Windows 10: Windows 10 KB5099539 out with RDP security upgrade, direct download links for offline...

Windows 10 KB5099539 is rolling out as part of Microsoft’s July 2026 Patch Tuesday, and it’s a mandatory update that installs automatically on any PC enrolled in the Extended Security Updates (ESU) program. Microsoft has also posted direct download links for KB5099539 offline installers (.msu), but like every ESU-era Windows 10 patch, they won’t work unless your device already has ESU active.



If you haven’t checked for updates yet, this patch is labeled as “2026-07 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5099539)“.

In our tests, Windows Latest observed that Windows 10 KB5099539 takes just a few minutes to download and install. After installing, it bumps the OS to Windows 10 Build 19045.7548, while Windows 10 Enterprise LTSC 2021 moves to Build 19044.7548.

Download Links for Windows 10 KB5099539


Windows 10 KB5099539 Direct Download Links: 64-bit and ARM-64

This opens the Microsoft Update Catalog, where you can grab the .msu offline installer. The download size is around 1067MB. Most of you should just let Windows Update handle it, though. Update Catalog is really for people managing several PCs who prefer installing offline, or for when Windows Update itself starts throwing errors.

You can download and install the Windows 10 July 2026 update from Settings > Updates & Security > Windows Update.



What’s new in Windows 10 Build 19045.7548?


Windows 10’s patch comes alongside Microsoft’s record July 2026 Patch Tuesday for Windows 11 (KB5101650), which fixed 570 security flaws across its products, including two zero-days already being exploited in attacks. We already have a full breakdown of that release, including features and fixes in our July 2026 Patch Tuesday coverage.

KB5099539 brings all of the Windows 10-relevant fixes from that release into one cumulative update.

1. Remote Desktop gets a security upgrade


The biggest change in KB5099539 is on the Remote Desktop side. Microsoft has added support for SHA-2 certificate thumbprints for trusted RDP publishers. SHA-1 support sticks around for backward compatibility, for now, but Microsoft has confirmed it’s planning to remove it down the line.



Microsoft has also published new guidance for managing RDP file security through Group Policy, letting organizations control which .rdp files users are allowed to open in the first place. It’s aimed squarely at phishing, since a malicious .rdp file is a fairly common way attackers trick people into handing over access to their PC.

If you’re an IT administrator still using SHA-1 thumbprints for RDP publishers, Microsoft wants you to migrate to SHA-256 or something stronger soon, before SHA-1 support goes away for good.

2. A networking change could break some third-party software


KB5099539 also introduces a security hardening change that enforces TDI transport registration requirements. Apps that use sockets over unregistered third-party TDI transports might stop working after installing this update. Registered TDI transports aren’t affected, though. So, most people won’t notice anything.



It mostly hits older networking or VPN software that skipped registering itself properly, which, funnily enough, is exactly the kind of software that tends to hang around the longest on Windows 10 machines. Microsoft has a support document for third-party TDI transports if you run into this after installing today’s update.

3. File Explorer, Recycle Bin, and OLE Automation fixes


Apart from the security side, KB5099539 also squashes a handful of smaller bugs.

Some apps that use the IDispatch::Invoke method to call COM methods with BYREF parameters sharing the same storage were failing with parameter marshalling errors, a compatibility issue in oleaut32.dll introduced by June’s security update. It’s fixed now.

The OneDrive shortcut in File Explorer was also breaking whenever File Explorer ran in administrative mode, and that’s fixed too. Same goes for a Recycle Bin bug where the confirmation dialog for permanently deleting a file sometimes showed an internal Recycle Bin file name instead of the file’s own name.



Microsoft also changed how hotkey unregistering and cleanup work. In rare cases, this means some built-in Windows experiences might briefly stop responding to certain keyboard shortcuts. Restarting the affected app should sort it out, and if it doesn’t, Microsoft wants you to report it through Feedback Hub.

4. Secure Boot certificate rollout keeps moving


Secure Boot certificates on most Windows devices started expiring in June 2026, and Microsoft has been pushing updated 2023 certificates to PCs for months now. KB5099539 continues that rollout and enables dynamic status reporting for Secure Boot states inside the Windows Security app, along with more high-confidence device targeting data to widen the pool of PCs that qualify for the new certificates.


The Secure Boot section showing the “fully updated” status with a green checkmark icon.

The Secure Boot section showing the “Not yet updated” status with a yellow warning icon.

The Secure Boot section showing the “Requires action” status with a red stop icon.

