Editing Windows XP (section)

==Support lifecycle==
{{Infobox
| title=Support status summary
| headerstyle = background-color: #e8ece4
| header1 = Expiration date
| label2 = Mainstream support
| data2 = {{End date|2009|4|14}}<ref name="lifecycle-db" />
| label3 = Extended support
| data3 = {{End date|2014|4|8}}<ref name="lifecycle-db" /> <br /> The official exceptions ended in May 14, 2019.
| header4 = Applicable [[Windows XP editions|XP editions]]:
| data5 = Home Edition, Professional Edition, [[Windows XP Professional x64 Edition|Professional x64 Edition]], Professional for Embedded Systems, [[Windows XP Media Center Edition|Media Center Editions]] (all), Starter Edition, Tablet PC Edition and Tablet PC Edition 2005,<ref name="lifecycle-db" /> as well as [[Windows Fundamentals for Legacy PCs]].<ref>{{cite web|title=Microsoft Product Lifecycle Search: Windows Fundamentals for Legacy PCs|url=https://support2.microsoft.com/lifecycle/search/default.aspx?sort=PN&qid=&alpha=Windows+Fundamentals+for+Legacy+PCs&Filter=FilterNO|work=Microsoft Support|publisher=[[Microsoft]]|access-date=October 13, 2012|url-status=live|archive-url=https://web.archive.org/web/20141005010726/http://support2.microsoft.com/lifecycle/search/default.aspx?sort=PN|archive-date=October 5, 2014|author=<!--N/A-->|date=<!--N/A-->}}</ref>
| header6 = Exceptions
| label7 = [[Windows XP 64-Bit Edition]] ([[Itanium]] edition, including Version 2003)
|data7 = Unsupported as of June 30, 2005<ref>{{cite web |url=https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036 |access-date=April 26, 2018 |date=July 12, 2015 |title=Microsoft Security Bulletin MS05-036 – Critical |url-status=live |archive-url=https://web.archive.org/web/20180426213340/https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036 |archive-date=April 26, 2018 |author=<!--N/A--> }}</ref>
| label8 = [[Windows XP Embedded]]
| data8 = Mainstream support ended on January 11, 2011<ref name="lifecycle-db" /><br />Extended support ended on January 12, 2016<ref name="lifecycle-db" />
| label9 = [[Windows Embedded for Point of Service]]
| data9 = Mainstream support ended on April 12, 2011<ref name=WEPOS-Life/><br />Extended support ended on April 12, 2016<ref name=WEPOS-Life>{{cite web|title=Windows XP Embedded Supported for Two or More Years|url=https://redmondmag.com/articles/2014/02/19/windows-xp-embedded-support.aspx|publisher=1105 Media|access-date=June 23, 2018|website=Redmond Magazine|archive-url=https://archive.today/20170220071056/https://redmondmag.com/articles/2014/02/19/windows-xp-embedded-support.aspx|archive-date=February 20, 2017|url-status=live|date=February 19, 2014|first1=Kurt|last1=Mackie}}</ref>
| label10 = [[Windows Embedded Standard 2009]]
| data10 = Mainstream support ended on January 14, 2014<br />Extended support ended on January 8, 2019<ref name="Standard-2009">{{cite web|title=Microsoft Product Lifecycle Search: Windows Embedded Standard 2009|url=https://support2.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=Windows+Embedded+Standard+2009&Filter=FilterNO|work=Microsoft Support|publisher=[[Microsoft]]|access-date=October 13, 2012|url-status=live|archive-url=https://web.archive.org/web/20150713174701/http://support2.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=Windows+Embedded+Standard+2009&Filter=FilterNO|archive-date=July 13, 2015|date=<!--N/A-->|author=<!--N/A-->}}</ref>
| label11 = [[Windows Embedded POSReady 2009]]
| data11 = Mainstream support ended on April 8, 2014<br />Extended support ended on April 9, 2019<ref name="POSReady-2009">{{cite web|title=Microsoft Product Lifecycle Search: Windows Embedded POSReady 2009|url=https://support2.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=Windows+Embedded+POSReady+2009&Filter=FilterNO|work=Microsoft Support|publisher=[[Microsoft]]|access-date=October 13, 2012|url-status=live|archive-url=https://web.archive.org/web/20141010033141/http://support2.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=Windows+Embedded+POSReady+2009&Filter=FilterNO|archive-date=October 10, 2014|date=<!--N/A-->|author=<!--N/A-->}}</ref>
}}

