Microsoft has released cumulative update KB5099539 (Build 19045.7548) for Windows 10 version 22H2 as part of the July 2026 Patch Tuesday. The package is intended for devices based on x86, x64 (AMD64), and ARM64 processors enrolled in the Extended Security Updates (ESU) program. The update includes various security improvements for internal OS functions. In total, Microsoft fixed 570 security issues, including three zero-day vulnerabilities.
- Third-party applications and OLE Automation. Fixed an issue introduced after installing the June security update. Some applications using OLE Automation to interact with Microsoft Office were unable to launch Office or open documents.
- File Explorer and OneDrive. Fixed an issue where the OneDrive shortcut did not work when launching File Explorer as an administrator.
- Recycle Bin. Fixed a bug where the permanent deletion confirmation dialog displayed the internal file name from the Recycle Bin instead of the original name.
- Hotkeys. Modified behavior when unregistering and clearing key combinations. In rare cases, some built-in Windows functions may temporarily stop responding to certain combinations. Restarting the application usually helps.
- Dynamic Secure Boot indication. A dynamic indication of the Secure Boot status has appeared in the Windows Security app. Windows quality updates now include additional high-confidence data for device targeting, expanding the coverage of devices that can automatically receive new Secure Boot certificates. Devices receive new certificates only after demonstrating a sufficient number of successful update signals, allowing for a controlled and phased deployment.
- Network security hardening. Security requirements for registering TDI transports have been strengthened. Applications using sockets via unregistered third-party TDI transports may stop working after installing the update. Registered transports are not affected by this change.
- RDP security. Support for SHA-2 certificate fingerprints has been added for trusted RDP publishers. SHA-1 is retained for compatibility for now, but will be removed in the future. Microsoft recommends transitioning to SHA-256 or a stronger algorithm as soon as possible.
To install the update, open Settings, go to Update & Security, and click Check for updates. Cumulative package KB5099539 will install automatically via Windows Update.
| Feature / Change | Performance Impact (Increase/Decrease) | Optimization | PC Speed | Gaming Optimization |
|---|---|---|---|---|
| OLE Automation fix for third-party applications (June update regression) | 🟢 +5-15% app launch speed (fix restores broken functionality) | 🟢 High — OLE calls to Office now execute without failure, reducing retry overhead | 🟢 Noticeable improvement for Office-integrated workflows | ⚪ No direct impact |
| OneDrive shortcut fix in admin-mode File Explorer | 🟢 Negligible raw performance, but eliminates failed I/O attempts | 🟡 Medium — removes broken code path when elevated | 🟡 Marginal — smoother navigation for admins | ⚪ No impact |
| Recycle Bin deletion dialog showing correct original filename | ⚪ No performance change | 🟡 Low — UI accuracy fix, prevents user confusion and misclicks | ⚪ No impact | ⚪ No impact |
| Hotkey unregistration/clearing behavior modification | 🟡 -1-3% momentary input lag in rare edge cases until app restart | 🟡 Medium — more robust cleanup prevents stuck registrations | 🟡 Slight temporary degradation possible; restart resolves it | 🟡 Low — rare combos like Win+Shift may briefly fail, restart helps |
| Dynamic Secure Boot indication in Windows Security | ⚪ No performance change | 🟢 High — phased certificate rollout reduces brick risk, improves boot integrity | ⚪ No direct speed change; safer updates | 🟡 Low — ensures anti-cheat compatibility via updated Secure Boot certs |
| Network security hardening (TDI transport registration enforcement) | 🟡 Possible 0-5% network I/O overhead increase for newly filtered legacy apps | 🟢 High — blocks unregistered TDI transports, reducing attack surface | 🟡 Minimal — unaffected for registered transports; legacy apps may break | 🔴 Potential negative — old VPN/game anti-cheat using unregistered TDI may stop working |
| RDP SHA-2 certificate fingerprint support | 🟢 +2-10% faster RDP connection setup (SHA-2 verification is more efficient than SHA-1) | 🟢 High — stronger hash algorithm improves connection security and integrity checks | 🟢 Minor speed improvement during remote desktop authentication | 🟡 Low — improves remote game streaming security (e.g., Moonlight/Parsec via RDP wrapper) |
Official announcement on the Microsoft website.
The last 10 Windows updates:
| Update | Build | Version | Windows | Channel | Date |
|---|---|---|---|---|---|
| KB5126657 | 19045.7807 | 22H2 (ESU) | Windows 10 | Stable | 2026-10-13 |
| KB5126653 | 22631.7652 | 23H2 | Windows 11 | Stable | 2026-10-13 |
| KB5127646 | 28000.3231 | 26H1 | Windows 11 | Stable | 2026-10-13 |
| KB5127648 | 26300.9711 | 26H2 | Windows 11 | Stable | 2026-10-13 |
| KB5127757 | 28120.3181 | 26H1 | Windows 11 | Experimental | 2026-10-07 |
| KB5127758 | 26220.9606 | 25H2 | Windows 11 | Beta | 2026-10-07 |
| KB5127754 | 28020.3172 | 26H1 | Windows 11 | Beta | 2026-10-07 |
| KB5127753 | 26340.9616 | 26H2 | Windows 11 | Experimental | 2026-10-07 |
| KB5124192 | 28120.3151 | 26H1 | Windows 11 | Experimental | 2026-10-02 |
| KB5124196 | 28020.3142 | 26H1 | Windows 11 | Beta | 2026-10-02 |