Microsoft Extends Windows 10 ESU Support to October 2027

www.microsoft.com

Microsoft Extends Windows 10 ESU Support to October 2027

First seen 30 Sep 2026, 14:29 UTC • •27.9

Article Content

1 / 5

Browse articles

ThreatCluster •September 30, 2026 at 21:38 UTC

•Microsoft extended Windows 10 ESU support until October 12, 2027.
•Enrollment is open until the new deadline, requiring a Microsoft account.
•Devices not signed in with a Microsoft account may lose update access after 60 days.

Microsoft has extended the Windows 10 Extended Security Updates (ESU) program for consumers by one year, allowing enrolled devices to receive critical security updates until October 12, 2027. This extension was quietly announced through updates to Microsoft's documentation and a blog post. The ESU program is designed for users transitioning to Windows 11 and provides critical security updates for Windows 10, version 22H2. Enrollment remains open until October 12, 2027, and users must sign in with a Microsoft account to maintain coverage. Devices that do not remain signed in may lose access to updates after 60 days. The program does not include technical support or feature enhancements. Microsoft emphasizes the importance of enrolling to reduce vulnerabilities during the transition period.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-06-25

ESU program extension announced

Microsoft updated its documentation to reflect the extension of the ESU program for consumers by one year.

BleepingComputer

2026-09-30

ESU program details published

Microsoft confirmed the ESU program details and requirements for enrollment on its official website.

2026-09-30

Notebookcheck reports ESU details

Notebookcheck reported on the ESU program's conditions and the implications for users in Europe.

More articles in this cluster (4)

Threat Graph

9 entities, 8 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Malware

Organization (1)

Microsoft

Indicator (1)

esu.to

Affected Platform (6)

Active Directory
Microsoft Entra
Mobile Device Management
Windows
Windows 10
Windows 11

Relationships

Malware targets Active Directory
Malware targets Microsoft Entra
Malware targets Mobile Device Management
Malware targets Windows
Malware related to Microsoft
Malware related to esu.to
Malware related to Windows 10
Malware related to Windows 11

Following this threat?

Track Microsoft in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How do I enroll in the ESU program?

To enroll, ensure your device runs Windows 10 version 22H2 and sign in with a Microsoft account.

What happens if I don't enroll by October 12, 2027?

Devices not enrolled will not receive any security updates after the end of support on October 14, 2025.

Are there any costs associated with ESU enrollment?

Enrollment is free for users who remain signed in with their Microsoft account; otherwise, a one-time fee may apply.

Continue Reading

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…