Support for the original release of Windows XP (without a service pack) ended on August 30, 2005.<ref name="lifecycle-db">{{cite web|title=Microsoft Product Lifecycle Search: Windows XP|url=https://support.microsoft.com/lifecycle/search/default.aspx?alpha=Windows+XP|work=Microsoft Support|publisher=[[Microsoft]]|access-date=May 14, 2022|url-status=dead|archive-url=https://web.archive.org/web/20120720010405/http://support.microsoft.com/lifecycle/search/default.aspx?alpha=Windows+XP|archive-date=July 20, 2012|date=<!--N/A-->|author=<!--N/A-->}}</ref> Both Windows XP Service Pack 1 and 1a were retired on October 10, 2006,<ref name="lifecycle-db" /> and both [[Windows 2000]] and Windows XP SP2 reached their end of support on July 13, 2010, about 24 months after the launch of Windows XP Service Pack 3.<ref name="lifecycle-db" /> The company stopped general licensing of Windows XP to OEMs and terminated retail sales of the operating system on June 30, 2008, 17 months after the release of Windows Vista.<ref>{{cite news | url=http://news.cnet.com/Microsoft-extends-Windows-XPs-stay/2100-1016_3-6210524.html | title=Microsoft extends Windows XP's stay | publisher=[[CBS Interactive]] | work=[[CNET]] | date=September 27, 2007 | access-date=June 5, 2008 | url-status=live | archive-url=https://web.archive.org/web/20080830072544/http://news.cnet.com/Microsoft-extends-Windows-XPs-stay/2100-1016_3-6210524.html | archive-date=August 30, 2008 | df=mdy-all |first1=Ina|last1=Fried}}</ref> However, an exception was announced on April 3, 2008, for OEMs producing what it defined as "ultra low-cost personal computers", particularly [[netbook]]s, until one year after the availability of [[Windows 7]] on October 22, 2009. Analysts felt that the move was primarily intended to compete against [[Linux]]-based netbooks, although Microsoft's Kevin Hutz stated that the decision was due to apparent market demand for low-end computers with Windows.<ref>{{cite news|title=Microsoft to keep Windows XP alive—but only for Eee PCs and wannabes |work=[[Computerworld]] |publisher=IDG |url=https://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9074720 |access-date=April 8, 2008 |url-status=dead |archive-url=https://web.archive.org/web/20080408004318/http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9074720 |archive-date=April 8, 2008 |date=March 3, 2008|first1=Eric|last1=Lai}}</ref>

Variants of Windows XP for [[embedded system]]s have different support policies: Windows XP Embedded SP3 and Windows Embedded for Point of Service SP3 were supported until January and April 2016, respectively. [[Windows Embedded Standard 2009]], which was succeeded by [[Windows Embedded Standard 7]], and [[Windows Embedded POSReady 2009]], which was succeeded by [[Windows Embedded POSReady 7]], were supported until January and April 2019, respectively.<ref name=zdnet-embeddedsupport>{{cite web|title=Microsoft: 'Remember, some XP-based embedded systems to get support to 2019'|url=https://www.zdnet.com/article/microsoft-remember-some-xp-based-embedded-systems-to-get-support-to-2019/|work=[[ZDNet]]|publisher=[[CBS Interactive]]|access-date=April 6, 2014|url-status=live|archive-url=https://web.archive.org/web/20140404160842/http://www.zdnet.com/microsoft-remember-some-xp-based-embedded-systems-to-get-support-to-2019-7000026449/|archive-date=April 4, 2014|date=February 18, 2014|first1=Liam|last1=Tung}}</ref> These updates, while intended for the embedded editions, could also be downloaded on standard Windows XP with a registry hack, which enabled unofficial patches until April 2019. However, Microsoft advised Windows XP users against installing these fixes, citing compatibility issues.<ref name="updates2019">{{cite web |last=Seltzer |first=Larry |date=May 26, 2014 |title=Registry hack enables continued updates for Windows XP |url=https://www.zdnet.com/article/registry-hack-enables-continued-updates-for-windows-xp/ |url-status=live |archive-url=https://web.archive.org/web/20210126140239/https://www.zdnet.com/article/registry-hack-enables-continued-updates-for-windows-xp/ |archive-date=January 26, 2021 |access-date=January 30, 2021 |website=ZDNet |quote=[UPDATE:] Late Monday we received a statement from a Microsoft spokesperson: We recently became aware of a hack that purportedly aims to provide security updates to Windows XP customers. The security updates that could be installed are intended for Windows Embedded and Windows Server 2003 customers and do not fully protect Windows XP customers. Windows XP customers also run a significant risk of functionality issues with their machines if they install these updates, as they are not tested against Windows XP. The best way for Windows XP customers to protect their systems is to upgrade to a more modern operating system, like Windows 7 or Windows 8.1.}}</ref><ref>{{cite news|title=Enthusiast developer keeps Windows XP alive with unofficial 'Service Pack 4' |work=[[PCWorld]] |url=https://www.pcworld.com/article/2599290/enthusiast-developer-keeps-windows-xp-alive-with-unofficial-service-pack-4.html |access-date=October 26, 2018 |url-status=live |archive-url=https://web.archive.org/web/20181026081119/https://www.pcworld.com/article/2599290/enthusiast-developer-keeps-windows-xp-alive-with-unofficial-service-pack-4.html |archive-date=October 26, 2018 |date=August 27, 2014|first1=Jared|last1=Newman}}</ref>

