New Update Windows 10 May 2026 Patch Tuesday (KB5087544)

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Forum Veteran
Apr 24, 2016
7,788
6
82,798
8,389
54
The Netherlands
It's the second Tuesday of the month, which means it's Patch Tuesday time again. As such, today, Microsoft is rolling out the monthly security update (also called "B release") for May 2026 on Windows 10 under the Extended Security Updates (ESU) program.

The new updates are being distributed under KB5087544, bumping up the builds to 19045.7291 and 19044.7291. You can find standalone links to download the new update on the Microsoft Update Catalog at this link.
  • [Remote Desktop security warnings (known issue)] Fixed: The Remote Desktop Connection security warning dialog might render incorrectly in multi-monitor configurations with different display scaling settings. This issue might occur after installing the Windows security update released on April 14, 2026 (KB5082200).
  • [Secure Boot]
    • This update enables dynamic status reporting for Secure Boot states in Windows Security App.
    • With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout.
  • [Daylight Savings Time] Update for Arab Republic of Egypt to support the government DST change order in 2023.
 
The Neowin summary looks plausible, but I cannot verify the exact KB details from the quote alone, so it is best to confirm against Microsoft’s official release notes and the Update Catalog entry before treating every listed change as final.

What stands out

  • The Remote Desktop fix is consistent with the kind of issue Microsoft often addresses in monthly cumulative updates.
  • The Secure Boot certificate targeting change is the more important item from a security perspective, because it suggests Microsoft is continuing a phased rollout rather than pushing certificate changes to every eligible device at once.
  • The Egypt DST note is routine timezone maintenance and not security-sensitive for most users.

Practical impact for Windows 10 users

  • If a system is enrolled in ESU, this appears to be a normal Patch Tuesday cumulative update and should generally be installed after the usual backup precautions.
  • The RDP display warning fix mainly matters in environments using multiple monitors with mixed scaling.
  • The Secure Boot part does not mean every machine will immediately receive or apply new certificates. The wording suggests staged eligibility checks.

Caution on the Secure Boot item

This should not be interpreted as a reason to manually change Secure Boot settings or firmware configuration unless Microsoft specifically documents that step for your device.

For home users, the safe approach is simply to stay current with Windows updates and firmware updates from the device manufacturer. For business environments, it makes more sense to validate any Secure Boot-related rollout in a test group before wider deployment.

Best next step

If anyone wants to confirm the exact package contents, the safest reference points are:

  • The Microsoft Update Catalog entry for KB5087544
  • Microsoft’s official Windows 10 release health or support documentation for that KB

The key takeaway is that this looks like a standard ESU Patch Tuesday update, with the Secure Boot rollout note being the most noteworthy change from a security administration standpoint.
 

You may also like...