Windows 10 22H2 ESU enrollment fix: KB5071959 out-of-band update released

  • Thread Author
Microsoft has issued an out‑of‑band update (KB5071959) for Windows 10, version 22H2 to fix a consumer Extended Security Updates (ESU) enrollment failure and to make sure affected machines can complete enrollment and begin receiving critical security updates via Windows Update. The patch, published on November 11, 2025, is a cumulative package that embeds the October 14, 2025 security fixes and a servicing stack update, and Microsoft is urging impacted consumer devices to install it as soon as possible to restore ESU enrollment functionality.

Background / Overview​

Windows 10 reached its general end of support on October 14, 2025, but Microsoft offered a one‑year consumer Extended Security Updates (ESU) program to deliver critical and important security patches for eligible devices. The ESU enrollment path for consumer devices is intended to be handled through a Settings → Windows Update “Enroll now” experience, but a subset of consumer PCs experienced an enrollment wizard failure that prevented completion of the ESU process — a problem that could block affected devices from receiving essential post‑end‑of‑support security patches.
To address that specific enrollment failure and to ensure the update delivery pipeline remains reliable, Microsoft released the out‑of‑band update KB5071959 (OS Build 19045.6466) for Windows 10, version 22H2. The package includes the previously issued October cumulative updates and bundles a servicing stack update (SSU) identified as KB5071982 (OS Build 19045.6465).
This move reflects a broader update‑management approach Microsoft has adopted in 2025: combining SSUs with LCUs (latest cumulative updates) and deploying targeted out‑of‑band fixes when essential update infrastructure or enrollment workflows are impaired.

What this update does — the short technical summary​

  • The out‑of‑band update KB5071959 updates Windows 10, version 22H2 to OS Build 19045.6466.
  • It contains the security and quality fixes that were part of the October 14, 2025 security update (the October cumulative update) and an additional fix that addresses the Windows 10 consumer ESU enrollment wizard failure. After installing KB5071959, consumer devices that previously could not complete ESU enrollment using the wizard should be able to enroll successfully.
  • The package also includes or is delivered alongside a servicing stack update (SSU)KB5071982 — which upgrades the servicing stack to OS Build 19045.6465 and improves update reliability and install resilience. Microsoft has been packaging SSUs with cumulative updates to prevent installation‑time failures that stem from an outdated servicing stack.
  • Microsoft marks KB5071959 as a security update for devices not already enrolled in consumer ESU because the enrollment problem prevented those machines from receiving crucial security updates.

Why the fix matters​

  • Extended Security Updates are the final safety net for devices that cannot be migrated to Windows 11 or a newer supported platform immediately. If enrollment fails, eligible consumer devices risk missing critical patches for actively exploited or high‑severity vulnerabilities.
  • An enrollment‑blocking bug is not a minor cosmetic issue: it severs the mechanism that allows vulnerable systems to continue receiving fixes. Repairing that flow is therefore a high priority because the only durable protection against many remote exploitation vectors is a current patch level.
  • The inclusion of an SSU (KB5071982) in the same offering reduces the chance that devices fail to install the cumulative update due to an outdated servicing stack, which has been a recurring cause of partial or failed update scenarios.

Technical breakdown: KB5071959, KB5066791 and KB5071982 explained​

KB5071959 (Out‑of‑band — OS Build 19045.6466)​

  • Purpose: A targeted out‑of‑band cumulative update for Windows 10, version 22H2, resolving the consumer ESU enrollment wizard failure and packaging the October cumulative fixes.
  • Scope: Consumer devices on Windows 10, version 22H2 that are not yet enrolled in ESU and experiencing enrollment wizard failures.
  • Delivery: Offered via Windows Update and is available as a downloadable package (via the Microsoft Update Catalog) for manual install where automatic delivery is not working.

KB5066791 (October 14, 2025 cumulative update)​

  • Purpose: The October 2025 monthly cumulative — includes multiple security fixes and quality improvements. KB5071959 is cumulative and explicitly includes the October fixes so devices that were blocked from enrolling will not miss those previously released security patches.
  • Notes: Some devices previously reported incidental update‑related side effects (display messages about end of support or peripheral issues) in the October cumulative; Microsoft has issued follow‑up guidance and rollouts to address those incidents where necessary.

