Whats new on Windows 10 KB5071546 – Extended Security Update

If you’re still on Windows 10, make sure to install the update and enroll in the ESU program to stay protected through October 2026.

Steve Ballmer

December 10, 2025 Modified date: December 10, 2025

Key Changes & What’s New:

Security Fixes: Patches 57 vulnerabilities, including the important PowerShell Invoke-WebRequest zero-day (CVE-2025-54100), preventing malicious script execution from web pages.
PowerShell 5.1 Enhancement: The Invoke-WebRequest command now displays a confirmation prompt before executing the script, increasing user awareness.
Quality Improvements: Incorporates fixes and enhancements from earlier November 2025 updates (KB5071959, KB5068781).
Build Number: Updates Windows 10 to OS Build 19045.6691 (or 19044.6691 for LTSC).
ESU Program: Primarily for Windows 10 Enterprise LTSC or ESU-enrolled devices, mandatory for security.

Microsoft has released KB5071546, the Windows 10 Extended Security Update (ESU), since the operating system’s official support ended on October 14, 2025. This update is exclusively available to devices enrolled in the ESU program and upgrades.

Windows 10 version 22H2 to build 19045.6691
Windows 10 Enterprise LTSC 2021 to build 19044.6691

The most notable change in this update is an enhancement to the PowerShell 5.1 Invoke-WebRequest command, which now includes a confirmation prompt that warns about potential script-execution risks when retrieving web content.

This change addresses a remote code execution zero-day vulnerability tracked as CVE-2025-54100, where malicious scripts embedded in a webpage could be executed.

In addition, KB5071546 includes Microsoft’s December 2025 Patch Tuesday fixes, which address 57 vulnerabilities, including three zero-day flaws across its Windows, Office, and other software products.

Additionally, KB5071544 (OS Build 17763.8146) was released for Windows 10 version 1809. Both updates contain miscellaneous security fixes and general improvements to enhance overall system reliability and user experience.

However, if your PC isn’t compatible with the newer OS (Windows 11), you can enroll in the Windows 10 Extended Security Updates (ESU) program, which provides critical patches for one more year at no cost (until October 2026).

The update is now rolling out through the Windows Update settings, and users can manually check for it by navigating to Settings > Windows Update.

2025-12 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5071546)

Windows 10 KB5071546 update

Ensure your device is connected to a stable internet connection to download update files from the Microsoft server. Once done, you need to reboot your computer to apply the changes.

Alternatively, you can download the standalone installer directly from the Microsoft Update Catalog by searching for “KB5071546.”

Windows 10 KB5071546 Direct download links 64-bit and 32-bit (x86).

Locate the patch next to the correct edition and version of the operating system.
To install the update, simply run the downloaded MSU file and Windows will automatically install the cumulative update.
If you are looking for the latest Windows 10 version 22H2 ISO, click here.
In addition, you can download the latest Windows 11 ISO images here.

Contents

0.1 Uninstall Windows 10 KB5071546

1 How to Fix Common Issues with Windows 10 KB5071546

Uninstall Windows 10 KB5071546

If installing KB5071546 causes issues on your device, you can uninstall the update to revert the changes.

Uninstall KB5071546 using the Windows Update History tool

Go to Windows Settings (Windows key + I) > Update & Security > Windows Update.
From the right-hand pane, click on View Update History.
Now, click on Uninstall updates.
Select Update for Microsoft Windows (KB5071546) and press the Uninstall button.

Uninstall KB5071546 using the command line

Another quick way to uninstall this update is by using the command prompt. Here are the commands:

Open the Command Prompt (Run > cmd)
Run the following command:
wmic qfe list brief /format:table
This will show all the updates installed on the computer. Make sure KB5071546 is on the list.
To uninstall the update, run the following command
wusa /uninstall /kb:5066791

The system needs to be restarted after uninstalling the update.

In addition, Microsoft has noted that Windows 10 version 21H2 reached end of service, which means devices no longer receive monthly security and quality updates that contain protection from the latest security threats. Microsoft recommends installing the latest version 22H2 or Upgrade to Windows 11

How to Fix Common Issues with Windows 10 KB5071546

While the Windows 10 KB5071546 update brings significant improvements and fixes, some users may experience problems during or after installation. Here are proven solutions to resolve the most common issues.

Run the Windows Update Troubleshooter

The built-in troubleshooter can automatically detect and fix update-related issues.

Press Windows + I to open Settings.
Go to Update & Security > Troubleshoot.
Click Additional troubleshooters.
Select Windows Update and click Run the troubleshooter.
Follow the on-screen instructions and apply any recommended fixes.

Check Your Internet Connection

A weak or unstable internet connection can cause the update to fail or get stuck.

Use a wired Ethernet connection instead of Wi-Fi for better stability.
Restart your router or modem.
Temporarily disable VPNs or proxy servers.
Test your connection speed using a service like Speedtest

Clear the Windows Update Cache

Corrupted update files in the cache can cause installation failures.

Press Windows + R, type services.msc, and press Enter.
Right-click the Windows Update service and select Stop.
Navigate to C:\Windows\SoftwareDistribution\Download and delete all files inside the folder.
Go back to Services, right-click Windows Update, and choose Start.
Try installing the update again from Settings > Update & Security > Windows Update.

Repair Corrupt System Files

Damaged or missing system files can lead to update errors. Running SFC and DISM can help.

Open Command Prompt as administrator and run the following commands:

sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth

This will scan for corrupt system files and the Windows image for corruption and try to repair them. Let the scanning complete 100%, once done, restart your PC and try installing the update again.

Check for Driver and Software Conflicts

Outdated or incompatible drivers can cause post-update issues like crashes or slow performance.

Open Device Manager (Windows + X > Device Manager).
Look for devices with a yellow warning icon and update their drivers.
Update critical drivers (graphics, network, chipset) from the manufacturer’s website.

Windows 10 KB5071546– Frequently Asked Questions

Who qualifies for ESU and this update?
Eligible systems include Windows 10 devices on version 22H2 that enrol in the ESU programme. In certain regions, free enrolment options exist, in others, commercial options apply.

What if I don’t install KB5071546?
If you skip or fail to install the update and are enrolled in ESU, you may miss out on the first round of patched vulnerabilities. Even if you are not enrolled, your system now resides outside standard update support, exposing it to risk.

Is this update available via Windows Update only?
Yes, generally via the standard Windows Update channel for eligible systems. It may also be available via Microsoft Update Catalog for manual download.

When will the ESU support for Windows 10 end entirely?
Microsoft has not committed to an open-ended ESU timeline for Windows 10. It is a transitional programme.

{{post_title}}