New Update KB5066791: Microsoft shares details on Windows 10 support end with final October 2025 Patch

[silversurfer]

Microsoft is rolling out the monthly security update (also called "B release") for October 2025 on Windows Server 20H2 and Windows 10 for the latest supported versions, 20H2, 21H2, and 22H2.

The new updates are being distributed under KB5066791, bumping up the builds to 19044.6456 and 19045.6456. You can find standalone links to download the new update on the Microsoft Update Catalog at this link. This is the final Patch for Windows 10 as support for the OS has ended today.

KB5066791: Microsoft shares details on Windows 10 support end with final October 2025 Patch

Microsoft has released October 2025 Patch Tuesday cumulative updates for Windows 10 version 21H2 and version 22H2 under KB5066791. This is the final Patch Tuesday for Windows 10.

www.neowin.net

 

[Bot]

KB5066791: Microsoft shares details on Windows 10 support end with final October 2025 Patch

Microsoft has released October 2025 Patch Tuesday cumulative updates for Windows 10 version 21H2 and version 22H2 under KB5066791. This is the final Patch Tuesday for Windows 10.

www.neowin.net

Thanks for sharing this, silversurfer. Yeah, it's a big day—Windows 10's end of support is official with this final patch (KB5066791). For anyone still running it, this means no more security updates from Microsoft after today, which could leave systems exposed to new vulnerabilities over time.

If your hardware meets the requirements, I'd strongly recommend upgrading to Windows 11 to stay protected. Otherwise, Microsoft is offering Extended Security Updates (ESU) for Windows 10, but that'll cost you—starting at around $30/year for consumers, and more for businesses. It's not ideal long-term, but it buys some time if you can't upgrade right away.

Anyone here planning to stick with 10 via ESU, or are you all jumping ship?

 

[Divine_Barakah]

Thanks for sharing this, silversurfer. Yeah, it's a big day—Windows 10's end of support is official with this final patch (KB5066791). For anyone still running it, this means no more security updates from Microsoft after today, which could leave systems exposed to new vulnerabilities over time.

If your hardware meets the requirements, I'd strongly recommend upgrading to Windows 11 to stay protected. Otherwise, Microsoft is offering Extended Security Updates (ESU) for Windows 10, but that'll cost you—starting at around $30/year for consumers, and more for businesses. It's not ideal long-term, but it buys some time if you can't upgrade right away.

Anyone here planning to stick with 10 via ESU, or are you all jumping ship?

Those who prefer Windows 10 could use the LTSC 2021 which is supported till January 2027.

 

[Bot]

Those who prefer Windows 10 could use the LTSC 2021 which is supported till January 2027.

That’s a very good point – Windows 10 Enterprise LTSC 2021 is indeed supported with security updates until January 2027, so it outlives the normal Home/Pro branches.

But there are a few important caveats for anyone considering it:

• Licensing: LTSC is officially meant for enterprises and specialized devices (medical, industrial, kiosks, etc.). It’s distributed via volume licensing, not as a normal retail/Home/Pro product for consumers.
• Not an in-place “switch” for most users: Home/Pro users can’t just “flip” to LTSC via Windows Update. It’s a different edition that typically requires a proper Enterprise LTSC license and installation media.
• Feature differences: LTSC deliberately strips or limits some consumer features (e.g. no Microsoft Store by default, slower app/platform changes, fewer built‑in UWP apps). That’s by design for stability, but can be a downside for home use.

So yes – for organizations or advanced users who are properly licensed, Windows 10 Enterprise LTSC 2021 is a valid way to stay on Windows 10 with security updates until 2027.

For typical home users on Home/Pro, though, the more realistic and supported options are:

• Upgrade to Windows 11 (if the hardware allows), or
• Stay on Windows 10 with ESU (Extended Security Updates) if/when made available to them, or
• Consider an alternative OS (e.g. Linux) for older hardware that can’t move to 11.

In short: LTSC 2021 is a good extended path for the right audience, but it’s not really a general replacement for standard consumer Windows 10.

 

[Divine_Barakah]

That’s a very good point – Windows 10 Enterprise LTSC 2021 is indeed supported with security updates until January 2027, so it outlives the normal Home/Pro branches.

But there are a few important caveats for anyone considering it:

• Licensing: LTSC is officially meant for enterprises and specialized devices (medical, industrial, kiosks, etc.). It’s distributed via volume licensing, not as a normal retail/Home/Pro product for consumers.
• Not an in-place “switch” for most users: Home/Pro users can’t just “flip” to LTSC via Windows Update. It’s a different edition that typically requires a proper Enterprise LTSC license and installation media.
• Feature differences: LTSC deliberately strips or limits some consumer features (e.g. no Microsoft Store by default, slower app/platform changes, fewer built‑in UWP apps). That’s by design for stability, but can be a downside for home use.

So yes – for organizations or advanced users who are properly licensed, Windows 10 Enterprise LTSC 2021 is a valid way to stay on Windows 10 with security updates until 2027.

For typical home users on Home/Pro, though, the more realistic and supported options are:

• Upgrade to Windows 11 (if the hardware allows), or
• Stay on Windows 10 with ESU (Extended Security Updates) if/when made available to them, or
• Consider an alternative OS (e.g. Linux) for older hardware that can’t move to 11.

In short: LTSC 2021 is a good extended path for the right audience, but it’s not really a general replacement for standard consumer Windows 10.

You're right regarding the need to reinstall Windows from scratch, but it is worth it. The LTSC is less bloated. Personally, I do not use MS Store and see no need for it, but if users need it, then they'd better upgrade to Win 11 if their devices support it. If their devices do not support Win 11, then the best option is to install the LTSC version or subscribe to one of the services that offer patches to Win 10 if there is any.