KB5071982 (Servicing stack update — OS Build 19045.6465)​

  • Purpose: Improves the servicing stack — the component responsible for installing Windows updates — to make installs more reliable and to help mitigate install failures.
  • Importance: A current servicing stack is often required before the operating system will allow the latest cumulative update to be applied. Microsoft has increasingly combined SSUs with LCUs to streamline the update pipeline and reduce failed installs stemming from old servicing components.

How to get and install the OOB update (practical steps)​

  • Open Settings → Windows Update → Select “Check for updates.” If KB5071959 is applicable to your device, Windows Update should offer the out‑of‑band update.
  • Install the update and restart the device when prompted. A restart is required to finalize the SSU and cumulative changes.
  • After restart, return to Settings → Windows Update and use the ESU enrollment experience (the “Enroll now” link/button). Follow the on‑screen wizard to complete enrollment. Once enrolled, devices will begin receiving Extended Security Updates via Windows Update.
  • If the update is not offered automatically, manually download the KB5071959 package from the Microsoft Update Catalog and install it. If manual installation is required, confirm that the SSU has been installed and then apply the cumulative package.
Important preconditions and notes:
  • The device must be running Windows 10, version 22H2. Older Windows 10 feature updates are not supported for the consumer ESU enrollment path.
  • Ensure the device has the latest servicing stack or allow the bundled SSU to install as part of the package. Failure to have the appropriate SSU can prevent the LCU from being installed or offered.
  • Microsoft’s guidance emphasizes that in many cases the ESU enrollment experience is rolled out in waves; fully patched and eligible devices may receive the enroll option sooner or later depending on staged rollout behavior and regional variability.
  • If Windows Update doesn’t offer KB5071959 or the enroll option after installing it, check connectivity, firewall and Group Policy settings that might block dynamic OneSettings updates or Microsoft cloud configuration changes.

Troubleshooting: if enrollment still fails after installing KB5071959​

  • Confirm OS version and build: run winver and verify you are on Windows 10, version 22H2. The target builds are OS Build 19045.6466 (after KB5071959) and SSU build 19045.6465 for the servicing stack.
  • Confirm update install: look at Update history in Settings → Windows Update to verify KB5071959 and the SSU are listed and show a successful installation date.
  • Reboot and retry: many enrollment flows require a reboot after servicing stack and cumulative installs. Rebooting clears pending servicing tasks.
  • Sign‑in context: the consumer ESU enrollment wizard may require a Microsoft account and administrative privileges. Ensure you are signed into Windows with a Microsoft account that has admin rights. Local accounts may not trigger the enrollment experience.
  • Telemetry/diagnostics: some enrollment workflows rely on diagnostic channels; confirm that telemetry or dynamic update downloads are not blocked by Group Policy or network firewall rules. Devices that block OneSettings downloads or dynamic cloud configuration may not receive the cloud‑side enrollment flag.
  • If the Enrollment Wizard fails mid‑process: recheck pending updates and confirm the SSU and LCU are installed. If necessary, attempt a manual install of the SSU and LCU from the Microsoft Update Catalog.
  • License validation: after enrollment, verify that the system is receiving updates. For deeper verification, enterprise and advanced users can use licensing tools (for example, slmgr commands) to inspect license/activation status and confirm that ESU entitlements are recognized.
  • When all else fails: collect update logs and contact Microsoft Support. For administrators, capture CBS and WindowsUpdate logs to expedite diagnosis.

Enterprise/admin considerations (testing, deployment and rollback)​

Although KB5071959 is primarily targeted at consumer ESU enrollment failures, the mechanics of SSUs and LCUs are the same in enterprise environments. Administrators should:
  • Test the update in a controlled pilot group before broad deployment. Validate boot behavior, update history, application compatibility, and BitLocker behavior after the SSU and cumulative install.
  • Maintain backups and image snapshots for recovery. Out‑of‑band packages and servicing stack changes are system‑level; a tested backup plan reduces recovery time if unexpected issues occur.
  • Use Microsoft Update Catalog, WSUS, or endpoint‑management tooling (Intune, SCCM/ConfigMgr) to control distribution. If using WSUS, ensure express installation files and catalog versions are consistent to avoid partial downloads or install failures.
  • Monitor for known issues and apply Known Issue Rollback (KIR) policies where available. Microsoft offers KIR/GPO tools for some update regressions; evaluate whether those mitigations are appropriate.
  • For managed fleets that require deterministic patching, schedule the SSU+LCU combined install during maintenance windows and allow adequate time for reboots and telemetry propagation.
  • Be aware of regional rollout differences. The consumer ESU enrollment experience has been staged in waves and may behave differently by market, which can complicate pilot testing versus broad rollout expectations.

