a new warning dialog to Windows System Image Manager. Administrators are now prompted to confirm that catalog files originate from trusted sources. This extra verification step helps reduce the risk of tampering with deployment images and configuration files used in automated or large‑scale rollouts.
The update also fixes an issue that affected power management on systems with System Guard Secure Launch enabled. Previously, some devices could not shut down or hibernate correctly when this advanced security feature was enabled. With this release, those systems can once again power off or hibernate as expected without requiring security trade‑offs.
In addition, KB5078885 includes Microsoft’s March 2026 Patch Tuesday fixes, which address 78 vulnerabilities, including two publicly disclosed zero-day vulnerabilities.
Additionally, KB5078752 (OS Build 17763.8511) was released for Windows 10 version 1809. Both updates contain miscellaneous security fixes and general improvements to enhance overall system reliability and user experience.
However, if your PC isn’t compatible with the newer OS (Windows 11), you can enroll in the Windows 10 Extended Security Updates (ESU) program, which provides critical patches for one more year at no cost (until October 2026).
How to install Windows 10 KB5078752
The update is now rolling out via Windows Update, and users can manually check for it by navigating to Settings > Windows Update.
2026-03 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5078885)
Ensure your device is connected to a stable internet connection to download update files from the Microsoft server. Once done, you need to reboot your computer to apply the changes.
Alternatively, you can download the standalone installer directly from the Microsoft Update Catalog by searching for “KB5078885.”
Windows 10 KB5078885 Direct download links 64-bit and 32-bit (x86).
- Locate the patch next to the correct edition and version of the operating system.
- To install the update, simply run the downloaded MSU file and Windows will automatically install the cumulative update.
- If you are looking for the latest Windows 10 version 22H2 ISO, click here.
- In addition, you can download the latest Windows 11 ISO images here.
Uninstall Windows 10 KB5078885
If installing KB5078885 causes issues on your device, you can uninstall the update to revert the changes.
Uninstall KB5078885 using the Windows Update History tool
- Go to Windows Settings (Windows key + I) > Update & Security > Windows Update.
- From the right-hand pane, click on View Update History.
- Now, click on Uninstall updates.
- Select Update for Microsoft Windows (KB5078885) and press the Uninstall button.
Uninstall KB5078885 using the command line
Another quick way to uninstall this update is by using the command prompt. Here are the commands:
- Open the Command Prompt (Run > cmd)
- Run the following command:
wmic qfe list brief /format:table - This will show all the updates installed on the computer. Make sure KB5078885 is on the list.
- To uninstall the update, run the following command
wusa /uninstall /kb:5073724
The system needs to be restarted after uninstalling the update.
In addition, Microsoft has noted that Windows 10 version 21H2 reached end of service, meaning devices no longer receive monthly security and quality updates that protect against the latest security threats. Microsoft recommends installing the latest version 22H2 or Upgrade to Windows 11
How to Fix Common Issues with Windows 10 KB5078885
While the Windows 10 KB5078885 update brings significant improvements and fixes, some users may experience problems during or after installation. Here are proven solutions to resolve the most common issues.
Run the Windows Update Troubleshooter
The built-in troubleshooter can automatically detect and fix update-related issues.
- Press Windows + I to open Settings.
- Go to Update & Security > Troubleshoot.
- Click Additional troubleshooters.
- Select Windows Update and click Run the troubleshooter.
- Follow the on-screen instructions and apply any recommended fixes.
Check Your Internet Connection
A weak or unstable internet connection can cause the update to fail or get stuck.
- Use a wired Ethernet connection instead of Wi-Fi for better stability.
- Restart your router or modem.
- Temporarily disable VPNs or proxy servers.
- Test your connection speed using a service like Speedtest
Clear the Windows Update Cache
Corrupted update files in the cache can cause installation failures.
- Press Windows + R, type services.msc, and press Enter.
- Right-click the Windows Update service and select Stop.
- Navigate to C:\Windows\SoftwareDistribution\Download and delete all files inside the folder.
- Go back to Services, right-click Windows Update, and choose Start.
- Try installing the update again from Settings > Update & Security > Windows Update.
Repair Corrupt System Files
Damaged or missing system files can lead to update errors. Running SFC and DISM can help.
Open Command Prompt as administrator and run the following commands:
- sfc /scannow
- DISM /Online /Cleanup-Image /RestoreHealth
This will scan for corrupt system files and the Windows image for corruption and try to repair them. Let the scan complete 100%. Once it’s done, restart your PC and try installing the update again.
Check for Driver and Software Conflicts
Outdated or incompatible drivers can cause post-update issues like crashes or slow performance.
- Open Device Manager (Windows + X > Device Manager).
- Look for devices with a yellow warning icon and update their drivers.
- Update critical drivers (graphics, network, chipset) from the manufacturer’s website.
Windows 10 KB5078885 – Frequently Asked Questions
Eligible systems include Windows 10 devices on version 22H2 that enrol in the ESU programme. In certain regions, free enrolment options exist, in others, commercial options apply.
If you skip or fail to install the update and are enrolled in ESU, you may miss out on the first round of patched vulnerabilities. Even if you are not enrolled, your system now resides outside standard update support, exposing it to risk.
Yes, generally via the standard Windows Update channel for eligible systems. It may also be available via Microsoft Update Catalog for manual download.
Microsoft has not committed to an open-ended ESU timeline for Windows 10. It is a transitional programme.
Also read:
- Difference Between Windows 10 Feature Updates and Cumulative Updates
- Windows Update won’t download or fails to install on Windows 10 (Solved)
- How to Share Files and Printers Between Two Windows 10 Computers
- Windows 10 keeps shutting down and restarting automatically. Try these solutions
- Complete Review of Microsoft Windows 10 Operating System