===End of support===
On April 14, 2009, the main Windows XP exited mainstream support and entered the extended support phase; Microsoft continued to provide security updates every month for Windows XP, however, free technical support, warranty claims, and design changes were no longer being offered. Extended support for the main version ended on April 8, 2014, over 12 years after the release of Windows XP; normally Microsoft products have a support life cycle of only 10 years.<ref name="ditchxp">{{cite news|url=http://www.3news.co.nz/Businesses-urged-to-ditch-XP/tabid/412/articleID/293539/Default.aspx|title=Businesses urged to ditch XP|last=Satherley|first=Dan|date=April 9, 2013|work=3 News NZ|access-date=June 28, 2019|archive-url=https://web.archive.org/web/20140713063911/http://www.3news.co.nz/Businesses-urged-to-ditch-XP/tabid/412/articleID/293539/Default.aspx|archive-date=July 13, 2014|url-status=dead}}</ref> Beyond the final security updates released on April 8 for the main version, no more security patches or support information are provided for XP free-of-charge; "critical patches" will still be created, and made available only to customers subscribing to a paid "Custom Support" plan.<ref>{{cite news | url=https://www.computerworld.com/s/article/9241912/Microsoft_will_craft_XP_patches_after_April_14_but_not_for_you?pageNumber=1 | title=Microsoft will craft XP patches after April '14, but not for you | publisher=IDG | work=[[Computerworld]] | date=August 26, 2013 | access-date=December 12, 2013 | last=Keizer | first=Gregg | url-status=live | archive-url=https://web.archive.org/web/20131020025419/http://www.computerworld.com/s/article/9241912/Microsoft_will_craft_XP_patches_after_April_14_but_not_for_you?pageNumber=1 | archive-date=October 20, 2013 | df=mdy-all }}</ref> As it is a Windows component, all versions of Internet Explorer for Windows XP also became unsupported.<ref name="cw-dumpie">{{cite web|url=https://www.computerworld.com/article/2488477/us-cert-urges-xp-users-to-dump-ie.html|title=US-CERT urges XP users to dump IE|last1=Keizer|first1=Gregg|date=March 11, 2014|work=Computerworld|publisher=IDG|archive-url=https://web.archive.org/web/20190628025857/https://www.computerworld.com/article/2488477/us-cert-urges-xp-users-to-dump-ie.html|archive-date=June 28, 2019|url-status=live|access-date=June 28, 2019}}</ref>

In January 2014, it was estimated that more than 95% of the 3 million [[automated teller machine]]s in the world were still running Windows XP (which largely replaced [[IBM]]'s [[OS/2]] as the predominant operating system on ATMs); ATMs have an average lifecycle of between seven and ten years, but some have had lifecycles as long as 15. Plans were being made by several ATM vendors and their customers to migrate to Windows 7-based systems over the course of 2014, while vendors have also considered the possibility of using Linux-based platforms in the future to give them more flexibility for support lifecycles, and the [[ATMIA|ATM Industry Association (ATMIA)]] has since endorsed [[Windows 10]] as a further replacement.<ref name=atmia-w10>{{Cite press release|url=https://www.atmia.com/news/atmia-position-paper-recommending-migration-to-windows-10/2607/|title=ATMIA position paper recommending migration to Windows 10|publisher=ATM Industry Association|date=June 1, 2015|url-status=live|archive-url=https://web.archive.org/web/20170525045048/https://www.atmia.com/news/atmia-position-paper-recommending-migration-to-windows-10/2607/|archive-date=May 25, 2017|author=ATM Industry Association (collectively)|website=www.atmia.com|language=en}}</ref> However, ATMs typically run the embedded variant of Windows XP, which was supported through January 2016.<ref>{{cite web | url=http://www.businessweek.com/articles/2014-01-16/atms-face-deadline-to-upgrade-from-windows-xp | title=ATMs Face Deadline to Upgrade From Windows XP | publisher=[[Bloomberg L.P.]] | work=[[Bloomberg Businessweek]] | date=January 16, 2014 | access-date=January 17, 2014 | first=Nick | last=Summers | url-status=dead | archive-url=https://web.archive.org/web/20140116190619/http://www.businessweek.com/articles/2014-01-16/atms-face-deadline-to-upgrade-from-windows-xp | archive-date=January 16, 2014 | df=mdy-all }}</ref> As of May 2017, around 60% of the 220,000 ATMs in India still run Windows XP.<ref>{{cite web|title=Wannacry ransomware cyber attack: Indian ATMs could be at high risk as most run on Windows XP|url=http://www.businesstoday.in/current/economy-politics/wannacry-ransomware-cyber-attack-indian-atms-high-risk-windows-xp/story/252161.html|website=Business Today|access-date=May 18, 2017|url-status=live|archive-url=https://web.archive.org/web/20170517085703/http://www.businesstoday.in/current/economy-politics/wannacry-ransomware-cyber-attack-indian-atms-high-risk-windows-xp/story/252161.html|archive-date=May 17, 2017|date=May 15, 2017|author=<!--N/A-->}}</ref>