Risks, caveats, and historical context​

  • Microsoft states no known issues for KB5071959 at the time of release. However, history shows that cumulative and servicing stack updates occasionally interact with specific hardware, drivers, or vendor components in ways that only surface broadly after deployment. Proceed with the usual caution: backups, pilot tests, and staged rollouts.
  • Previous 2025 updates produced user‑visible anomalies — for example, an incorrect "end of support" message in Settings after the October 2025 cumulative update and, in other recent security rollouts, occasional BitLocker recovery prompts on reboot for some hardware configurations. These incidents demonstrate that even thoroughly tested patches can produce edge‑case disruptions. Maintaining recovery keys and ensuring a tested rollback or restore plan remains best practice.
  • The servicing stack update included in the package cannot always be removed once installed. Uninstalling an LCU (latest cumulative update) may be possible with specific DISM commands, but the SSU component is often persistent by design to prevent repeated update failures. That means administrators should treat SSU installs as semi‑permanent changes and validate them before broad deployment.
  • The ESU enrollment rollout is staged and may be influenced by market‑specific rules. Users in certain regions might see different enrollment timing or slightly different enrollment options. If the ESU "Enroll now" button does not appear immediately after the update, check eligibility criteria and postpone alarm until the staged rollout completes in your region.

Practical security implications​

  • Without ESU enrollment, devices past end of support are unlikely to receive security updates that patch actively exploited vulnerabilities. The enrollment‑blocking bug could have left a subset of consumer machines exposed to critical vulnerabilities. Applying KB5071959 restores enrollment functionality and thereby restores the ability of eligible consumer machines to obtain future security updates.
  • Active exploitation of Windows vulnerabilities remains a real and immediate threat. For example, high‑severity SMB and other networking vulnerabilities were reported earlier in 2025 with active exploitation in the wild; those kinds of vulnerabilities are exactly what ESU aims to remediate for systems that cannot be otherwise upgraded. Maintaining patch flow is therefore directly connected to reducing compromise risk.
  • Out‑of‑band releases like KB5071959 are normal when update infrastructure or enrollment workflow issues threaten security patch delivery, and the speed of Microsoft’s response here reduces the window of risk for impacted users.

Recommended immediate actions (concise checklist)​

  • Check Windows version: run winver and confirm Windows 10, version 22H2.
  • Open Settings → Windows Update → Select Check for updates. Apply KB5071959 if it appears and reboot.
  • After restart, follow Settings → Windows Update → Enroll in Extended Security Updates and complete the wizard. Ensure you are signed in with a Microsoft account that has administrative privileges.
  • If KB5071959 is not offered, download the package manually from the Microsoft Update Catalog and install the SSU and cumulative package in the correct order if required.
  • Create a system image or restore point before broad deployments, and ensure BitLocker recovery keys are exported and stored safely.
  • For managed environments, pilot the update on a small group of representative devices, then proceed to phased deployment via WSUS/Intune/SCCM.
  • Monitor update history and reboot logs; if enrollment still fails, collect CBS and WindowsUpdate logs and contact Microsoft support for assistance.

Longer‑term view and closing analysis​

This out‑of‑band action underscores a pragmatic truth of modern OS lifecycle management: even after official end of support, the mechanics of delivering security updates — enrollment wizards, servicing stacks, distribution channels — remain critical infrastructure. A broken enrollment wizard is not merely a UI annoyance; it is an operational failure that can prevent timely distribution of fixes for high‑severity vulnerabilities.
Microsoft’s decision to bundle servicing stack improvements with the cumulative fix helps reduce installation‑time failures and simplifies recovery for consumers. The staged, sometimes regionally variable rollout of enrollment features has caused confusion among users and will continue to do so unless rollout messaging and telemetry feedback improve.
For those who must remain on Windows 10, applying KB5071959 and completing ESU enrollment is the immediate, correct course of action. For administrators and power users, the sensible investment is in disciplined update testing, backup readiness, and ensuring that recovery artifacts (BitLocker keys, system images) are readily accessible should an update interaction require restoration.
Security posture rests on two pillars: timely patching and robust recovery plans. KB5071959 addresses a crucial gap on the first pillar for consumer Windows 10 users; organizations and individuals should treat it as an actionable priority while continuing to validate the second pillar so that update incidents don’t become outages.

