Microsoft extends security updates for Microsoft 365 apps on Windows 10 until October 10, 2028, after previously planning to end support on October 14, 2025
Microsoft 365 apps will continue to get security updates on Windows 10 for another three years.
Context & Ripple Effects
Microsoft had drawn a hard application-support line in January, saying Microsoft 365 apps would lose support on Windows 10 when the operating system reached its end-of-support date. That sat alongside its earlier plan for paid extended Windows 10 security coverage, creating separate timelines for the OS and its productivity suite.
The reversal matters because it preserves a security-maintenance path for organizations still running Windows 10, without changing the underlying operating-system support deadline.
First-order effects
- Windows 10 devices running Microsoft 365 apps can continue receiving app security updates through October 10, 2028, rather than losing that coverage in October 2025.
- Microsoft removes the immediate application-security cliff it had set for Microsoft 365 customers on the older OS.
Second-order effects
- IT teams gain more flexibility to stage Windows migrations: the Microsoft 365 security-update timetable no longer forces the same near-term cutover as the prior app-support policy.
- The split between Windows 10 OS support and Microsoft 365 app updates makes support eligibility more granular, requiring customers to distinguish application protection from operating-system protection.
Third-order effects
- If maintained, the change reinforces a transition model in which Microsoft retires an operating system on schedule while extending selected services and applications for installed-base customers.
- Longer application maintenance can reduce the urgency of endpoint refresh cycles, though customers still must weigh the risks and coverage limits of running an OS beyond its standard support window.
The trend: This is one instance of major platform vendors separating product end-of-life dates from the longer support horizons demanded by entrenched enterprise deployments.