Windows 10 KB5073724 Update Released: Extended Security Updates Continue Until 2026

Microsoft has quietly rolled out a new cumulative update for Windows 10, bringing extended security support for users who have opted into the Extended Security Updates (ESU) program. While official mainstream support for Windows 10 ended in October 2025, ESU subscribers can continue receiving important security fixes through October 2026. The latest patch, KB5073724, brings minor but essential security improvements, updates to system certificates, and changes to legacy drivers, ensuring older systems remain protected.

Summary of Windows 10 KB5073724

The January 2026 cumulative update, officially titled “2026-01 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5073724),” upgrades Windows 10 ESU systems to Build 19045.6809. Users can access the update via Settings > Updates & Security > Windows Update or through the Microsoft Update Catalog. It’s important to note that this update is only available to ESU subscribers, so standard Windows 10 installations will not see this patch.

One key change in KB5073724 is the removal of legacy modem drivers, including agrsm64.sys, agrsm.sys, smserl64.sys, and smserial.sys. Microsoft warns that devices relying on these drivers may stop functioning, though in practice, most users (99.99%) will not experience any issues. Tests on older hardware confirm modems are still largely unaffected.

Another critical update concerns Secure Boot certificates, which ensure the Windows bootloader remains trusted by the UEFI firmware. Many older PCs still use certificates issued in 2011, which have now expired. KB5073724 replaces these certificates with new 2023-issued certificates, preventing potential boot and security issues. This is particularly relevant for enterprise environments, though general consumers are largely unaffected unless Secure Boot is manually configured.

Additionally, Microsoft updated WinSqlite3.dll, addressing security vulnerabilities flagged by some antivirus software. This ensures that apps relying on SQLite components do not trigger false security alerts. Users encountering alerts are advised to update all Microsoft Store apps or reach out to third-party developers if the affected app is not Microsoft-owned.

According to Microsoft, no major issues have been reported with KB5073724, making it a smooth and safe update for ESU subscribers.

What Undercode Say:

The release of KB5073724 illustrates Microsoft’s continued commitment to supporting legacy Windows 10 systems through ESU, despite the official end of support. While the update is relatively small and does not include feature changes, its security implications are significant:

Legacy Hardware Support Risks: By removing old modem drivers, Microsoft is nudging users away from outdated technology. Organizations relying on legacy devices may need to test hardware compatibility before deployment.

Secure Boot Certificate Renewal: Updating Secure Boot certificates is a critical preventative measure against potential boot-level attacks. Enterprises must ensure this process completes on all ESU devices to maintain system integrity. This move signals Microsoft’s awareness of long-term threats targeting firmware and boot processes.

SQLite Security Fixes: The WinSqlite3.dll update emphasizes the growing importance of third-party libraries in system security. Many vulnerabilities arise not from the OS itself but from widely used components like SQLite, highlighting the need for robust patching and app management.

Enterprise-Focused Updates: While everyday consumers may not notice immediate changes, this patch reflects Microsoft’s enterprise-centric ESU strategy. Security patches, certificate updates, and driver deprecations show Microsoft prioritizes risk mitigation over adding features.

Smooth Rollout Signals Stability: Early reports suggest minimal issues with KB5073724. This consistency reassures organizations managing hundreds or thousands of devices that Windows 10 ESU remains a reliable platform until 2026.

Long-Term Implications: Windows 10 ESU updates, like this one, demonstrate that enterprises must plan not just for software updates but for hardware lifecycle management. Legacy drivers, expired certificates, and third-party dependencies all highlight the complex ecosystem still in play.

In short, KB5073724 is less about new features and more about preserving stability, trust, and security in aging systems—a critical balancing act for IT teams worldwide.

Fact Checker Results:

✅ KB5073724 is an ESU-only update for Windows 10, not available for general users.

✅ Secure Boot certificates are updated to prevent trust issues during boot.

✅ No major bugs or system-wide issues have been reported for this update.

Prediction:

Expect Microsoft to continue monthly ESU updates for Windows 10 until October 2026, focusing primarily on security patches, certificate renewals, and compatibility fixes rather than feature improvements. Enterprises should prepare for legacy hardware deprecation and ensure compliance with Secure Boot requirements to avoid system vulnerabilities. 💻🔐⚠️

If you want, I can also create a visual timeline of Windows 10 ESU updates leading up to 2026, highlighting key patches like KB5073724 and their security impact. This would make it easier to see how Microsoft is prioritizing legacy system security. Do you want me to do that?