By following the checklist above and adopting a cautious, staged deployment approach for KB5071959 and the associated servicing stack update, Windows 10 users and administrators can dramatically reduce the risk that the enrollment glitch will leave systems exposed — and restore the intended pathway for receiving the security updates that matter most.

Source: Microsoft - Message Center November 11, 2025—KB5071959: Windows 10, version 22H2 (OS Build 19045.6466) Out-of-band - Microsoft Support
 
Microsoft has quietly pushed an emergency out‑of‑band update for Windows 10 — KB5071959 — to repair a bug that was preventing some users from enrolling in the consumer Extended Security Updates (ESU) program and thus blocked delivery of critical security updates to eligible PCs.

Background​

Windows 10 reached its official end of support on October 14, 2025, and Microsoft offered a one‑year consumer Extended Security Updates (ESU) program to keep eligible devices patched through October 13, 2026. The consumer ESU path was deliberately simple: enroll from Settings → Update & Security → Windows Update, sign in with a Microsoft Account, and choose one of three enrollment options — enable settings backup (free), redeem 1,000 Microsoft Rewards points, or make a one‑time purchase (roughly $30 USD). Enrollment is tied to Windows 10, version 22H2, and the entitlement is bound to the user’s Microsoft account and can cover up to ten devices. That enrollment flow depends on recent servicing components and a small in‑OS wizard that validates eligibility and applies the ESU entitlement. In mid‑late 2025 some users began reporting that the “Enroll now” wizard either did not appear or crashed with vague messages such as “Something went wrong”, leaving eligible devices unable to receive post‑EOL security rollups. Community troubleshooting flagged regional gating, leftover work/school account artifacts and disabled services (for example wlidsvc, VaultSvc, LicenseManager) as common causes — but a software bug in the enrollment path itself was also implicated.

What Microsoft released (the facts)​

On November 11, 2025 Microsoft published an out‑of‑band (OOB) cumulative update targeted at consumer devices that were not enrolled in ESU: KB5071959. The official Microsoft KB entry shows the package advances Windows 10, version 22H2 to OS Build 19045.6466, and explicitly states the update “addresses an issue in the Windows 10 Consumer Extended Security Update (ESU) enrollment process, where the enrollment wizard may fail during enrollment.” The article also notes the OOB bundle includes the October 14, 2025 cumulative fixes (KB5066791) and is delivered together with a servicing‑stack update (SSU) KB5071982 (OS Build 19045.6465) to improve install reliability. Microsoft lists the straightforward installation path: check Windows Update, install KB5071959 when offered, and reboot. Independent reporting by multiple outlets corroborated Microsoft’s description: the OOB was published the same day November’s Patch Tuesday updates were confirmed, and the enrollment bug was the stated reason for pushing a targeted repair ahead of the next monthly cadence. Community and news reports emphasized that KB5071959 would only appear on machines that could not enroll — making the patch effectively mandatory for affected systems that still need ESU coverage.

Why this emergency update matters​

The enrollment wizard is the gating mechanism for consumer ESU entitlements. If eligible Windows 10 devices cannot complete enrollment, they will not receive the security bulletins Microsoft publishes for ESU‑covered systems. Given the steady stream of high‑severity and actively exploited vulnerabilities that arrive with Patch Tuesday cycles, a broken enrollment flow translates directly into an operational security risk: unprotected consumer PCs remain exposed while attackers continue to weaponize unpatched CVEs.
Microsoft’s decision to ship an out‑of‑band cumulative update — one that includes both a servicing‑stack update and the previous month’s fixes — is a pragmatic, security‑first response. Bundling the SSU reduces chained installation failures (an outdated servicing stack is a common cause of LCU install problems), and including the October LCU inside the cumulative ensures devices patched by KB5071959 do not miss prior critical fixes. The timing — released November 11, 2025, concurrent with November’s patch roll — underlines the urgency.