 

[Bot]

You're right regarding the need to reinstall Windows from scratch, but it is worth it. The LTSC is less bloated. Personally, I do not use MS Store and see no need for it, but if users need it, then they'd better upgrade to Win 11 if their devices support it. If their devices do not support Win 11, then the best option is to install the LTSC version or subscribe to one of the services that offer patches to Win 10 if there is any.

That’s a very reasonable way to look at it, especially for users who value a lean, stable system over frequent feature changes.

On LTSC being “worth it”
For people who:

• Don’t care about the Microsoft Store or UWP apps
• Want fewer changes and less “bloat”
• Are comfortable reinstalling from scratch and handling activation/licensing properly

…Windows 10 Enterprise LTSC 2021 is indeed a solid option until January 2027. It tends to be:

• Less noisy (fewer feature updates, less “consumer stuff”)
• More predictable for long-term setups

The only big things I’d still highlight for others reading:

• Licensing: It’s technically an Enterprise volume product. Those super-cheap LTSC keys floating around online are often in a legal/ethical grey area and can stop working.
• Compatibility: Some newer software and games expect Store components or modern Windows features. For most power users it’s fine, but it’s not 1:1 with Home/Pro.

If the device doesn’t support Windows 11
Realistically, for unsupported hardware, the options are:

• LTSC 2021 (if one is willing to reinstall and can accept the licensing caveats).
• Windows 10 + ESU / third‑party patches:
  – Microsoft ESU for consumers is limited and paid.
  – Third‑party patching services (like 0patch) can help, but:
  • They don’t fully replace official support.
  • They cover selected vulnerabilities, not every change in a monthly cumulative rollup.
• Unofficial Windows 11 installs on unsupported hardware: Possible via tools like Rufus / registry tweaks, but completely unsupported by Microsoft, and future update behavior isn’t guaranteed.
• Switching OS: For older PCs that are mainly used for browsing/office, a lightweight Linux distro is still the safest “long tail” option.

So I’d summarize it like this:

• If you value a clean, stable Windows 10 and know what you’re doing, LTSC 2021 is a very reasonable path to 2027.
• If you need full consumer features and Store apps, better to move to Windows 11 (or a new device that supports it).
• If neither is possible, ESU/third‑party patching plus hardening (good AV, limited software, safe habits) is the minimum you should aim for.

Your overall logic is sound; it mostly comes down to how much effort and how much “grey area” (licensing/unsupported setups) someone is comfortable with.

 

[Divine_Barakah]

third‑party patches:

On Oct 14th, 0patch announced support for Windows 10. Unfortunately, they also patch exploits and vulnerabilities in the wild, but they cannot fix issues in Windows if found. So Microsoft dropping support for Win10 will eventually force the majority of users to upgrade to Win 10.

 

[Bot]

On Oct 14th, 0patch announced support for Windows 10. Unfortunately, they also patch exploits and vulnerabilities in the wild, but they cannot fix issues in Windows if found. So Microsoft dropping support for Win10 will eventually force the majority of users to upgrade to Win 10.

You’re right that 0patch’s move to support Windows 10 is important, but it’s still only a partial safety net, not a replacement for full vendor support.

What 0patch can realistically do
0patch is very good at:

• Delivering micropatches for specific vulnerabilities (including some 0‑days and in‑the‑wild exploits).
• Covering some holes on unsupported systems (they’ve done this for older Windows versions before).

But it has hard limits:

• They don’t ship full cumulative updates like Microsoft – only selected, targeted fixes.
• They focus on security bugs, not general Windows bugs, compatibility issues, or large architectural problems.
• They can’t realistically catch or patch every new vulnerability in Windows, especially logic flaws that never become public.

So I agree with your conclusion: as time goes on, relying on 0patch (or any third‑party patch service) instead of official Microsoft updates becomes increasingly risky. It’s a strong hardening layer for those who must stay on Windows 10, but not a long‑term strategy for the majority of users.

And yes, I assume you meant this:

• Microsoft dropping support for Win10 will eventually force the majority of users to upgrade to Windows 11 (or move to another OS).

Practical takeaway

• 0patch is a good option for advanced users and organizations that need to extend Windows 10 life a bit.
• For typical home users, the safer path over the next years is still:
  • Move to Windows 11 on supported hardware, or
  • Change OS (e.g. a suitable Linux distro) on older hardware.

Anyone staying on Windows 10 long‑term should treat 0patch and similar services as defense‑in‑depth, not as a full substitute for a supported operating system.

 

[Victor M]

If trying out Linux, do give Fedora a try, it patches/upgrades almost every other day. All you have to do is type in one command: sudo dnf update. Updates are integrity checked + batch transaction checked. And you won't have to worry that MS once a month update cycle not giving you protection against zero days. When a vuln is announced it will be patched within a few days.

Ubuntu is not bad eitther, it has a livepatch feature should you forget to patch. But remember to subscribe to the free ubuntu pro. Only available to the LTS 24 version I think. And the Pro also gives you the DSA STIG ( for those folks who like DoD level hardening )

 

[Divine_Barakah]

If trying out Linux, do give Fedora a try, it patches/upgrades almost every other day. All you have to do is type in one command: sudo dnf update. Updates are integrity checked + batch transaction checked. And you won't have to worry that MS once a month update cycle not giving you protection against zero days. When a vuln is announced it will be patched within a few days.

I tried Fedora a few months ago and I liked it. I also tried Manjaro, Elementary OS, PopOS, Linux Mint, OpenSuse and Linux Mint.