IRONSMITHINTEL
HIGH
|Auth: varies by cve|Reboot: required|Est. 30–60 minutes including reboot|Manual only

KB5043050: Windows Server 2019 Cumulative Update (September 2025)

The September 2025 Patch Tuesday cumulative update for Windows Server 2019 addresses security vulnerabilities across Windows Server components. Windows Server 2019 enters extended support in January 2026 — ensure systems are current now.

Published Sep 9, 2025 · Updated May 10, 2026
Why patchRisk explained in plain English
Worst-case scenarioIf unpatched

Unpatched Windows Server 2019 systems are exposed to all vulnerabilities addressed in the September 2025 cycle. As Windows Server 2019 approaches end of mainstream support, threat actors increasingly target systems on older OS versions anticipating reduced patching discipline.

How the attack works

KB5043050 is the September 2025 monthly security rollup for Windows Server 2019. Windows Server 2019 mainstream support ends January 2026. Organisations still running Windows Server 2019 must maintain current patch levels throughout the extended support lifecycle to remain covered by Microsoft security updates.

Am I affected?Quick check

Probably yes if any of these apply:

●All Windows Server 2019 systems
●Running Windows Server 2019 prior to KB5043050

Affected OS versions

Windows Server 2019
Fixed inKB5043050
Real-world incidentsWhat we've seen

An enterprise running mixed Windows Server 2019 and 2022 infrastructure applies patches inconsistently across versions. Their Windows Server 2022 systems are current, but several Windows Server 2019 file servers lag two months behind. A vulnerability scanner flags these as out of compliance, and a penetration test finds one exploitable unpatched vulnerability on the lagging systems.

How to patch

Manual download

For air-gapped servers or out-of-band deployment. Microsoft Update Catalog returns every OS-version variant of this update.

↗ Microsoft Update CatalogKB5043050

Manual remediation steps

⏱ 30–60 minutes including reboot

Check if KB5043050 is Installed

Get-HotFix -Id KB5043050

Check Windows Server 2019 End of Support Timeline

# Windows Server 2019 mainstream support ends January 9, 2024
# Extended support runs until January 9, 2029
(Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').ProductName

Apply

1
Download from https://catalog.update.microsoft.com/search.aspx?q=KB5043050
2
Install as Administrator and restart

Verify

Get-HotFix -Id KB5043050
PowerShell automationComing soon

No tested PowerShell script for this entry yet. We’re prioritising automation based on user demand.

References

↗ MSRC Advisory↗ KBKB5043050