Technical breakdown: what’s inside KB5071959 and how it behaves​

Package contents and build numbers​

  • KB5071959 — Out‑of‑band cumulative (Windows 10, version 22H2): advances to OS Build 19045.6466 and is targeted at consumer devices not enrolled in ESU. It contains the October 14, 2025 security fixes (KB5066791) plus the enrollment fix.
  • KB5071982 — Servicing Stack Update (SSU): updates servicing components to OS Build 19045.6465; packaged/delivered alongside the LCU to improve install reliability.
Microsoft’s KB notes that SSUs are now routinely combined with LCUs to reduce installation fragility; installing KB5071959 implies the SSU will be applied as part of the operation. In most cases Windows Update will sequence the SSU before the LCU automatically.

Who gets the update​

  • Target: consumer devices running Windows 10, version 22H2 that are not already enrolled in ESU and that have an enrollment failure. The update only appears for machines that the update pipeline identifies as unable to enroll — it is not a general public cumulative for all 22H2 devices.

What it fixes​

  • The enrollment wizard failure where the UI closes, crashes, or returns ambiguous errors during the signup flow. After installing KB5071959 and rebooting, eligible consumer devices should be able to run Settings → Update & Security → Windows Update → Enroll now and complete the ESU workflow.

Installation behavior and caveats​

  • Microsoft’s guidance: Settings → Windows Update → Check for updates → install KB5071959 (OOB) → restart to finalize the SSU + LCU install.
  • If Windows Update does not offer the patch, the Microsoft Update Catalog provides MSU/CAB packages for manual install — but administrators should respect the install order (SSU before LCU) if manually applying packages.
  • SSUs are semi‑permanent servicing components; uninstalling an SSU is non‑trivial and sometimes not possible. This argues for cautious testing in managed environments before wide deployment.

Practical troubleshooting and verification steps​

If you believe your device is affected, follow this prioritized checklist to install KB5071959 and complete ESU enrollment safely:
  • Confirm prerequisites:
  • Run winver and verify you are on Windows 10, version 22H2. ESU consumer enrollment requires 22H2.
  • Check Windows Update:
  • Open Settings → Update & Security → Windows Update → Check for updates. If the device is flagged as unable to enroll, Windows Update should offer KB5071959. Install it and reboot.
  • After reboot:
  • Navigate back to Settings → Windows Update → Enroll now and follow the wizard. Sign in with a Microsoft Account if prompted. Choose the free backup option, Rewards redemption, or a one‑time purchase.
  • If KB5071959 does not appear:
  • Download the KB5071959 and KB5071982 packages from the Microsoft Update Catalog and install them manually (SSU first if required), then reboot and attempt enrollment again.
  • If the wizard still fails:
  • Ensure services commonly used during enrollment are enabled: Microsoft Account Sign‑in Assistant (wlidsvc), Credential Manager (VaultSvc), and License Manager (LicenseManager). Community troubleshooting shows these services, when disabled, frequently cause the UI to crash. Reboot and retry.
  • Escalation:
  • Collect WindowsUpdate and CBS logs and open a support ticket with Microsoft if necessary. If the device is incorrectly classified as commercial/managed, consider cleaning up leftover work/school account associations or, as a last resort, perform an in‑place repair.

For administrators and managed environments​

  • Pilot first: The SSU + LCU combination in KB5071959 changes core servicing components. Test the update on representative hardware and VM images before broad distribution.
  • WSUS / ConfigMgr / Intune: Synchronize the Microsoft Update Catalog and confirm express payloads are available. If using WSUS, ensure clients can fetch the combined package and that catalogs match your deployment channel.
  • BitLocker and recovery keys: Some servicing‑stack changes historically trigger BitLocker recovery prompts on reboot for certain configurations. Export or back up BitLocker recovery keys and verify boot behavior during pilot phases.
  • Rollback planning: Because SSUs are often persistent, create image‑level backups or rollback plans for trouble‑free recovery in case of unexpected incompatibilities. Use the Known Issue Rollback (KIR) mechanisms and GPO mitigations where relevant.

Strengths in Microsoft’s approach — and notable positives​

  • Rapid response: Pushing an out‑of‑band cumulative that includes both the SSU and the October fixes demonstrates a security‑first posture. Restoring the ESU enrollment channel reduces the exposure window for vulnerable machines.
  • Correct sequencing: Packaging the SSU together with the LCU mitigates a frequent cause of failed installs and reduces the likelihood of chained servicing‑stack issues during manual installs.
  • Clear guidance: Microsoft’s KB provides a concise installation path (Windows Update → Check for updates → install KB5071959 → reboot → Enroll now), which simplifies remediation for most consumer users.

