KB5087537 — May 2026 Security Update for Windows 10 Version 1607 and Windows Server 2016

Overview

KB5087537 is a comprehensive security update released on May 12, 2026, for Windows 10 Version 1607 and Windows Server 2016 systems. This update brings the operating system build to 14393.9140 and addresses multiple critical security vulnerabilities across various Windows components.

Security Vulnerabilities Addressed

This security update resolves vulnerabilities in several key Windows components that could potentially be exploited by attackers to compromise system security. The affected components include:

Windows Kernel Components

Multiple privilege escalation vulnerabilities in the Windows kernel have been patched. These vulnerabilities could allow local attackers with limited privileges to gain elevated access to system resources. The fixes include enhanced memory management routines and improved validation of system calls.

Remote Desktop Services

Critical vulnerabilities in Remote Desktop Services that could enable remote code execution have been addressed. These security flaws could allow attackers to execute arbitrary code on target systems through specially crafted RDP requests. The update implements stronger authentication mechanisms and improved input validation.

Windows Graphics Components

Security issues in the Windows Graphics Device Interface (GDI) and related graphics subsystems have been resolved. These vulnerabilities could be exploited through malformed graphics files to achieve memory corruption and potential code execution. Enhanced bounds checking and validation routines have been implemented.

Microsoft Message Queuing (MSMQ)

Vulnerabilities in MSMQ that could lead to remote code execution have been patched. The fixes include improved message validation and enhanced security checks for queue operations to prevent processing of malicious messages.

Windows Print Spooler Service

Security flaws in the Print Spooler service that could result in privilege escalation or remote code execution have been addressed. The update includes enhanced driver validation and improved access controls for print-related operations.

Affected Systems

Installation Requirements

Before installing KB5087537, ensure your system meets the following requirements:

• Available disk space: Minimum 2 GB free space on the system drive
• System architecture: Compatible with both 32-bit and 64-bit systems
• Administrative privileges: Installation requires administrator rights
• Network connectivity: Required for automatic installation through Windows Update

Deployment Methods

Automatic Installation

For most users, KB5087537 will be automatically downloaded and installed through Windows Update. The update is classified as Important and will be included in the regular update cycle.

Manual Installation

Enterprise administrators can download the standalone update package from the Microsoft Update Catalog for manual deployment. This method is useful for testing environments or systems with restricted internet access.

Enterprise Deployment

Organizations using Windows Server Update Services (WSUS) or System Center Configuration Manager (SCCM) can deploy this update through their existing patch management infrastructure. The update supports both immediate deployment and scheduled installation scenarios.

Verification of Installation

To verify successful installation of KB5087537, use one of the following methods:

Windows Settings

Navigate to Settings > Update & Security > Windows Update > View update history to confirm the update appears in the installed updates list.

PowerShell Command

Get-HotFix -Id KB5087537

System Information

Check that the OS build number has been updated to 14393.9140 in System Information (msinfo32.exe) or through the winver command.

Post-Installation Considerations

After installing KB5087537, monitor your systems for any compatibility issues with existing applications or services. While Microsoft has tested this update extensively, some third-party software may require updates to maintain full compatibility with the security enhancements.

Organizations should also review their security policies and procedures to ensure they align with the enhanced security features included in this update.