KB5075999 - Windows Server 2016 / Windows 10 LTSB 2016 Security Update (February 2026)

Summary

KB5075999 is a security update for Windows Server 2016 and Windows 10 Enterprise LTSB 2016, producing OS build 14393.8868. Released on February 10, 2026, it is a monthly security-quality update that includes a graphics stability fix and cumulative improvements built on the January 2026 update baseline. See Microsoft Support for the official page.

Improvements and fixes

• Resolves a stability problem that was affecting certain GPU configurations, reducing crashes or hangs tied to specific graphics hardware setups.
• Incorporates all fixes and improvements shipped in the previous cumulative update, January 13, 2026 - KB5073722 (OS Build 14393.8782), so devices that missed that release are brought fully current by installing this package alone.

Known issues

Microsoft lists no known issues for this update at the time of writing.

How to get this update

Prerequisite - Servicing Stack Update

Before installing KB5075999, you must have the latest Servicing Stack Update (SSU) in place. For updates released on or after January 14, 2025, the SSU is a hard requirement - without it, this update may not be offered to your device at all. The required SSU for this release is KB5075902.

• Windows Update / Windows Update for Business - KB5075902 is offered automatically before KB5075999. If the SSU is absent, the cumulative update will not appear.
• Microsoft Update Catalog - Download and install KB5075902 manually before applying the standalone KB5075999 package.
• WSUS administrators - You must explicitly approve both KB5075902 and KB5075999 in your WSUS console. The SSU will not flow to managed clients unless approved.

Installation channels

• Windows Update - The update downloads and installs automatically.
• Windows Update for Business - Delivered automatically in line with your configured deferral and ring policies.
• Microsoft Update Catalog - A standalone package is available for offline or manual deployment scenarios.
• Windows Server Update Services (WSUS) - Syncs automatically when Products and Classifications are set to: Product - Windows Server 2016, Windows 10, and Windows 10 LTSB; Classification - Security Updates.

Additional notices

Secure Boot certificate expiration - Secure Boot certificates on most Windows devices are set to begin expiring in June 2026. Microsoft has been pushing updated certificates to consumer and unmanaged business devices for several months. Devices that have not yet received updated certificates will continue to start and operate normally, and standard Windows updates will continue to install. IT administrators should review the Secure Boot Playbook for Windows clients and Windows Server to check device readiness. End users can check status in the Windows Security app.

End of support dates - Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB reach end of support on October 13, 2026. Windows Server 2016 reaches end of support on January 12, 2027. After those dates, Microsoft will no longer provide free updates, technical assistance, or security fixes through Windows Update.

Microsoft Store applications - Windows updates do not deliver Microsoft Store app updates. Enterprise users should refer to Microsoft Store apps in Configuration Manager; consumer users should use the Get updates for apps and games in Microsoft Store option.

Frequently asked questions

Does installing KB5075999 replace KB5073722 from January 2026?

Yes. This package is cumulative and incorporates everything shipped in KB5073722 (OS Build 14393.8782) from January 13, 2026. If your servers or workstations missed that update, installing KB5075999 alone brings them fully current without needing to stage the January release first.

Is the Servicing Stack Update mandatory before deploying this update?

Yes, the SSU (KB5075902) is a hard prerequisite for all updates released on or after January 14, 2025. Without it, the update may not be offered through Windows Update, and manual installation attempts from the Catalog may fail. Install or approve KB5075902 first, then proceed with KB5075999.

How do WSUS administrators deploy this update?

WSUS administrators must manually approve both SSU KB5075902 and cumulative update KB5075999 in the WSUS console. Neither package syncs to clients automatically under WSUS without explicit approval. Set the Product scope to Windows Server 2016, Windows 10, and Windows 10 LTSB and the Classification to Security Updates to ensure both packages appear in the sync.

Should I be concerned about the Secure Boot certificate expiration before applying this update?

Microsoft states that devices lacking the newer certificates will continue to start normally and accept standard Windows updates. However, IT administrators managing Windows Server 2016 or Windows 10 LTSB 2016 fleets should consult the Secure Boot Playbook to audit device certificate status before June 2026, when expiration begins to take effect across the broader device population.