Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The message “Your device is at risk because it’s out of date and missing important security and quality updates” usually means Windows Update has not successfully installed, or cannot confirm, one or more required updates. It does not by itself mean your PC has a virus. Open Settings → Windows Update yourself, then check Update history for the failed update’s KB number and error code; those details point to the right fix.
If the message appears only in a browser page, especially with flashing warnings, a phone number, payment demands, or a request to install remote-access software, treat it as a likely scam—not a Windows diagnosis. Close the page and do not call or install anything it recommends.
First, confirm the warning is really from Windows
A genuine Windows Update warning can appear in Settings, as a Windows notification, or on the Windows Update page after an update fails. Verify it by opening Settings → Windows Update from the Start menu rather than clicking a link in a pop-up.
A website cannot determine your Windows Update status just because you visited it. Be suspicious if a browser tab plays an alarm, claims Microsoft detected a virus, urges you to call a support number, asks for payment, or tells you to install remote-access software. Do not provide passwords, payment details, or remote access. Close the tab; if it will not close normally, use your browser’s task-ending option or restart the PC.
#1 Best Overall
- Less chaos, more calm. The refreshed design of Windows 11 enables you to do what you want effortlessly.
- Biometric logins. Encrypted authentication. And, of course, advanced antivirus defenses. Everything you need, plus more, to protect you against the latest cyberthreats.
- Make the most of your screen space with snap layouts, desktops, and seamless redocking.
- Widgets makes staying up-to-date with the content you love and the news you care about, simple.
- Stay in touch with friends and family with Microsoft Teams, which can be seamlessly integrated into your taskbar. (1)
What “security and quality updates” means
Security updates address known vulnerabilities. Quality updates generally include reliability, bug-fix, servicing, and other improvements that are not major feature upgrades. Many Windows updates are cumulative, so a newer package may include earlier fixes.
The message is broad: it does not identify a particular missing patch, prove that every security fix is absent, or establish that the computer is infected or definitely exploitable. Until Windows Update succeeds and reports the device current for its supported release, treat the warning as a reason to investigate.
Start with the low-risk checks
- Save your work and connect to reliable power. If you are using a laptop, plug it in before a lengthy update or repair.
- Check your connection and available storage. A weak connection can interrupt downloads, and a nearly full system drive can prevent updates from staging or installing. There is no single free-space figure that applies to every update.
- Check date, time, and time zone. Set them correctly in Windows if they are wrong.
- Temporarily disconnect a VPN and retry on a reliable connection if you suspect the VPN or proxy is blocking Microsoft Update. Do not change company network or security settings on a managed device without IT approval.
- Disconnect unnecessary external devices and restart Windows. A restart can complete an update that is waiting on servicing to finish.
- Open Settings → Windows Update, select Check for updates, and install applicable updates offered there, including prerequisites if Windows presents them. Restart when prompted—and check again afterward.
Then open Settings → Windows Update → Update history. Record the failed update’s KB number, any hexadecimal error code, and your Windows edition, version, and build. Also note whether the PC belongs to you or is managed by work or school. Microsoft’s Windows Update troubleshooting guidance recommends using the specific failure details rather than treating every warning as the same problem.
Run the Windows Update troubleshooter
Settings labels vary by Windows version and build. On some supported Windows 11 installations, go to Settings → System → Troubleshoot → Other troubleshooters → Windows Update → Run. On some Windows 10 installations, the route is Settings → Update & Security → Troubleshoot → Additional troubleshooters → Windows Update.
If your version offers the troubleshooter, run it and apply relevant recommendations, then restart and try Windows Update again. It can detect certain configuration or update-state problems, but it is not a complete repair tool. If the option is absent, move on rather than looking for an unofficial replacement. Microsoft’s Windows troubleshooting guidance describes the Windows 10 troubleshooter context.
Repair Windows components with DISM, then SFC
If updates continue to fail, corruption in the Windows component store or protected system files may be involved. DISM repairs the online Windows image/component store; SFC then checks protected system files using that store. Run them in this order, as Microsoft documents for update-repair cases.
- Open Start and type Command Prompt.
- Right-click Command Prompt, select Run as administrator, and approve the User Account Control prompt.
- Run this command and wait for it to finish:
DISM.exe /Online /Cleanup-Image /RestoreHealth - After DISM completes, run:
sfc /scannow - Restart the PC and try Windows Update again.
DISM may report that no component-store corruption was found or that the restore completed successfully. It may also fail because required source files could not be found. SFC may find no integrity violations, repair files, or report files it could not repair. Copy the exact result and error code; a command finishing does not guarantee that Windows Update is fixed. DISM can take time, particularly on a slow or damaged system. A progress percentage that pauses briefly is not necessarily a freeze.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #2
- MICROSOFT WINDOWS 11 PRO (INGLES) FPP 64-BIT ENG INTL USB FLASH DRIVE
Microsoft explains the DISM-before-SFC repair sequence. If DISM says it cannot find source files, it may be unable to use Windows Update as a repair source because Windows Update itself is inaccessible. An alternate source must match the installed Windows sufficiently closely; do not point DISM at an arbitrary folder or random ISO. For example, Microsoft documents an administrator-supplied source with this form:
DISM.exe /Online /Cleanup-Image /RestoreHealth /Source:\<servername>c$windows /LimitAccessSource selection is an advanced step. See Microsoft’s instructions for repairing a Windows image, or ask an administrator or technician to choose a matching source.
Reset Windows Update’s download and catalog caches
Try this only after recording the failure details and attempting the less invasive steps. Renaming the update working folders lets Windows recreate them; it does not uninstall Windows, but cached update data is discarded and may need to be downloaded again.
