Missed Windows updates could leave PCs without new security patches as early as 2027. Microsoft has warned about the need to replace the certificates that the system uses for identification when accessing the update service. Old certificates expire on May 17 and June 19, 2027. If the PC does not have new certificates by this time, it will no longer receive both security patches and functional updates.
Image source: Microsoft
On most computers, the certificate renewal process has already been completed. New certificates are included in standard monthly updates, so no additional steps are required on current systems. The problem only affects devices that have not been updated for months, as well as versions of Windows that are no longer supported.
According to the official blog Windows IT Prothe update deadline depends on the OS version. This requirement does not apply to Windows 11 version 25H2 and later. For Windows 11 version 24H2, you only need to install a security update released in September 2025 or later. However, Microsoft is already automatically migrating home PCs from version 24H2 to 25H2.
All other supported versions of Windows 11 and Windows 10 require a security update released on or after July 2026, but no later than June 19, 2027. For Windows 10 Enterprise 2019 LTSC, as well as Windows Server 2019 and 2016, the deadline is May 17th. Computers running versions of Windows that have ended support will completely lose access to updates. In such cases, Microsoft only recommends updating the operating system.
For regular users, this information will be useful primarily to Windows 10 owners. Those who have not enrolled their PC in the Extended Security Updates (ESU) program have not received patches since October 2025 and therefore did not receive the July 2026 update. After June 19, 2027, these PCs will no longer receive updates through Windows Update. Registration for the ESU program is open until October 2027. Users who registered before June and installed the suggested updates will receive the new certificates along with the cumulative update.
You can find out the installed version of the operating system by entering the command “winver” in the search field on the taskbar. The date of the last update is shown in the update history: in the Windows Update section of Settings in Windows 11 or in the Update & Security section in Windows 10. For all supported versions, you only need to install one cumulative update released in July 2026 or later. If it is missing, the problem can usually be resolved by manually searching for updates in Windows Update.
For computers where automatic updates do not work, Microsoft recommends using the Microsoft Update Catalog, where you can manually download the necessary packages. This change does not affect computers that receive updates through WSUS in a corporate environment.
If you notice an error, select it with the mouse and press CTRL+ENTER.
