Windows 10 Missing Security Fixes: What to Do

If Windows 10 says your device is missing important security and quality fixes, it means Windows Update has failed to install one or more updates, leaving your system potentially vulnerable. The fix usually involves running the Windows Update Troubleshooter, resetting update components, or manually installing the problematic update from the Microsoft Update Catalog.

Why Windows 10 Shows This Message

Windows 10 checks for updates automatically and downloads them in the background. When an update fails to install, Windows Update leaves the system in a partially updated state and displays a warning banner in Settings > Update & Security > Windows Update. The message “Your device is missing important security and quality fixes” appears when the update history shows repeated failures or when the update service cannot complete a pending installation.

Common triggers include:

Corrupted update cache files in the SoftwareDistribution folder
Third-party antivirus software interfering with the update process
Insufficient disk space (Windows 10 needs about 20 GB free for feature updates)
Outdated or incompatible drivers, especially for network adapters
System file corruption from a previous crash or power loss
Pending reboot that was ignored for too long

How Windows Update Works

Windows Update uses the Windows Update Agent (WUA) to scan for, download, and install updates. The process involves several services: the Windows Update service (wuauserv), the Background Intelligent Transfer Service (BITS), and the Cryptographic Services (CryptSvc). When any of these services is stopped or misconfigured, updates fail silently.

Updates are delivered in two categories: quality updates (monthly security patches and bug fixes) and feature updates (twice-yearly major version upgrades like 22H2). The message specifically refers to quality updates, which Microsoft releases on the second Tuesday of each month (Patch Tuesday). If your device misses several of these, the warning appears.

The update history log (Settings > Update & Security > View update history) shows each attempt with an error code. Common codes include 0x80070005 (access denied), 0x800f081f (source not found), and 0x8024200d (update not found). These codes help identify the root cause.

Step-by-Step Fixes to Try

Start with the simplest solution and work down the list. Each step takes a few minutes.

Run the Windows Update Troubleshooter. Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters > Windows Update. Run it and restart your PC.
Check disk space. Open File Explorer > This PC. If the C: drive is nearly full, free up space by deleting temporary files (Disk Cleanup) or moving personal files to another drive. Windows needs room to extract and install updates.
Restart Windows Update services manually. Press Win+R, type services.msc, find Windows Update, BITS, and Cryptographic Services. Right-click each, select Stop. Then delete the contents of C:\Windows\SoftwareDistribution\Download and C:\Windows\System32\catroot2 (you may need to take ownership first). Restart the services and check for updates again.
Run DISM and SFC. Open Command Prompt as administrator. Type DISM /Online /Cleanup-Image /RestoreHealth and press Enter. After it finishes, type sfc /scannow. Both tools repair corrupted system files that block updates.
Temporarily disable third-party antivirus. Some security suites lock update files. Disable real-time protection, run Windows Update, then re-enable it. Do not leave your PC unprotected for long.
Manually download the update. If you see a specific KB number in the update history (e.g., KB5006670), go to the Microsoft Update Catalog website, search for that KB, download the correct version for your system (x64 or x86), and run the installer.

Common Problems and Misconceptions

Many users believe the message means Windows 10 is no longer supported. That is not true for most editions. Windows 10 Home and Pro are supported until October 14, 2025. The warning simply means your device has not received recent patches, which could be due to a temporary glitch or a hardware incompatibility.

Another misconception is that you can ignore the message indefinitely. While Windows will keep trying, each missed update compounds the risk. Security patches fix vulnerabilities that malware exploits. The longer you wait, the more exposed your system becomes.

A frequent problem is the update getting stuck at a certain percentage (e.g., 0% or 100%). This usually indicates a stalled service or a corrupted download. Rebooting and running the troubleshooter often resolves it. If not, the manual service restart method above works in most cases.

Some users see the message after a failed feature update (like 22H2). Even if the feature update fails, quality updates should still install. If they don’t, the issue is likely with the update components, not the feature update itself.

When to Use the Media Creation Tool

If all else fails, the Media Creation Tool can force a repair upgrade. This tool downloads the latest Windows 10 ISO and reinstalls the OS while keeping your files and apps. It effectively resets the update system without wiping your data.

To use it:

Download the Media Creation Tool from Microsoft’s official website (search “Media Creation Tool”).
Run it and select “Upgrade this PC now”.
Follow the prompts. It will download the latest version and install it. This can take an hour or more.
After completion, Windows Update should work normally.

This method is safe and does not delete personal files, but it does reinstall all system files. Back up important data before starting, just in case.

Costs and Risks of Ignoring the Warning

There is no monetary cost to fixing the issue yourself. The tools and methods described are free. However, ignoring the warning carries real risks:

Security vulnerabilities remain unpatched, increasing the chance of ransomware or malware infection.
Compatibility issues with new software or hardware may arise.
If your PC is used for work, it may fail compliance checks.
After October 2025, Windows 10 will no longer receive security updates, so the warning will become permanent. At that point, you will need to upgrade to Windows 11 or pay for Extended Security Updates (ESU) if available.

If you are not comfortable with manual troubleshooting, a local computer repair shop can fix this for a fee, but the steps above are safe for most users to try first.

Alternatives to Fixing Windows Update

If you cannot resolve the issue, consider these alternatives:

Reset Windows Update components via PowerShell script. Microsoft provides a script that automates the service restart and cache clearing. Search for “reset Windows Update script” from a reliable source.
Use the Windows 11 upgrade path. If your PC meets Windows 11 requirements, upgrading will bypass the broken update system entirely. Check with PC Health Check tool.
Perform a clean install. Backup your files, then reinstall Windows 10 from a USB drive. This guarantees a fresh update system but requires reinstalling all programs.
Contact Microsoft Support. For enterprise users, support is available. Home users can use the Get Help app or the Microsoft community forums.

Frequently Asked Questions

Will I lose my files if I run the Media Creation Tool?

No, the “Upgrade this PC” option keeps your personal files, settings, and installed apps. It only replaces system files. However, it is wise to back up important data before any major system change.

How do I find the KB number for a failed update?

Go to Settings > Update & Security > View update history. Look for entries with “Failed” status. The KB number is listed next to the update name, like KB5006670. Use that number in the Microsoft Update Catalog.

Why does Windows Update keep failing with error 0x80070005?

This error means “Access Denied.” It often occurs when the Windows Update service lacks proper permissions to the SoftwareDistribution folder. Resetting the folder permissions or running the troubleshooter usually fixes it. If not, the manual service restart method may help.

Can I skip a specific update that keeps failing?

You can hide an update using the “Show or hide updates” troubleshooter package from Microsoft. However, hiding a security update is not recommended because it leaves your system vulnerable. Try fixing the underlying issue first.

Is it safe to delete the SoftwareDistribution folder?

Yes, but you must stop the Windows Update service first. The folder contains only temporary update files. After deleting it, Windows recreates it automatically on the next update check. Do not delete the folder while the service is running.

What happens when Windows 10 reaches end of support?

After October 14, 2025, Windows 10 will no longer receive free security updates. The warning message will remain, and your PC will become increasingly vulnerable. You can upgrade to Windows 11 (if eligible) or purchase Extended Security Updates for up to three years, though this is aimed at businesses.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →