San Francisco, CA – Users still relying on Windows 10 after its official end-of-life date received a critical update this week. Microsoft released KB5075039 on March 3, 2026, specifically addressing a long-standing issue that prevented access to the Windows Recovery Environment (WinRE) for some users. This update is particularly important for those who opted to continue receiving security updates through the Extended Security Updates (ESU) program, a paid service launched after mainstream support for Windows 10 ended on October 14, 2025.
The WinRE is a vital troubleshooting tool built into Windows, offering a minimal environment to repair or restore the operating system when it fails to start, diagnose crashes, or remove malware. Its functionality is crucial for maintaining a stable and secure computing experience. The recent update aims to restore this functionality for Windows 10 users who experienced issues following the installation of the October 2025 KB5068164 update, which inadvertently broke the WinRE feature. According to Microsoft, the issue prevented WinRE from starting successfully after the prior update was installed.
Windows 10 ESU: A Continued Security Lifeline
Microsoft officially ended support for Windows 10 on October 14, 2025, meaning no further free security updates were provided through Windows Update. However, recognizing that many organizations and individuals still relied on the operating system, Microsoft introduced the Extended Security Updates (ESU) program. This paid program provides continued security updates for up to three years, allowing users to mitigate risks associated with running an unsupported operating system. The ESU program is available for Windows 10 Enterprise and Pro editions.
The need for ESU highlights the challenges of operating system transitions. While upgrading to a newer version like Windows 11 is the recommended path, it’s not always feasible for everyone due to hardware compatibility, software dependencies, or budgetary constraints. The ESU program offers a temporary solution, but it requires ongoing investment and careful management of updates like KB5075039 to remain effective. Microsoft has also warned about the impending expiration of Secure Boot certificates starting in June 2026, which could impact the ability of devices to boot securely if not updated in time. More information on Secure Boot certificate expiration can be found on Microsoft’s support website.
Fixing the Broken Recovery Environment
The root of the problem addressed by KB5075039 dates back to the October 2025 updates. As BleepingComputer reported, the KB5068164 update released in October 2025 introduced a bug that rendered the Windows Recovery Environment unusable. This issue was not immediately disclosed by Microsoft, and it took several months for a fix to be released. The update automatically applies Safe OS Dynamic Update (KB5073933) to the WinRE on a running PC, installing improvements to Windows recovery features.
According to Microsoft’s official release notes, the update specifically addresses the issue where WinRE would not start after installing the October 14, 2025 update KB5068164. This means that users who experienced problems accessing the recovery environment after installing the previous update should now be able to utilize it again after installing KB5075039. The ability to reliably access WinRE is critical for resolving a wide range of system issues, from boot failures to malware infections.
Installation Requirements and Verification
Installing KB5075039 is relatively straightforward. The update is delivered through Windows Update and can be found by navigating to Start > Settings > Windows Update > Check for updates. However, there are a few key requirements to ensure a successful installation. Most importantly, the WinRE partition must have at least 250 MB of free space. If insufficient space is available, the update will not be offered. Users can increase the available space in the WinRE partition by following instructions provided by Microsoft. Detailed instructions can be found on the Microsoft support page for KB5075039.
To verify if you have WinRE enabled, you can run the command reagentc /info in an elevated command prompt. The output will indicate whether Windows RE status is Enabled or Disabled. If WinRE is disabled, you may need to re-enable it before the update can be installed. The update will not be offered if the WinRE image has a version greater than or equal to version 10.0.19041.6807, or if the WinRE recovery partition was manually updated using a specific procedure.
Looking Ahead: Secure Boot and Windows 10’s Future
While KB5075039 addresses a critical issue with the Windows Recovery Environment, it’s important to remember that Windows 10 is nearing the end of its lifecycle. Microsoft continues to urge users to migrate to Windows 11 to benefit from the latest security features and improvements. However, for those who remain on Windows 10 ESU, staying current with updates like KB5075039 is essential for maintaining a secure computing environment.
Beyond the ESU program, a significant concern for Windows users is the upcoming expiration of Secure Boot certificates in June 2026. These certificates are crucial for verifying the integrity of the boot process and preventing malware from loading during startup. Without updated certificates, devices may be unable to boot securely. Microsoft has provided guidance on updating these certificates, and users are strongly encouraged to take action before the expiration date. Further details on Secure Boot certificate updates are available on Microsoft’s support website.
The next key date to watch is June 2026, when the Secure Boot certificates are set to expire. Users should proactively check their systems and follow Microsoft’s guidance to ensure a smooth and secure transition. Staying informed and applying updates promptly will be crucial for maintaining the security and stability of Windows 10 systems in the coming months.
Have you experienced issues with the Windows Recovery Environment? Share your experiences and questions in the comments below. And please share this article with anyone still using Windows 10 to aid them stay informed and secure.