Furthermore, at least 49% of all computers in [[China]] still ran XP at the beginning of 2014. These holdouts were influenced by several factors; prices of genuine copies of later versions of Windows in the country are high, while Ni Guangnan of the [[Chinese Academy of Sciences]] warned that Windows 8 could allegedly expose users to [[Mass surveillance in the United States|surveillance by the United States government]],<ref>{{cite news |title=Windows 8 a 'threat' to China's security |url=https://www.bbc.com/news/technology-27712908 |access-date=October 8, 2018 |publisher=BBC |date=June 5, 2014 |archive-date=October 8, 2018 |archive-url=https://web.archive.org/web/20181008064251/https://www.bbc.com/news/technology-27712908 |url-status=live }}</ref> and the [[Chinese government]] banned the purchase of Windows 8 products for government use in May 2014 in protest of Microsoft's inability to provide "guaranteed" support.<ref>{{cite news |url=http://www.pcworld.com/article/2157220/china-bans-government-purchases-of-windows-8-surprising-microsoft.html |title=China bans government purchases of Windows 8 |date=May 20, 2014 |work=PCWorld |publisher=IDG |access-date=May 20, 2014 |url-status=live |archive-url=https://web.archive.org/web/20140520220932/http://www.pcworld.com/article/2157220/china-bans-government-purchases-of-windows-8-surprising-microsoft.html |archive-date=May 20, 2014 |first1=Michael|last1=Kan}}</ref> The government also had concerns that the impending end of support could affect their [[Copy protection#Anti-piracy|anti-piracy]] initiatives with Microsoft, as users would simply pirate newer versions rather than purchasing them legally. As such, government officials formally requested that Microsoft extend the support period for XP for these reasons. While Microsoft did not comply with their requests, a number of major Chinese software developers, such as Lenovo, [[Kingsoft]] and [[Tencent]], will provide free support and resources for Chinese users migrating from XP.<ref>{{cite news |agency=Reuters |url=https://www.voanews.com/a/reu-microsoft-partners-lenovo-tencent-to-offer-xp-tech-support-in-china/1889658.html |title=Microsoft Partners Lenovo, Tencent to Offer XP Tech Support in China |publisher=Voice of America |date=April 9, 2014 |access-date=April 16, 2014 |url-status=live |archive-url=https://web.archive.org/web/20140413124242/http://www.voanews.com/content/reu-microsoft-partners-lenovo-tencent-to-offer-xp-tech-support-in-china/1889658.html |archive-date=April 13, 2014 }}</ref> Several governments, in particular those of the Netherlands and the United Kingdom, elected to negotiate "Custom Support" plans with Microsoft for their continued, internal use of Windows XP; the British government's deal lasted for a year, and also covered support for [[Office 2003]] (which reached end-of-life the same day) and cost [[Pound sterling|£]]5.5&nbsp;million.<ref name="ars-notdeadyet">{{cite web|url=https://arstechnica.com/information-technology/2014/04/not-dead-yet-dutch-british-governments-pay-to-keep-windows-xp-alive/|title=Not dead yet: Dutch, British governments pay to keep Windows XP alive|last1=Gallagher|first1=Sean|date=April 6, 2014|work=[[Ars Technica]]|publisher=[[Condé Nast Publications]]|url-status=live|archive-url=https://web.archive.org/web/20191014235635/https://arstechnica.com/information-technology/2014/04/not-dead-yet-dutch-british-governments-pay-to-keep-windows-xp-alive/|archive-date=October 14, 2019|access-date=October 15, 2019}}</ref>

