Microsoft has released the KB5122878 cumulative update for Windows 10 through the Extended Security Updates (ESU) program. For version 22H2, the build number increases to 19045.7725, while version 21H2 is updated to build 19044.7725.
A key focus of the update is the expansion of Secure Boot certificate deployment. The company is using high-confidence device location data to increase the number of devices automatically receiving these certificates. Deployment will continue over the coming months for supported PCs and unmanaged corporate devices.
The update also adjusts the standard time for Morocco, reflecting a permanent transition to UTC+00:00 starting September 20, 2026. Additionally, the OMA DM client (omadmclient.exe) component now features improved logging capabilities.
Compatibility for applications during the Windows Certificate Authority rotation is being enhanced by recognizing the Microsoft Windows Production PCA 2026 RSA2048-SHA256 as equivalent to PCA 2011. Technical fixes include resolving Remote Desktop audio redirection issues and correcting a BitLocker Group Policy bug that caused unnecessary recovery key prompts.
