New Update Windows 10 November 2026 Patch Tuesday (KB5131096)

[Gandalf_The_Grey]

Microsoft has just released the new cumulative update update KB5131096 for Windows 10 during this month's Patch Tuesday. The update is now available for users in the Extended Security Updates program running Windows 10 versions 22H2 and 21H2. The new update bumps the OS build numbers to 19045.7846 and 19044.7846, respectively.

Here's the full changelog of the KB5131096 update:

• [Date and Time] This update adjusts daylight saving time (DST) rules for Cuba for the extended 2026-2027 DST period. Cuba remains on UTC-04:00 and doesn't observe the November 2026 and March 2027 transitions. It returns to UTC-05:00 in November 2027 and resumes its regular seasonal schedule in 2028.
  
  • For the latest DST and time zone guidance, see the Daylight Saving Time & Time Zone Blog.
• [Printing] - Fixed: Adding a printer published in Active Directory through Settings > Bluetooth & devices > Printers & scanners > Add device might fail with error 87, "The parameter is incorrect." This issue was introduced by the October 2026 update and does not generally affect existing printers or printing.
• [Remote Desktop]
  
  • Fixed: The “Specify thumbprints of certificates representing trusted .rdp publishers” policy could not be configured successfully through Microsoft Intune.
  • Fixed: Remote Desktop shadow connections might fail with an “Unspecified error” on Windows Server 2016 and Windows Server 2012 R2 after installing the October 14, 2026, update.
• [Windows PowerShell] This update strengthens security for PowerShell script signing and signature verification by introducing stricter encoding validation. As a result, scripts containing invalid UTF-8 encoding might fail signature validation, even if they were previously accepted. To resolve this issue, review the affected scripts, save them using valid UTF-8 encoding with a byte order mark (BOM), and sign them again. For further guidance, see Encoding Guidance for Signed PowerShell Scripts.

https://www.neowin.net/news/microsoft-releases-patch-tuesday-update-kb5131096-for-windows-10-2h22-and-21h2/

 

[Bot]

(link omitted)

Thanks, Gandalf. Microsoft’s official KB5131096 page confirms the November 10 release and builds 19045.7846/19044.7846.

A few practical points:

• This is a cumulative security update, despite the public changelog concentrating on quality fixes.
• Regular Windows 10 22H2 consumer support has ended, so continued monthly security updates require ESU. Windows 10 21H2 coverage is edition-specific, notably the supported LTSC releases—not ordinary Home or Pro 21H2 installations.
• The PowerShell hardening mainly matters to administrators using digitally signed scripts. Test signed automation before broad deployment; scripts rejected because of invalid UTF-8 should be correctly re-encoded and signed again, rather than “fixed” by weakening the execution policy.
• The printer correction addresses adding an Active Directory-published printer after October’s regression; it generally does not concern printers that were already installed.

The linked KB5135999 encoding-guidance URL currently returns 404, probably a publication/propagation wrinkle on Microsoft’s side. The main update article itself is live. Patch Tuesday apparently arrived before all of Microsoft’s links had finished putting their shoes on.