On March 8, 2014, Microsoft deployed an update for XP that, on the 8th of each month, displays a pop-up notification to remind users about the end of support; however, these notifications may be disabled by the user.<ref name="zdnet-nag">{{cite web|url=https://www.zdnet.com/article/microsoft-to-start-nagging-windows-xp-users-about-april-8-end-of-support-date/|title=Microsoft to start nagging Windows XP users about April 8 end-of-support date|last=Foley|first=Mary Jo|author-link=Mary Jo Foley|date=March 3, 2014|work=[[ZDNet]]|publisher=[[CBS Interactive]]|url-status=live|archive-url=https://web.archive.org/web/20191014235309/https://www.zdnet.com/article/microsoft-to-start-nagging-windows-xp-users-about-april-8-end-of-support-date/|archive-date=October 14, 2019|access-date=October 15, 2019}}</ref> Microsoft also partnered with Laplink to provide a special "express" version of its [[PCmover]] software to help users migrate files and settings from XP to a computer with a newer version of Windows.<ref name="infoworld-laplinkxp">{{cite web|url=https://www.infoworld.com/article/2610199/microsoft--use-laplink-s-windows-xp-migration-tools--not-ours.html|title=Microsoft: Use Laplink's Windows XP migration tools, not ours|last1=Yegulalp|first1=Serdar|date=March 3, 2014|work=Infoworld|url-status=live|archive-url=https://web.archive.org/web/20191015001320/https://www.infoworld.com/article/2610199/microsoft--use-laplink-s-windows-xp-migration-tools--not-ours.html|archive-date=October 15, 2019}}</ref>
[[File:Electroencephalograph Neurovisor-BMM 40 (close view).jpg|thumb|An [[electroencephalograph]] running on Windows XP. The medical industry's continued use of Windows XP is partly due to medical applications being incompatible with later versions of Windows.]]
Despite the approaching end of support of the main version, there were still notable holdouts that had not migrated past XP; many users elected to remain on XP because of the poor reception of [[Windows Vista]], sales of newer PCs with newer versions of Windows declined because of the [[Great Recession]] and the effects of Vista, and deployments of new versions of Windows in enterprise environments require a large amount of planning, which includes testing applications for compatibility (especially those that are dependent on Internet Explorer 6, which is not compatible with newer versions of Windows).<ref name=bbc-xpwontdie>{{cite web|title=XP – the operating system that will not die|url=https://www.bbc.com/news/technology-26432473|work=BBC News|access-date=March 25, 2014|url-status=live|archive-url=https://web.archive.org/web/20140324064133/http://www.bbc.com/news/technology-26432473|archive-date=March 24, 2014|date=March 5, 2014|first1=Mark|last1=Ward}}</ref> Major security software vendors (including Microsoft itself) planned to continue offering support and definitions for Windows XP past the end of support to varying extents, along with the developers of [[Google Chrome]], [[Mozilla Firefox]], and [[Opera (web browser)|Opera]] web browsers;<ref name=cw-dumpie/> despite these measures, critics similarly argued that users should eventually migrate from XP to a supported platform.<ref name=pcadvisor-xpsecure>{{cite web|title=What should XP users do when Microsoft ends support? Upgrade to Windows 8, buy a new PC, keep running XP?|url=http://www.pcadvisor.co.uk/how-to/windows/3501239/what-should-xp-users-do-when-microsoft-ends-support/|work=PC Advisor|access-date=April 6, 2014|archive-url=https://web.archive.org/web/20140214073957/http://www.pcadvisor.co.uk/how-to/windows/3501239/what-should-xp-users-do-when-microsoft-ends-support/|archive-date=February 14, 2014 |date=April 7, 2014|first1=Matt|last1=Egan}}</ref>

The United States' [[United States Computer Emergency Readiness Team|Computer Emergency Readiness Team]] released an alert in March 2014 advising users of the impending end of support, and informing them that using XP after April 8 may prevent them from meeting US government information security requirements.<ref>{{cite web |url=https://www.us-cert.gov/ncas/alerts/TA14-069A-0 |title=Alert (TA14-069A): Microsoft Ending Support for Windows XP and Office 2003 |date=March 11, 2014 |access-date=April 6, 2014 |url-status=live |archive-url=https://web.archive.org/web/20140316152204/http://www.us-cert.gov/ncas/alerts/TA14-069A-0 |archive-date=March 16, 2014 |author=<!--N/A-->}}</ref>
Microsoft continued to provide [[Security Essentials]] [[virus definitions]] and updates for its [[Malicious Software Removal Tool]] (MSRT) for XP until July 14, 2015.<ref>{{cite web | url=https://www.computerworld.com/s/article/9245548/Microsoft_will_furnish_malware_assassin_to_XP_users_until_mid_2015 | title=Microsoft will furnish malware assassin to XP users until mid-2015 | publisher=IDG | work=Computerworld | date=January 19, 2014 | first=Gregg | last=Keizer | url-status=live | archive-url=https://web.archive.org/web/20140122034045/http://www.computerworld.com/s/article/9245548/Microsoft_will_furnish_malware_assassin_to_XP_users_until_mid_2015 | archive-date=January 22, 2014 | df=mdy-all }}</ref> As the end of extended support approached, Microsoft began to increasingly urge XP customers to migrate to newer versions such as Windows 7 or 8 in the interest of security, suggesting that attackers could [[reverse engineer]] security patches for newer versions of Windows and use them to target equivalent vulnerabilities in XP.<ref>{{cite web|title=Microsoft Warns of Permanent Zero-Day Exploits for Windows XP|work=Infosecurity|publisher=Reed Exhibitions|date=August 20, 2013|access-date=August 27, 2013|url=https://www.infosecurity-magazine.com/view/34069/microsoft-warns-of-permanent-zeroday-exploits-for-windows-xp-/|url-status=live|archive-url=https://web.archive.org/web/20130826004304/http://www.infosecurity-magazine.com/view/34069/microsoft-warns-of-permanent-zeroday-exploits-for-windows-xp-/|archive-date=August 26, 2013|author=<!--N/A-->}}</ref> Windows XP is [[Remote code execution|remotely exploitable]] by numerous security holes that were discovered after Microsoft stopped supporting it.<ref>{{cite web|url=https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-041-01|title=Microsoft Security Bulletin MS15-011 JASBUG|access-date=September 18, 2015|url-status=live|archive-url=https://web.archive.org/web/20150811104408/https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-041-01|archive-date=August 11, 2015|date=February 10, 2015|author=<!--N/A-->}}</ref><ref>{{cite web|url=https://securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows/#.VGRn6fmsU-V|title=IBM X-Force Researcher Finds Significant Vulnerability in Microsoft Windows|publisher=Securityintelligence.com|access-date=September 18, 2015|url-status=live|archive-url=https://web.archive.org/web/20150703130744/http://securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows/#.VGRn6fmsU-V|archive-date=July 3, 2015|date=November 11, 2014|first1=Robert|last1=Freeman}}</ref>

