Key Takeaways
1. Microsoft released security update KB5075912 for Windows 10 ESU on February 10, 2026, upgrading versions 22H2 and 21H2.
2. The update resolves shutdown and hibernation issues for PCs with Secure Launch and Virtual Secure Mode after previous updates.
3. KB5075912 introduces changes to Secure Boot, including targeting data for issuing new Secure Boot certificates.
4. Devices may still function without the update, but could enter a “degraded security state” over time if they miss it.
5. Unsupported versions of Windows won’t receive new Secure Boot certificates unless part of the ESU program, and some may need OEM firmware updates.
Microsoft has released a security update for Windows 10 Extended Security Updates (ESU) on February 10, 2026. This update, known as KB5075912, upgrades Windows 10 version 22H2 to OS Build 19045.6937, while version 21H2 is updated to 19044.6937.
Issues Resolved
According to Microsoft, KB5075912 addresses a problem that affects some PCs capable of Secure Launch with Virtual Secure Mode (VSM) turned on. After installing a Windows security update from January 13, 2026, or later, certain systems might experience issues where they are unable to shut down or hibernate, instead restarting unexpectedly.
Secure Boot Changes
Additionally, KB5075912 introduces a change related to Secure Boot. Microsoft has stated that Windows “quality updates” now include targeting data that helps determine if a device is eligible for new Secure Boot certificates. These certificates will only be issued after the devices demonstrate “sufficient successful update signals” to ensure a proper phased rollout.
Important Information
In a related post on the Windows Experience Blog released the same day, Microsoft explained that the replacement of the Secure Boot certificates is a comprehensive initiative involving both Windows servicing and OEM firmware. They emphasized that devices will keep functioning even if they miss the update, however, they might enter a “degraded security state” over time. It is also noted that unsupported versions of Windows, such as Windows 10, won’t receive the new certificates unless they are part of the ESU program. Some devices may require an OEM firmware update before they can utilize the certificate changes sent through Windows Update.
Users are directed to the Microsoft Update Catalog for standalone packages, with KB5075912 entries for Windows 10 (including 22H2) marked on February 10, 2026.
Lastly, Microsoft’s release notes mention that they are not aware of any current issues related to this update.
Source:
Link












