Microsoft Issues Emergency Windows Updates to Fix Critical Remote Desktop and Shutdown Bugs
19 January 2026 – Microsoft has been forced to release emergency out-of-band updates for Windows 10, Windows 11, and Windows Server to address two critical issues introduced by this month’s Patch Tuesday security updates. The problems, which affected Remote Desktop connections and system shutdown functionality, prompted an unusual mid-month response from the software giant.
What Went Wrong with January’s Updates?
The January 2026 Patch Tuesday updates, released on 13 January, were intended to address 114 security vulnerabilities across Microsoft’s product ecosystem. However, soon after deployment, users began reporting two particularly disruptive problems.
The first issue affected Remote Desktop functionality, causing credential prompt failures that prevented users from signing into Azure Virtual Desktop, Windows 365, and other remote connection applications. This proved particularly problematic for remote workers and IT teams relying on these services.
The second issue impacted power management on devices with Secure Launch enabled, specifically Windows 11 version 23H2 systems. Affected devices would restart instead of properly shutting down or entering hibernation, potentially leading to data loss and battery drain.
Emergency Response and Fixes
Microsoft responded by releasing out-of-band (OOB) updates on 17-18 January 2026. These emergency patches are not being distributed through the standard Windows Update channel and must be manually downloaded from the Microsoft Update Catalog.
The company has also made Known Issue Rollback (KIR) packages available for enterprise-managed devices, allowing IT administrators to deploy fixes through Group Policy without requiring manual updates on each machine.
Key Facts: January 2026 Windows Emergency Updates
| Issue | Affected Systems | Emergency Update |
|---|---|---|
| Remote Desktop sign-in failures | Windows 10, 11 (all versions), Windows Server 2019/2022/2025 | KB5077744, KB5077793, KB5077795, KB5077796, KB5077797, KB5077800 |
| Shutdown/hibernation failures (Secure Launch devices) | Windows 11 version 23H2 only | KB5077797 |
| Previously patched WSUS vulnerability under active attack | Windows Server Update Services | CVE-2025-59287 emergency patch |
Australian Context and Security Implications
The timing of these issues is particularly concerning for Australian organisations, many of which are still navigating the transition from Windows 10. According to recent data, approximately 34% of Australian businesses had not yet upgraded to Windows 11 by late 2025, leaving them potentially exposed to both the original vulnerabilities and the update-related issues.
The Australian Cyber Security Centre (ACSC) has highlighted the importance of prompt patching, particularly for the actively exploited Desktop Window Manager vulnerability (CVE-2026-20805) that was among the 114 flaws addressed in January’s security updates.
What Users Should Do Now
For users experiencing Remote Desktop connection problems or shutdown issues on Windows 11 23H2 devices with Secure Launch enabled, Microsoft recommends manually downloading and installing the appropriate emergency update from the Microsoft Update Catalog.
Organisations with managed IT environments should consult with their administrators about deploying the Known Issue Rollback packages via Group Policy. Users not experiencing these specific issues can wait for the fixes to be incorporated into next month’s regular security updates.
Frequently Asked Questions
How do I know if I need these emergency updates?
If you’ve installed the January 2026 Windows security updates and are experiencing Remote Desktop sign-in failures or your Windows 11 23H2 device with Secure Launch won’t shut down properly (restarts instead), you should apply the emergency updates.
Why aren’t these fixes available through Windows Update?
Out-of-band emergency updates are typically reserved for critical issues that cannot wait for the next monthly update cycle. They’re often distributed manually initially to allow for controlled deployment and testing before broader release.
What about reports of gaming performance issues?
Some users have reported performance drops with Nvidia GPUs after the January updates, but Microsoft has not officially confirmed this as a known issue. The emergency updates specifically target the Remote Desktop and shutdown problems.
How does this affect Australian businesses still using Windows 10?
Organisations using Windows 10 Extended Security Updates are affected by the Remote Desktop issue and should apply KB5077796. This highlights the ongoing challenges of maintaining legacy systems, with 34% of Australian businesses reportedly still on Windows 10 as of late 2025.