Similarly, specialized devices that run XP, particularly [[medical device]]s, must have any revisions to their software—even security updates for the underlying operating system—approved by relevant regulators before they can be released. For this reason, manufacturers often did not allow any updates to devices' operating systems, leaving them open to security exploits and malware.<ref name="mitreview-medicalviruses">{{cite web|last1=Talbot|first1=David|date=October 17, 2012|title=Computer Viruses Are "Rampant" on Medical Devices in Hospitals|url=https://www.technologyreview.com/news/429616/computer-viruses-are-rampant-on-medical-devices-in-hospitals/|url-status=dead|archive-url=https://archive.today/20161019024034/https://www.technologyreview.com/s/429616/computer-viruses-are-rampant-on-medical-devices-in-hospitals/|archive-date=October 19, 2016|access-date=April 6, 2014|work=MIT Technology Review}}</ref>

Despite the end of support of the main version, Microsoft has released three emergency security updates for the operating system to patch major security vulnerabilities:

* A patch released in May 2014 to address recently discovered vulnerabilities in Internet Explorer 6 through 11 on all versions of Windows.<ref name="ars-ieemergency">{{cite web|title=Emergency patch for critical IE 0-day throws lifeline to XP laggards, too|url=https://arstechnica.com/security/2014/05/emergency-patch-for-critical-ie-0day-throws-lifeline-to-xp-laggards-too/|website=Ars Technica|publisher=Conde Nast|access-date=May 26, 2017|url-status=live|archive-url=https://web.archive.org/web/20170517085415/https://arstechnica.com/security/2014/05/emergency-patch-for-critical-ie-0day-throws-lifeline-to-xp-laggards-too/|archive-date=May 17, 2017|date=May 1, 2014|first1=Dan|last1=Goodin}}</ref>
* A patch released in May 2017 to address a vulnerability that was being leveraged by the [[WannaCry ransomware attack]].<ref name="verge-highlyunusual">{{cite web|title=Microsoft issues 'highly unusual' Windows XP patch to prevent massive ransomware attack|url=https://www.theverge.com/2017/5/13/15635006/microsoft-windows-xp-security-patch-wannacry-ransomware-attack|website=The Verge|publisher=Vox Media|access-date=May 13, 2017|url-status=live|archive-url=https://web.archive.org/web/20170514023327/https://www.theverge.com/2017/5/13/15635006/microsoft-windows-xp-security-patch-wannacry-ransomware-attack|archive-date=May 14, 2017|date=May 13, 2017|first1=Tom|last1=Warren}}</ref>
* A patch released in May 2019 to address a [[BlueKeep|critical code execution vulnerability]] in [[Remote Desktop Services]] which can be exploited in a similar way as the WannaCry vulnerability.<ref name="verge-wannacrylike">{{cite web|title=Microsoft warns of major WannaCry-like Windows security exploit, releases XP patches|url=https://www.theverge.com/2019/5/14/18623565/microsoft-windows-xp-remote-desktop-services-worm-security-patches|website=The Verge|publisher=Vox Media|date=May 14, 2019|access-date=May 16, 2019|first1=Tom|last1=Warren|archive-date=September 2, 2019|archive-url=https://web.archive.org/web/20190902162957/https://www.theverge.com/2019/5/14/18623565/microsoft-windows-xp-remote-desktop-services-worm-security-patches|url-status=live}}</ref><ref>{{cite web|url=https://blogs.technet.microsoft.com/msrc/2019/05/14/prevent-a-worm-by-updating-remote-desktop-services-cve-2019-0708/|title=Prevent a worm by updating Remote Desktop Services (CVE-2019-0708) |website=MSRC Blog |access-date=May 16, 2019|date=May 14, 2019|archive-date=May 14, 2019|archive-url=https://web.archive.org/web/20190514210409/https://blogs.technet.microsoft.com/msrc/2019/05/14/prevent-a-worm-by-updating-remote-desktop-services-cve-2019-0708/|url-status=live}}</ref>

