KB5078885

Microsoft released cumulative update KB5078885 for Windows 10, version 22H2 as part of the March 2026 Patch Tuesday for devices enrolled in the Extended Security Updates (ESU) program.

Support for Windows 10 has ended: as of October 14, 2025, the system receives updates only through the Extended Security Updates (ESU) program. After installing the update, bugs are fixed and system stability is improved. The main changes affect Secure Boot, File History, the graphics subsystem, and Windows deployment tools.

• Security updates. This update includes security fixes and quality improvements that are also included in update KB5075912, released on February 10, 2026. The update contains various security improvements for internal OS features as of March 2026. March 2026 Patch Tuesday: Microsoft fixed 79 security issues, including two publicly disclosed zero-day vulnerabilities obtained from a trusted source.
• Windows System Image Manager. A warning dialog box has been added to help users ensure that the selected catalog file is obtained from a trusted source.
• File History. The reliability of the File History feature in Control Panel has been improved when creating backups. Backups are now correctly created for files whose names contain certain Chinese characters and characters from the Private Use Area.
• Graphics. A stability issue affecting some graphics processing unit (GPU) configurations has been resolved.
• Secure Boot. Windows quality updates now use additional data to more accurately determine which devices can automatically install new Secure Boot certificates. Determination is based primarily on diagnostic data from client devices. Due to limited data, server systems rarely qualify for automatic updates, though they are not formally excluded. Devices receive new certificates only after the system records a sufficient number of successful update signals. This ensures a controlled and phased rollout of the update.

If previous updates are already installed on the device, the system will download and install only the new fixes included in the KB5078885 package. Cumulative update 5078885 for PCs is installed automatically through Windows Update. To check, go to Settings > Update & Security and click Check for updates. A system restart is required to complete the installation. After the update, the Windows 10 build number (version 22H2) will change to 19045.7058.

Security updates: This update includes security and quality fixes equivalent to KB5075912 from February 10, 2026, plus improvements to internal OS components as of March 2026. The March 2026 Patch Tuesday addresses 79 issues, including two publicly disclosed zero-day vulnerabilities obtained from a trusted source.

Windows System Image Manager: A warning dialog has been added to help ensure the selected catalog file (.clg) is obtained from a trusted source. This prevents accidental use of suspicious or corrupted catalogs while creating offline Windows images (unattend.xml), reducing the risk of malicious settings being injected during deployment.

File History: The reliability of the File History component in Control Panel when creating backups has been improved. Files whose names contain certain Chinese characters or symbols from the Private Use Area (U+E000..U+F8FF) are now backed up correctly, addressing previous issues where such files could be skipped during backup operations.

Graphics: A stability issue affecting certain graphics processing unit (GPU) configurations has been resolved. The problem could manifest as temporary system freezes, image artifacts, or graphics subsystem failures when running resource-intensive applications or switching power-saving modes. This fix improves driver stack stability.

Secure Boot: Windows quality updates now use additional telemetry data to more accurately determine which devices can automatically install new Secure Boot certificates. Decisions are based primarily on diagnostic data from client devices. Server systems rarely qualify for automatic updates due to limited data but are not formally excluded. New certificates are issued only after the system logs enough successful update signals, ensuring a controlled phased rollout.

The last 10 Windows updates: