KB5120236: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: August 11, 2026

Applies To
Win 10 Ent LTSB 2016 Win 10 IoT Ent LTSB 2016 Windows Server 2016, all editions

Summary

This servicing stack update (SSU) makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates make sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

Important

Not installing the latest SSU before applying Windows updates might result in the Windows update not being offered until the latest SSU is installed.

How to get this update

Install this update

To install this update, use one of the following release channels.

Available Next step
Available This update is available through Windows Update. It will be downloaded and installed automatically.

More information about this update

Item Details
Prerequisites There are no prerequisites to apply this update.
Restart information You might have to restart your computer after you apply this update.
Removal information Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device.
Update replacement information This update replaces the previously released update KB5099542.
File information A list of the files that are included in this update are provided in a CSV (Comma delimited) (*.csv) file. The file can be opened in a text editor such as Notepad or in Microsoft Excel.

Note The English (United States) version of this software update might contain files for additional languages.

Download Download the file information for update KB5120236.

References

Windows Secure Boot certificate expiration

Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.