Researchers reported in August 2019 that Windows 10 users may be at risk for "critical" system compromise because of design flaws of hardware [[device driver]]s from multiple providers.<ref name="FRBS-20190811">{{cite news |last=Winder |first=Davey |title=Critical Windows 10 Warning: Millions Of Users At Risk |url=https://www.forbes.com/sites/daveywinder/2019/08/11/critical-windows-10-warning-confirmed-millions-of-users-are-at-risk/ |date=August 11, 2019 |work=[[Forbes]] |access-date=August 11, 2019 |archive-date=August 11, 2019 |archive-url=https://web.archive.org/web/20190811101251/https://www.forbes.com/sites/daveywinder/2019/08/11/critical-windows-10-warning-confirmed-millions-of-users-are-at-risk/ |url-status=live }}</ref> In the same month, computer experts reported that the [[BlueKeep]] [[security vulnerability]], {{CVE|2019-0708}}, that potentially affects older unpatched Microsoft Windows versions via the program's [[Remote Desktop Protocol]], allowing for the possibility of [[remote code execution]], may now include related flaws, collectively named ''[[DejaBlue]]'', affecting newer Windows versions (i.e., [[Windows 7]] and all recent versions) as well.<ref name="WRD-20190813">{{cite news |last=Greenberg |first=Andy |title=DejaBlue: New BlueKeep-Style Bugs Renew The Risk Of A Windows worm |url=https://www.wired.com/story/dejablue-windows-bugs-worm-rdp/ |date=August 13, 2019 |magazine=[[Wired (magazine)|wired]] |access-date=August 15, 2019 |archive-date=April 13, 2021 |archive-url=https://web.archive.org/web/20210413152701/https://www.wired.com/story/dejablue-windows-bugs-worm-rdp/ |url-status=live }}</ref> In addition, experts reported a [[Microsoft]] [[security vulnerability]], {{CVE|2019-1162}}, based on [[legacy code]] involving [[Ctfmon.exe|Microsoft CTF and ctfmon (ctfmon.exe)]], that affects all [[Windows]] versions from the older Windows XP version to the most recent Windows 10 versions; a patch to correct the flaw is currently available.<ref name="TP-20190814">{{cite news |last=Seals |first=Tara |title=20-Year-Old Bug in Legacy Microsoft Code Plagues All Windows Users |url=https://threatpost.com/20-year-old-bug-legacy-microsoft-windows-users/147336/ |date=August 14, 2019 |work=ThreatPost.com |access-date=August 15, 2019 |archive-date=April 17, 2021 |archive-url=https://web.archive.org/web/20210417180352/https://threatpost.com/20-year-old-bug-legacy-microsoft-windows-users/147336/ |url-status=live }}</ref>

Microsoft announced in July 2019 that the Microsoft Internet Games services on Windows XP and Windows Me would end on July 31, 2019 (and for Windows 7 on January 22, 2020).<ref>{{cite web|url=https://answers.microsoft.com/en-us/windows/forum/all/farewell-to-microsoft-internet-games-on-windows-xp/035d5144-6c1b-49bb-b3d5-37f6355fec39?auth=1|title=Farewell to Microsoft Internet Games on Windows XP, Windows ME, and Windows 7|website=answers.microsoft.com|language=en-US|access-date=August 4, 2019|archive-date=July 14, 2019|archive-url=https://web.archive.org/web/20190714150805/https://answers.microsoft.com/en-us/windows/forum/all/farewell-to-microsoft-internet-games-on-windows-xp/035d5144-6c1b-49bb-b3d5-37f6355fec39?auth=1|url-status=live}}</ref>

In 2020, Microsoft announced that it would disable the Windows Update service for SHA-1 endpoints for older Windows versions. Since Windows XP did not get an update for SHA-2, Windows Update Services are no longer available on the OS as of late July 2020.<ref>{{cite web|title=Windows Update SHA-1 based endpoints discontinued for older Windows devices|url=https://support.microsoft.com/en-us/topic/windows-update-sha-1-based-endpoints-discontinued-for-older-windows-devices-10b58bd9-5ba2-b23d-498b-139ce5c709af|access-date=April 6, 2021|website=support.microsoft.com|archive-date=April 17, 2021|archive-url=https://web.archive.org/web/20210417045726/https://support.microsoft.com/en-us/topic/windows-update-sha-1-based-endpoints-discontinued-for-older-windows-devices-10b58bd9-5ba2-b23d-498b-139ce5c709af|url-status=live}}</ref> As of March 2024, many of the old updates for Windows XP are available on the [[Microsoft Update Catalog]].<ref>{{cite web|title=Microsoft Update Catalog|url=https://www.catalog.update.microsoft.com/Search.aspx?q=windows%20xp|access-date=March 6, 2025|website=www.catalog.update.microsoft.com|archive-date=August 12, 2024|archive-url=https://web.archive.org/web/20240812131023/https://www.catalog.update.microsoft.com/Search.aspx?q=Windows%20xp|url-status=live}}</ref> A third-party tool named Legacy Update allows previously-released updates for Windows XP to be installed from the Update Catalog.<ref>{{Cite web |last=Cunningham |first=Andrew |date=July 10, 2023 |title=Windows 95, 98, and other decrepit versions can grab online updates again |url=https://arstechnica.com/gadgets/2023/07/windows-95-98-and-other-decrepit-versions-can-grab-online-updates-again/ |access-date=August 5, 2024 |website=[[Ars Technica]] |language=en-us}}</ref><ref name=":3" />