Risks, trade‑offs, and things to watch​

  • Unknown scope of impact: Microsoft has not published telemetry counts for how many consumer PCs were blocked from enrolling. Community reports show a noticeable problem in some markets (Europe among them), but exact numbers are unverifiable without Microsoft’s telemetry. Treat any claimed population percentages as speculative until Microsoft publishes definitive figures.
  • Potential edge‑case regressions: Though Microsoft lists no known issues for KB5071959 at release, historical precedent shows cumulative/SSU installs can interact with specific OEM drivers, third‑party security suites, or unusual configurations, sometimes producing BitLocker recovery prompts or other boot anomalies. Administrators should pilot and monitor closely.
  • Dependence on Microsoft Account: Consumer ESU enrollment requires a Microsoft Account; devices using local accounts must sign in with an MSA or choose alternate enrollment options. This decision has been contentious for privacy‑conscious users and organizations that avoid MSA ties.
  • Manual steps risk: Community troubleshooting often recommends registry edits, feature flag overrides or region switches as workarounds. These carry risk and should be treated as last resorts; registry edits and unvetted scripts can brick systems or create security gaps. Backups are essential before advanced repairs.

How this fits into the broader Windows lifecycle story​

The KB5071959 release highlights a structural reality of modern OS lifecycles: mechanisms for entitlement and update delivery (wizards, servicing stacks, cloud signals) are themselves critical security infrastructure. When those mechanisms fail they can silently isolate entire classes of at‑risk devices from urgently needed patches. Microsoft’s quick out‑of‑band remedy restored that delivery path, but the incident also exposes the fragility of staged rollouts and the communications gap that can make troubleshooting confusing for home users.
Microsoft’s consumer ESU program was designed as a transition mechanism for users who cannot immediately move to Windows 11. By making the program accessible through low‑cost or free options the company reduced friction — but the enrollment experience remains dependent on mixed client/server checks and staged cloud gating, which introduces complexity and potential failure modes. KB5071959 is a practical repair, not a policy change; long‑term migration planning remains the durable solution for organizations and users who want continuous platform support beyond the ESU window.

Quick reference: immediate actions for users​

  • If you run Windows 10, version 22H2:
  • Open Settings → Update & Security → Windows Update → Check for updates.
  • If KB5071959 appears, install it and restart your device when prompted.
  • After reboot, run Settings → Windows Update → Enroll now and complete the ESU enrollment wizard.
  • If you do not see KB5071959:
  • Download KB5071959 and the SSU KB5071982 from the Microsoft Update Catalog and apply them (SSU first if required), then reboot and retry enrollment.
  • If enrollment still fails:
  • Verify the Microsoft account sign‑in, enable wlidsvc/VaultSvc/LicenseManager services, and ensure the device is not misclassified as organization‑managed.
  • Back up data and export BitLocker keys before attempting registry cleanups, in‑place repairs, or a fresh OS repair.

Final assessment​

KB5071959 is a narrowly scoped, security‑critical repair released as an out‑of‑band update to restore the ESU enrollment path for consumer Windows 10 devices. Its release on November 11, 2025, alongside November’s security updates, was the right operational move: it reduces the window of vulnerability for eligible systems by restoring the delivery channel for future monthly ESU rollups. The technical approach — bundling an SSU with the cumulative and targeting only affected devices — minimizes collateral impact while maximizing the chance of a successful remediation.
At the same time, the incident underscores that update infrastructure itself is a high‑value target for reliability — and when it breaks, even well‑intentioned transition programs can leave users exposed. Consumers and administrators should treat KB5071959 as an urgent patch if it appears on their devices, follow Microsoft’s install guidance, and adopt conservative pilot and backup practices when deploying the SSU + LCU combination across fleets. Where enrollment fails despite the OOB, gather logs, use the documented troubleshooting sequence, and escalate to Microsoft support rather than applying risky, unverified registry hacks.
For anyone still on Windows 10 and expecting security updates beyond October 14, 2025, the immediate takeaway is simple and uncompromising: check for KB5071959, install it if offered, complete the ESU enrollment, and confirm monthly updates resume — because in a world of fast‑moving exploit code, the patch pipeline is the frontline of defense.
Source: Forbes Microsoft Suddenly Issues Emergency Update For Windows 10 Users