Microsoft Ships KB5087538 May 2026 Security Update for Windows 10 1809 and Server 2019

KB5087538 is a cumulative security update released on May 12, 2026 for Windows 10 Version 1809 and Windows Server 2019. It is part of Microsoft's regular Patch Tuesday release and updates affected systems to build 17763.8755.

According to Microsoft's update documentation, the release addresses several categories of vulnerabilities that could allow attackers to execute arbitrary code, escalate privileges, disclose information, or cause denial-of-service conditions on affected systems.

• Elevation-of-privilege vulnerabilities in Windows kernel-mode drivers
• Remote code execution vulnerabilities in Windows networking components
• Information-disclosure vulnerabilities in Windows graphics components
• Denial-of-service vulnerabilities in the Windows TCP/IP stack
• Security-bypass vulnerabilities in Windows authentication mechanisms

The update applies to Windows 10 Version 1809 on both 32-bit (x86) and 64-bit (x64) architectures, and to Windows Server 2019 (x64), including Server Core installations. All impacted systems move to build 17763.8755.

• Windows 10 Home, Pro, Enterprise and Education
• Windows Server 2019 Standard and Datacenter
• Windows Server 2019 Server Core

Microsoft attributes the underlying issues to improper input validation across various Windows components, insufficient boundary checks in kernel-mode drivers, and inadequate memory management in networking subsystems.

The kernel-mode driver fixes add enhanced input validation for driver communication interfaces, improved boundary checking for memory operations, and stronger access controls for privileged operations, addressing local EoP paths to SYSTEM. Networking changes strengthen packet validation and protocol parsing in TCP/IP processing, SMB handling and network authentication services.

Graphics subsystem patches add proper memory initialization and access controls to prevent information disclosure through malformed graphics API calls. TCP/IP stack changes improve error handling for malformed packets and resource management for connections, while authentication fixes strengthen credential validation, token handling and session management.

The update is available through Windows Update, the Microsoft Update Catalog, WSUS, SCCM and Microsoft Intune. Microsoft classifies it as a high-priority security update and recommends installing it as soon as possible.

To verify installation via PowerShell:

Get-HotFix -Id KB5087538

• A system restart is mandatory to complete installation.
• Ensure at least 2 GB of free disk space on the system drive.
• Test in non-production before broad rollout, especially with custom kernel-mode drivers or specialized networking software.
• Schedule installation during maintenance windows for VMs on older hypervisor platforms.

• Brief network connectivity interruptions during installation, expected to resolve after the required restart.
• Some third-party antivirus solutions may flag the installation process.
• Temporary performance degradation on VMs running on older hypervisors, typically resolved after restart.