Note that devices that haven’t received the newer certificates yet will still keep starting up normally, and regular Windows updates will keep installing without issue. Microsoft says they will keep rolling out the new certificates via Windows Update over the coming months. If you want to check your own PC’s status, open Windows Security, go to Device Security, and scroll down to the Secure Boot section. We covered this feature in more depth when it showed up on Windows 10 KB5087544 back in May.

Servicing Stack Update and deployment


As usual, Microsoft has bundled the latest Servicing Stack Update, KB5104021 (version 19041.7546), with this cumulative update. SSUs improve the reliability of the update process itself, and this one includes enhanced logic to verify whether a device is hosted on Azure, using an updated certificate chain for validation.

If you’re deploying this update to an existing Windows image offline, and that image doesn’t already have the July 2023 (KB5028244) or later LCU, you’ll need the standalone October 2023 SSU (KB5031539) installed first. For WSUS deployment or standalone installs from the Update Catalog, devices without the May 2021 (KB5003173) or later LCU need the standalone August 2021 SSU (KB5005260) first.

Are there known issues in Windows 10 KB5099539?


Microsoft says they aren’t aware of any new issues with this update, so you should be fine installing it right away. Given how many vulnerabilities got patched this Patch Tuesday, I wouldn’t sit on this one.

Make sure you’re enrolled in Windows 10 Extended Security Updates


Windows 10 reached the end of support back in October 2025, and without ESU, your PC won’t get KB5099539 or any security update going forward. The good news is Microsoft recently extended the consumer ESU program by an extra year, so coverage now runs through October 12, 2027 instead of stopping this October as originally planned.



If you’re already enrolled, there’s no need to do anything. Microsoft has been emailing users directly to confirm the extension, though that note hilariously has a habit of landing in Outlook’s Other folder instead of your Focused inbox.



If you haven’t enrolled yet, open Settings > Update & Security > Windows Update and click Enroll now. ESU is free if you sync your PC settings to a Microsoft account. Otherwise, you can redeem 1,000 Microsoft Rewards points or pay a one-time fee of $30 USD. One license covers up to 10 devices.



Windows 10 sticking around this long isn’t just people forgetting to switch either. Millions are choosing to stay, and Microsoft keeps shipping Windows 10 developer conveniences like WSL Containers well after the OS reached end of support.

If you’ve already moved to Windows 11, Microsoft rolled out a big update today too. Check out our full coverage of the Windows 11 July 2026 Patch Tuesday update for everything new in KB5101650.

The post Windows 10 KB5099539 out with RDP security upgrade, direct download links for offline installer (.msu) appeared first on Windows Latest

Weiterlesen...

 

DOWNLOAD WINDOWS 10 NOW - Upgrade and ISO direct from microsoft

Click to expand... Yeah I went to that site, why do I need to buy a key?
I won't buy a key, stupid.

I'll revert back to windows 7 then.

When I still was on windows 7, about a year ago I added 4GB extra ram which is a total of 8GB now,
is that causing the problem?

 

DOWNLOAD WINDOWS 10 NOW - Upgrade and ISO direct from microsoft

this search might help you https://www.google.com.au/webhp?sou...o+to+get+it+activated+windows+10+blocked+keys

From http://windows.microsoft.com/en-us/windows-10/why-activate-windows-10

If you upgraded to Windows 10 for free and ended up in a non-activated state, try following these steps:

• Go to Start
  
  , then select Settings > Update & security > Activation.
• Select Go to Store, and check to see if a valid license is available for your device. If a license isn't available, you'll need to buy Windows from the Store.
  
  Note
  • This only applies if you haven't made changes to the hardware for your device.

or you could hack it with a crack but please note this is always risky and you don't know what's in the hack

 

DOWNLOAD WINDOWS 10 NOW - Upgrade and ISO direct from microsoft

I found a link on the official Microsoft site for direct download, helps those that are still waiting for the invitation to download from the taskbar.

Download the tool for 64bit or 32bit. Home and Pro versions, also N versions also. Upgrade or iso version for clean install, although for clean install product would be needed. (this is given after upgrade)

Options available are

Upgrade now and direct ISO File download

You cant install via ISO, first you must upgrade via the link then after upgrade, get your new key for windows 10. then you can install from disc.

You need the serial from the upgrade.

YOU MUST UPGRADE FIRST.

http://www.microsoft.com/en-gb/software-download/windows10

I have already downloaded the ISO and is fully working, below is an image of the upgrade downloading now.


EDIT:

Clean install from USB.

http://hexus.net/tech/features/software/85085-how-clean-install-windows-10-usb-drive/





SPREAD THE WORD!