First Windows 10 ESU Rollout Lands with Patch Tuesday as Microsoft Fixes Kernel Zero Day and Enrollment Bugs
Windows 10 users who opted into Microsoft’s Extended Security Updates are receiving their first major security rollup alongside November’s Patch Tuesday. The release arrives as Microsoft patches an actively exploited Windows Kernel flaw and resolves issues that blocked some PCs from enrolling in the ESU program.
What Windows 10 ESU Users Get
Microsoft’s November Patch Tuesday addresses more than 60 vulnerabilities across supported Windows versions. One zero-day affecting the Windows Kernel was fixed, a bug that could allow attackers to gain elevated privileges such as System or Administrator and then steal or manipulate sensitive data.
An additional out-of-band update is rolling out to resolve errors that prevented some Windows 10 users from signing up for ESU through the built-in wizard. Microsoft has also corrected a display issue where Windows Update falsely warned that Windows 10 had reached end of support for machines already covered under the ESU program.
How ESU Works for Consumers and Businesses
Consumers can secure another year of critical and important fixes by enrolling a Windows 10 version 22H2 device with a Microsoft account. Microsoft offers three ways to qualify: paying a one-time $30 fee, redeeming 1,000 Microsoft Rewards points, or enabling Windows Backup to sync settings to the cloud. A single consumer ESU license can cover up to ten devices linked to the same account.
For organisations, ESU access comes through volume licensing. Pricing starts at $61 per device for the first year and doubles each subsequent year, reaching a total of $427 per PC over three years.
Windows 11 Also Picks Up Feature Changes
November’s updates for Windows 11 bring a redesigned Start menu, refinements to File Explorer and Taskbar, and improvements to features like Voice Access and Click To Do on Copilot+ PCs. Users also report general performance and stability improvements as part of the rollout.
How to Get the Updates
Microsoft says the cumulative updates are mandatory and should install automatically. If they don’t, users can open Settings, navigate to Update & Security, select Windows Update, and click “Check for updates.” If you were previously unable to enroll in ESU, install the latest patch before running the ESU wizard again.
Bottom Line:
Windows 10’s first Extended Security Update delivers critical patches and clears the path for enrollment. Users planning to remain on Windows 10 through 2026 should register promptly to maintain protection while preparing for a long-term upgrade strategy.
Photo Credit: DepositPhotos.com