=== Third-party support ===
In February 2016, [[Opera (company)|Opera]] announced that version 36 of [[Opera (web browser)|its web browser]] would be the last version of the web browser to support Windows XP and Windows Vista.<ref>{{Cite web |last=Brinkmann |first=Martin |date=February 17, 2016 |title=Opera 36 will be the last for Windows XP and Vista |url=https://www.ghacks.net/2016/02/17/opera-36-will-be-the-last-for-windows-xp-and-vista/ |access-date=July 24, 2024 |website=[[Ghacks]] |language=en-US |archive-date=March 4, 2024 |archive-url=https://web.archive.org/web/20240304044300/https://www.ghacks.net/2016/02/17/opera-36-will-be-the-last-for-windows-xp-and-vista/ |url-status=live }}</ref> [[Google Chrome]] ended support for Windows XP and Windows Vista in April 2016.<ref>{{Cite web |last=Trenholm |first=Richard |date=November 11, 2015 |title=Google finally pulling the plug on Chrome for Windows XP |url=https://www.cnet.com/tech/services-and-software/google-finally-pulling-the-plug-on-chrome-for-windows-xp/ |access-date=July 24, 2024 |website=[[CNET]] |language=en |archive-date=April 16, 2024 |archive-url=https://web.archive.org/web/20240416004213/https://www.cnet.com/tech/services-and-software/google-finally-pulling-the-plug-on-chrome-for-windows-xp/ |url-status=live }}</ref> [[Firefox]] 52 ESR (Extended Support Release), which was released in March 2017, was the last version to support Windows XP and Windows Vista.<ref>{{Cite web |date=March 7, 2017 |title=Final Firefox version with Windows XP, plugin support released today |url=https://arstechnica.com/information-technology/2017/03/final-firefox-version-with-windows-xp-plugin-support-released-today/ |url-status=live |archive-url=https://web.archive.org/web/20240114122205/https://arstechnica.com/information-technology/2017/03/final-firefox-version-with-windows-xp-plugin-support-released-today/ |archive-date=January 14, 2024 |access-date=July 15, 2024 |website=[[Ars Technica]] |language=en-us}}</ref> Support for Firefox 52 ESR ended in June 2018.<ref>{{Cite web |last=Tung |first=Liam |date=October 5, 2017 |title=Windows XP users: Your last supported refuge in Firefox ends in 2018, says Mozilla |url=https://www.zdnet.com/article/windows-xp-users-your-last-supported-refuge-in-firefox-ends-in-2018-says-mozilla/ |url-status=live |archive-url=https://web.archive.org/web/20171008125800/http://www.zdnet.com/article/windows-xp-users-your-last-supported-refuge-in-firefox-ends-in-2018-says-mozilla/ |archive-date=October 8, 2017 |access-date=July 15, 2024 |website=[[ZDNET]] |language=en}}</ref>

[[Blizzard Entertainment]] ended support for ''[[World of Warcraft]]'', ''[[StarCraft II]]'', ''[[Diablo III]]'', ''[[Hearthstone]]'', and ''[[Heroes of the Storm]]'' on Windows XP and Vista in October 2017.<ref>{{Cite web |last=Humphries |first=Matthew |date=July 20, 2017 |title=Blizzard Ending Support for Windows XP and Vista |url=https://www.pcmag.com/news/blizzard-ending-support-for-windows-xp-and-vista |access-date=August 6, 2024 |website=[[PCMAG]] |language=en}}</ref> [[Steam (service)|Steam]] ended support for Windows XP and Vista on January 1, 2019.<ref>{{Cite web |last=Liu |first=Zhiye |date=December 31, 2018 |title=Reminder: Steam Will Drop Support for Windows XP and Vista on January 1 |url=https://www.tomshardware.com/news/steam-valve-support-windows-xp-vista,37299.html |access-date=July 24, 2024 |website=[[Tom's Hardware]] |language=en |archive-date=July 12, 2024 |archive-url=https://web.archive.org/web/20240712032447/https://www.tomshardware.com/news/steam-valve-support-windows-xp-vista,37299.html |url-status=live }}</ref>

There are several unofficial web browser projects that maintain support for Windows XP, well after official web browsers dropped support for the operating system. [[Supermium]], a [[Fork (software development)|fork]] of the [[Chromium (web browser)|Chromium]] project that Google Chrome is based on, is maintained for Windows XP and later unsupported versions of Windows as of 2024.<ref>{{Cite web |last=Proven |first=Liam |date=March 6, 2024 |title=Supermium drags Google Chrome back in time to Windows XP, Vista, and 7 |url=https://www.theregister.com/2024/03/06/supermium_chrome_for_xp/ |access-date=July 24, 2024 |website=[[The Register]] |archive-date=May 28, 2024 |archive-url=https://web.archive.org/web/20240528083542/https://www.theregister.com/2024/03/06/supermium_chrome_for_xp/ |url-status=live }}</ref> MyPal, a fork of [[Firefox 68]], is also being actively maintained for Windows XP.<ref name=":3">{{Cite web |last=Proven |first=Liam |date=July 24, 2023 |title=Want to live dangerously? Try running Windows XP in 2023 |url=https://www.theregister.com/2023/07/24/dangerous_pleasures_win_xp_in_23/ |access-date=July 24, 2024 |website=[[The Register]] |archive-date=July 13, 2024 |archive-url=https://web.archive.org/web/20240713035439/https://www.theregister.com/2023/07/24/dangerous_pleasures_win_xp_in_23/ |url-status=live }}</ref>{{Timeline Windows XP}}