Microsoft ships KB5126657 to Windows 10 ESU and LTSC machines with October's Patch Tuesday fixes
Microsoft released KB5126657 for Windows 10 ESU and LTSC systems, carrying fixes from an October Patch Tuesday that covered 1,411 vulnerabilities. BleepingComputer says one was an actively exploited zero-day. We'd shorten the test ring on enrolled fleets.
The Watch · Security desk
Key figures per BleepingComputer: the October 2026 Patch Tuesday fixed 1,411 vulnerabilities across Microsoft's products, including 1 actively exploited zero-day. After installing KB5126657, Windows 10 reports build 19045.7807 and Windows 10 Enterprise LTSC 2021 reports build 19044.7807.
| Figure | Value | Note | Claim |
|---|---|---|---|
| Vulnerabilities fixed, October 2026 Patch Tuesday | 1,411 vulnerabilities | 13 | |
| Actively exploited zero-day | 1 zero-day | 14 | |
| Windows 10 build after installing KB5126657 | 19,045.7807 build | LTSC 2021 reports build 19044.7807 | 3 |
What happened
- Machines on Windows 10 Enterprise LTSC or enrolled in the ESU program install it by running a manual Check for Updates in Settings under Windows Update.
- After installation, Windows 10 reports build 19045.7807 and Windows 10 Enterprise LTSC 2021 reports build 19044.7807.
- The update enables permanent Daylight Saving Time support for British Columbia and Alberta starting in November 2026.
- Microsoft lists a known issue after the September 2026 security updates: some USB Audio Class 1.0 devices fail to start with a Code 10 error, stop producing audio or lose volume control.
Why it matters
- Who's exposed exposure The report does not identify the CVE, the affected product or the attack path for the zero-day, so exposure on Windows 10 cannot be confirmed from it.
- Who has to decide decision Sites with USB headsets or conferencing hardware have a reason to pilot KB5126657 on those devices before a broad rollout.
- What it limits constraint ReFS auditing for externally attached storage is on by default and enforcement is off, so the audit log is where admins learn what enforcement would touch before Microsoft turns it on.
BleepingComputer calls the month record-breaking [15]. The 1,411 count spans Microsoft's products, so it is not a tally of what lands on a Windows 10 machine [13]. The package itself is mainly security updates and bug fixes, because Microsoft no longer releases new features for Windows 10 [4].
In our view the actively exploited zero-day [14] justifies a shorter test ring on its own. The only known issue the source lists for this update is a USB audio fault, and it is limited to some USB Audio Class 1.0 devices [11]. Microsoft's September 14 out-of-band update fixed the 8-channel and 3D audio problems only. Other audio issues remain unresolved, and Microsoft says it is working on additional fixes [12].
The update also repairs two reliability faults. One kept some Storage Spaces Direct virtual disks offline after a Windows update, because valid tiered storage metadata was misread as invalid during recovery [7]. The other could make File History fail to back up or restore to an external drive or network location, and show a "Reconnect your drive" message even when a working drive was attached [8].
The Secure Boot certificate rollout continues through Windows Update. Microsoft uses what it calls high-confidence targeting data to pick devices that are ready to receive the new certificates automatically [6]. The package also adds a Manitoba Standard Time zone, UTC-5:00 [10].
What to watch
- Whether Microsoft or a third party attaches a CVE and an affected product to the October zero-day, which would settle Windows 10 exposure.
- Whether Microsoft ships the additional USB Audio Class 1.0 fixes it says it is working on.
- Whether the ReFS enforcement controls for external drives move from disabled to default-on in a later update; KB5130741 covers the change.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+15
- Incentives
- Insufficient
- Confidence60
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Microsoft released the Windows 10 KB5126657 extended security update, which includes the October 2026 Patch Tuesday fixes plus a few bug fixes and changes.
- [2]
Windows 10 Enterprise LTSC or ESU-enrolled systems can install the update by going to Settings, Windows Update, and manually running Check for Updates.
- [3]
After installing KB5126657, Windows 10 is updated to build 19045.7807 and Windows 10 Enterprise LTSC 2021 to build 19044.7807.
- [4]
Microsoft no longer releases new features for Windows 10, and KB5126657 mainly includes security updates and bug fixes.
- [5]
The update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls stay disabled by default to give administrators time to evaluate and prepare for future security hardening changes (see KB5130741).
- [6]
The update continues deployment of updated Secure Boot certificates, using the latest high-confidence targeting data to identify eligible devices that can automatically receive the new certificates; deployment through Windows Update remains ongoing.
- [7]
The update addresses an issue that might cause some Storage Spaces Direct virtual disks to remain offline after installing a Windows update, when valid tiered storage metadata is incorrectly identified as invalid during recovery.
- [8]
The update addresses an issue where File History might fail to back up or restore files to an external drive or network location, and might incorrectly display a "Reconnect your drive" message even when a compatible backup drive is connected and working.
- [9]
The update enables permanent Daylight Savings Time support for British Columbia and Alberta starting in November 2026.
- [10]
The update introduces a new time zone, Manitoba Standard Time, (UTC-5:00) Manitoba.
- [11]
Microsoft says there is a known issue affecting some USB Audio Class 1.0 devices after installing the September 2026 Windows security updates: affected devices may fail to start with a Code 10 error in Device Manager, stop producing audio, or have unresponsive volume controls and sound settings.
- [12]
Microsoft partially fixed the USB audio issue in an emergency out-of-band update released on September 14, which addressed problems with 8-channel and 3D audio modes. Other audio issues remain unresolved and Microsoft says it is working on additional fixes.
- [13]
The October 2026 Patch Tuesday fixed 1,411 vulnerabilities across Microsoft's products.
- [14]
The October 2026 Patch Tuesday fixes included one actively exploited zero-day flaw.
- [15]
BleepingComputer describes the October 2026 Patch Tuesday as record-breaking.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
1 independent publisher whose own reporting we read for this story.
- bleepingcomputer.comMicrosoft releases Windows 10 KB5126657 extended security update
1 article · October 13, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.