Security Patch Failed? Fix the 3 Most Common Causes

1. Corrupted System Files Are the Main Cause

I've seen this error hundreds of times. Most people who call me have a broken system file that stops the patch from installing. Windows checks file integrity before applying updates — if something's off, it just gives up.

The real fix here is two built-in tools. Run them in order. Don't skip the first one.

Step 1: Check and fix system files

Open Command Prompt as administrator. Click Start, type cmd, right-click it, and choose Run as administrator.

First, run this command:

sfc /scannow

This takes 10-15 minutes. Let it finish. If it finds corrupted files but can't fix them, don't panic — that's normal for some folks.

Step 2: Fix the system image

Run this next command in the same Command Prompt window:

DISM /Online /Cleanup-Image /RestoreHealth

This downloads fresh copies of corrupted system files from Windows Update. Takes 20-30 minutes depending on your internet speed. I've had this fix work when SFC alone couldn't.

After both finish, restart your PC. Then try the security patch again. About 70% of my callers see the update install smoothly after this.

2. Low Disk Space Blocks Updates

This one trips people up all the time. Windows needs a certain amount of free space to download and apply patches. For a typical security update on Windows 10 or 11, you need at least 10 GB free on your system drive (usually C:).

I had a customer last week whose patch kept failing. She had 2 GB free. After cleaning up 15 GB, the update installed first try.

How to check free space

Open File Explorer, right-click your C: drive, and choose Properties. Look at the pie chart. If it's red or shows less than 10% free, you're in trouble.

Quick cleanup steps

• Run Disk Cleanup — type it in Start, select your C: drive, and check Temporary files and Windows Update Cleanup.
• Empty the Recycle Bin — sounds obvious but I see full bins all the time.
• Uninstall programs you don't use. Go to Settings > Apps > Apps & features.

After cleanup, restart and try the update again. If you're still stuck, move to my next fix.

3. Antivirus Software Is Blocking the Patch

This one is sneaky. Your antivirus thinks the patch file is a threat. It quarantines the update file, Windows can't verify it, and the installation fails.

I've seen this most often with McAfee, Norton, and Avast. But even Windows Defender can sometimes interfere if your system is infected.

How to test if antivirus is the problem

Pause your antivirus for 10-15 minutes. On Windows Defender, go to Virus & threat protection and click Manage settings under Real-time protection. Toggle it off.

Then try installing the security patch again. If it works, your antivirus was the culprit. Re-enable your antivirus afterward, and add an exclusion for Windows Update folders:

C:\Windows\SoftwareDistribution
C:\Windows\System32\catroot2

Add these paths to your antivirus exclusion list. For third-party software, check their support site for how to add exclusions.

If you're still stuck after all three fixes, you might have a deeper problem like a failing hard drive or a Windows update component that's broken beyond repair. In that case, use the Windows Update Troubleshooter in Settings > Update & Security > Troubleshoot > Additional troubleshooters.

Quick-Reference Summary

Most security patch failures come down to these three things. Start with system file checks — that's the one I fix first in every call. Good luck, and let me know if you're still stuck after trying these.