- Open Command Prompt as administrator as described above.
- Run each command separately. If a command reports an unexpected failure, stop and record the exact message rather than running a downloaded “one-click fix” script.
net stop wuauserv
net stop bits
net stop cryptSvc
ren %windir%SoftwareDistribution SoftwareDistribution.old
ren %windir%System32catroot2 catroot2.old
net start cryptSvc
net start bits
net start wuauservRestart the PC, open Windows Update, and check for updates again. These commands stop update-related services, rename SoftwareDistribution and catroot2, then start the services. Microsoft documents cache-reset steps in its guidance for Windows Update error 0x80070005 and error 0x80071a91.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Use the failed update’s error code to choose the next step
The warning itself is not a diagnosis. Find the error code beside the failed item in Update history, then compare it with Microsoft’s common Windows Update errors. The categories below are clues, not guaranteed explanations:
| Error or symptom | Possible area | Useful next direction |
|---|---|---|
0x80070005 |
Access denied, permissions, policy, or security software interference | Check whether the PC is managed and review the error-specific Microsoft guidance before changing permissions. |
0x800F081F |
Repair source missing or component-store problem | Run DISM and SFC; if DISM needs source files, use a correctly matched repair source. |
0x800F0831 |
Component-store corruption | Run DISM followed by SFC, then retry the update. |
0x80073701 |
Missing component-store assembly | Investigate component-store repair rather than repeatedly retrying the same update. |
0x80071A91 |
Transaction or file-system update problem | Use the specific Microsoft troubleshooting path; update-component reset may be relevant. |
| Repeated “pending restart” | Servicing has not completed | Restart and check again. If it persists, record the failure and seek targeted troubleshooting. |
| Update marked “superseded” | A newer applicable package replaces an older one | Look for the newer applicable update rather than forcing an obsolete package. |
For more advanced servicing failures, Windows records component servicing details in %windir%LogsCBSCBS.log. If you do not know how to interpret the log, share the relevant error and update details with IT or a technician instead of changing system files manually.
If one KB keeps failing, consider the Microsoft Update Catalog
When Windows Update identifies a specific KB number but repeatedly cannot install it, you can search that exact KB in the Microsoft Update Catalog. Check that the package applies to your Windows version, edition, and system architecture. Prefer the latest applicable package if the one that failed has been superseded, and check whether a prerequisite servicing update is required.
Rank #3
- STREAMLINED & INTUITIVE UI, DVD FORMAT | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
- OEM IS TO BE INSTALLED ON A NEW PC with no prior version of Windows installed and cannot be transferred to another machine.
- OEM DOES NOT PROVIDE SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.
- PRODUCT SHIPS IN PLAIN ENVELOPE | Activation key is located under scratch-off area on label.
- GENUINE WINDOWS SOFTWARE IS BRANDED BY MIRCOSOFT ONLY.
A manual package is not a universal repair. It may not apply to your PC, and it will not fix component corruption, an organizational policy block, or an unsupported Windows release. Avoid third-party driver or “update” download sites. Microsoft’s update troubleshooting guidance discusses superseded packages and prerequisites.
Free tools Windows power users keep installed
One-click scans. No signup required.
Check whether your Windows release is still supported
A PC can be unable to receive ordinary security updates because its particular Windows release or edition is no longer serviced. In that case, clearing the update cache or running SFC cannot extend its support. Check the installed edition, version, and OS build under Settings → System → About (labels can vary), then verify support for that specific release and edition through Microsoft. Do not assume every Windows 10 or Windows 11 device receives the same updates: edition, release, servicing channel, policy, and hardware can matter.
If an upgrade is needed, first check hardware compatibility, licensing, application compatibility, and any organization policy. An upgrade may not be possible or appropriate for every device. If the device is managed, ask IT before changing its Windows version.
For a work or school computer, contact IT before resetting components
Organizations may control updates through WSUS, Microsoft Configuration Manager, Intune, Group Policy, or another managed process. Updates can be deferred or local installation may be blocked by design. A local cache reset may conflict with the organization’s troubleshooting process or be overwritten by policy.
Send IT the failed KB number, error code, Windows edition/version/build, and a screenshot or details from Update history. Microsoft’s error guidance recognizes managed update sources and policy as relevant to update failures.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsWhen to escalate—and what not to do
Do not start with registry cleaners; they are not Microsoft’s standard fix for Windows servicing failures and can create new problems. Do not routinely disable antivirus. If Microsoft’s targeted troubleshooting indicates that a third-party security product, filter driver, storage utility, registry cleaner, or backup tool is involved, update or temporarily remove only the relevant software using its vendor’s documented process. Restore protection or reinstall it immediately after the controlled test. Advanced filter-driver inspection is not a first step for most home users.
If DISM cannot repair the component store, updates keep failing, or Windows has boot or storage problems, back up important files before considering more disruptive recovery. Depending on the device and diagnosis, the next step may be a properly supported repair installation, Windows recovery options, professional help, or—only after understanding the consequences—Reset this PC. A reset or clean installation can remove applications, settings, or data; do not use one casually. In Windows Recovery Environment, drive letters may differ from their usual values, so an advanced command such as dism /Image:C: /Cleanup-Image /RevertPendingActions must not be treated as a general fix or run without confirming the Windows partition and backing up important data.
If the warning remains after an apparently successful update, confirm that a restart finished, check for another pending update, and verify the current build and latest update status. An older failed item in history, a stale notification, an inapplicable package, an unsupported build, or managed policy can explain why the message has not cleared yet.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →
