Windows Update Error 0x80070306: 7 Fixes for Conflicts and Connection Problems (2026)

Short answer: Error 0x80070306 is a generic Windows Update install failure, and Microsoft does not document a specific cause for it. When it keeps coming back, the most useful place to look is the environment around Windows Update: security software, VPNs and proxies, blocked or misconfigured update services, wrong date and time, and unstable connections. This guide works through those, then falls back to an offline install from the Microsoft Update Catalog.

Last reviewed: October 25, 2026.

What 0x80070306 means in plain English

Windows Update tried to download or install something and stopped with a failure code. The "0x8007" prefix is a standard Windows error format, so the failure came up from the operating system, not from one named Microsoft server. The code alone does not say which file, driver, service or program was involved.

Microsoft does not publish a dedicated article for 0x80070306. Community guides we reviewed on 2026-10-25 list possible contributors such as incomplete downloads, an unstable network, low disk space, damaged system files and conflicts with security or anti-cheat software. Those are possibilities, not confirmed causes for your PC, which is why this page walks through them one at a time rather than promising a single answer.

Where you see it

• Settings, Windows Update shows "Install error" with the code and a Retry button that fails again.
• Update history lists the same update as "Failed" several times.
• Windows restarts, says it could not finish the updates, and rolls back.
• A manual installer ends with a failure message that includes the code.

What is and is not confirmed about KB5127648

Item	Status on 2026-10-25
KB5127648 released October 13, 2026	Confirmed on Microsoft's KB page
0x80070306 listed as a known issue	Not listed when we checked
Known issues Microsoft does list	Smart App Control may not turn on; Remote Desktop can fail for non-admin users with error 0xC000000D when Administrator protection is on; some USB audio devices may fail to start or produce no sound (partially resolved by the September 14, 2026 update KB5129195)
Official Microsoft fix for 0x80070306	None found

For the full month, see our October 2026 Patch Tuesday known issues guide. Microsoft updates known issues over time, so recheck its page.

The conflict and connectivity checklist

Before you change anything risky, back up important files and create a restore point: press Start, type "Create a restore point", open it, select your system drive and choose Create. A restore point does not replace a backup, but it gives you a way back if a service or startup change causes trouble. The checks below run roughly from least to most invasive.

Suspect	Quick sign	Go to
Security suite or firewall	Began after installing or renewing one	Fix 1
VPN or proxy	Works on a phone hotspot, fails on your usual network	Fix 2
Wrong date, time or region	Clock is off, or Microsoft Store and sign-in also complain	Fix 3
Update services disabled	Update never starts, or fails instantly	Fix 4
Background program conflict	Cannot tell which one	Fix 5
Online path keeps failing	Same error after all of the above	Fixes 6 and 7

Fix 1: Check third-party security software and firewalls

Third-party antivirus, endpoint tools and game anti-cheat services sit between Windows and the files it is trying to replace. Community reports name them as a possible source of update conflicts. Do not switch protection off permanently, and do not treat "disable your antivirus" as the fix.

1. Open your security product and check for pending updates, expired licences or error banners. Update it first.
2. Look for an option such as "pause protection" or "gaming mode" and read what it covers before using it. Leaving Windows protected is the priority.
3. If the update succeeds only while a product is paused, contact that product's support about an exclusion for Windows Update, rather than leaving it off.
4. If the failure began after installing a new security or optimizer tool, consider uninstalling that tool using its official uninstaller, then retry.

Fix 2: Rule out VPN, proxy and network settings

1. Disconnect any VPN and retry. Corporate and consumer VPN clients can change routing and DNS in ways that interrupt large downloads.
2. Test a different network, for example a phone hotspot. If it works there, the problem is your usual network, router or filtering, not the PC.
3. In Settings, Network and Internet, Proxy, make sure no unfamiliar proxy is switched on. On a work device, ask IT before changing it.
4. Check the system-wide update proxy by opening Command Prompt as administrator:

netsh winhttp show proxy

"Direct access (no proxy server)" is the normal result on a home PC. If a proxy is listed and you did not set it, and you are not on a managed work device, you can clear it. Note the old value first, in case you need it back:

netsh winhttp reset proxy

Also try a wired connection, and restart the router. Unstable Wi-Fi is a common reason for interrupted update downloads.

Fix 3: Correct the date, time and region

1. Open Settings, Time and language, Date and time.
2. Turn on "Set time automatically" and "Set time zone automatically", then select Sync now.
3. Confirm the region under Language and region matches where you are.

A clock that is far off can break secure connections, which update downloads rely on. This is a quick check that costs nothing, so it is worth doing even if the time looks roughly right.

Fix 4: Confirm the update services can start

Windows Update depends on a few background services. If one has been disabled by a tuning tool, a "debloat" script or a previous fix attempt, updates can fail immediately.

1. Press Windows key + R, type services.msc and press Enter.
2. Find Windows Update, Background Intelligent Transfer Service and Cryptographic Services.
3. Double-click each and check the Startup type. None of them should be set to Disabled. Windows Update and BITS are commonly Manual and Cryptographic Services is commonly Automatic on a healthy PC, but exact defaults vary by Windows version, so compare against a known-good PC if you can.
4. If a service is Disabled, change it to Manual (or Automatic for Cryptographic Services), select Start, and apply.

You can also check from an administrator Command Prompt:

sc qc wuauserv
sc qc bits
sc qc cryptsvc

Look at the START_TYPE line in each result. If the services are fine and the error persists, move on. The heavier cache reset (stopping the services, renaming SoftwareDistribution and catroot2) and the SFC and DISM repair are the same for every update error, so we cover them once in our Windows Update stuck or failing guide instead of repeating them here. If SFC or DISM RestoreHealth seems stuck at some percentage, wait at least 30 minutes before deciding it has hung.

Fix 5: Use a clean boot to find a conflict

A clean boot starts Windows with only Microsoft services and no startup items, so you can tell whether something else is interfering. These steps follow Microsoft's support article on performing a clean boot, checked on 2026-10-25. Microsoft warns that System Configuration changes can make a computer unusable if misapplied, and that network policy on managed devices can block these steps, so use a restore point and ask IT first on a work PC.

1. Sign in as an administrator.
2. Search for msconfig and open System Configuration.
3. On the Services tab, tick Hide all Microsoft services, select Disable all, then Apply.
4. On the Startup tab, select Open Task Manager. Disable each enabled startup item and write down what you turned off.
5. Close Task Manager, select OK in System Configuration, and restart.
6. Check for updates and try the install again.

If the update installs, a program or service you disabled is involved. Reset to normal startup afterward: in msconfig choose Normal Startup on the General tab, clear Hide all Microsoft services and select Enable all on the Services tab, re-enable your startup items in Task Manager, then restart. Reintroduce items in small groups to find the culprit, then update or reinstall that program. Note that a clean boot can temporarily remove some functionality, and it will not help if Windows cannot start at all.

Fix 6: Install offline from the Microsoft Update Catalog

If the online route keeps failing, download the update directly and install it, which skips the Windows Update download and cache layers.

1. In Settings, Windows Update, Update history, note the KB number that failed.
2. Go to catalog.update.microsoft.com, search for that KB, and choose the package that matches your Windows version and system type (x64 or ARM64; check under Settings, System, About).
3. Before installing, read the prerequisites. Microsoft's KB5127648 page says Catalog installs need the latest servicing stack update and the KB5043080 checkpoint update installed first, in order. Skipping them can make the manual install fail.
4. Download the .msu file and run it. From an administrator Command Prompt, quote the path so folders with spaces work, and leave off the quiet switch so you see any error message:

wusa.exe "C:\Users\YourName\Downloads\update-file.msu"

Replace the path with your real file. Download only from the Microsoft Update Catalog or Microsoft's own pages, never from third-party mirrors.

Fix 7: Repair install as the last resort

If everything above fails, an in-place repair install reinstalls Windows files over the existing ones, using official Microsoft media, with the option to keep your files and apps. Back up first and create a restore point. It is slower than the other steps, so it comes last. A technician can guide you through it with our remote repair service, or see Windows support.

How to read the logs for network and conflict clues

Create a readable update log on your desktop with PowerShell:

Get-WindowsUpdateLog

Open the file in Notepad and search for 0x80070306 and for words such as "proxy", "timeout", "download" and "WinHttp". Lines that mention connection failures point back to Fixes 1 to 3. Lines about service start failures point to Fix 4. The servicing log at C:\Windows\Logs\CBS\CBS.log is more useful for damaged components, which are covered in the guide linked above.

Common mistakes

• Turning off antivirus for good instead of testing with a clean boot or a vendor exclusion.
• Leaving a service on Disabled after a "tweak" script, then wondering why updates never start.
• Forgetting to reverse a clean boot, which leaves startup items and services off.
• Running a manual installer without its prerequisites.
• Using a VPN during large updates.
• Changing proxy or service settings on a work PC without telling IT.

Prevention

• A practical rule of thumb is 20 GB free; this is not a Microsoft requirement for this update.
• Keep security software and drivers current, and avoid stacking several security tools.
• Pause VPNs and heavy downloads while updates install.
• Do not disable Windows services with tuning tools unless you know why.

Related errors

• 0x800f0845, a code reported with the same update.
• 0x800f0989.
• 0x80073712.

Frequently asked questions

Can my antivirus cause error 0x80070306?

It is a reported possibility, not a confirmed cause. Update the product, test with a clean boot, and ask the vendor about exclusions rather than turning protection off permanently.

Does a VPN affect Windows Update?

It can interrupt downloads by changing routing and DNS. Disconnect it, retry, and try another network such as a phone hotspot to see if the network is the issue.

Which Windows services must be running for updates?

Windows Update, Background Intelligent Transfer Service and Cryptographic Services should not be Disabled. Check them in services.msc.

Is a clean boot safe?

It is a documented Microsoft troubleshooting step, but Microsoft warns that System Configuration changes can make a PC unusable if misapplied. Create a restore point first and reverse the changes afterward.

Why does the update fail on my home network but work on a hotspot?

Your router, DNS, filtering or Wi-Fi stability may be interfering. Restart the router, try a cable, and review any proxy or DNS settings.

Can a wrong clock cause update errors?

A large clock error can break secure connections, so set time and time zone to automatic and sync.

What do I need before installing the update offline?

Microsoft's KB5127648 page says the latest servicing stack update and the KB5043080 checkpoint update must be installed first, in order.

Has Microsoft acknowledged 0x80070306 with KB5127648?

Not on its KB page as of 2026-10-25. Reports come from users, so treat them as community-reported.