Microsoft: Emergency Windows 10 update fixes ESU enrollment bug

Microsoft has released an emergency out-of-band update to address a known issue preventing Windows 10 users from enrolling in the Extended Security Updates (ESU) program.

"This update addresses an issue in the Windows 10 Consumer Extended Security Update (ESU) enrollment process, where the enrollment wizard may fail during enrollment," Microsoft explained.

"This update is marked as a security update for devices that are not enrolled in the Windows 10 consumer ESU as it resolves an issue that was preventing affected customers from receiving essential security updates."

Once the KB5071959 cumulative update is installed, affected users should be able to successfully enroll their Windows 10 systems in the ESU program using the ESU wizard.

After the enrollment process is complete, the devices will begin receiving Extended Security Updates via the Windows Update service.

If your personal device runs Windows 10 and you have not yet enrolled it in the Consumer ESU program, follow these steps to ensure you continue receiving security updates:

1. Navigate to the Windows Update settings page and select “Check for updates.”
2. Install the out-of-band (OOB) update (KB5071959) and reboot your device to complete installation.
3. Run the Windows 10 Consumer ESU enrollment wizard to enroll your device in the ESU program.
4. After you have successfully enrolled your device, navigate once more to the Windows Update settings page and select “Check for updates.”
5. Your device will now be offered the latest monthly security update. Install the update and reboot your device to complete installation.

Microsoft has released this emergency update today because KB5068781, the first extended security update, was also pushed to ESU-enrolled devices today.

Windows 10 reached the end of support almost one month ago, on October 14, and no longer receives patches for newly discovered bugs and security vulnerabilities.

Customers can delay upgrading to Windows 11 for another year by enrolling in the Extended Security Updates (ESU) program, which costs $30 for home users and $61 per device per year for enterprise customers. Costs for enterprises increase by $61 every year for a maximum of three years, totaling $183 for enterprise customers who opt for the entire duration of the ESU program.

Individual users can also enroll for free by using Microsoft Rewards points or enabling Windows Backup. Furthermore, home users in the European Economic Area can enroll in the ESU program for free with the Microsoft account they use to log in to Windows.

Following widespread user reports since the October 2025 Patch Tuesday, Microsoft also confirmed that installing last month's cumulative updates may trigger incorrect end-of-support warnings on Windows 10 systems that are still under active support or have active security coverage.

Test every layer before attackers do

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper