KB5060826: Cumulative update for Windows 11, version 23H2, June 2025. Browser text clarity, PC migration preview and admin fixes
Adds browser-default and sharing changes, starts a phased PC migration preview, and addresses several problems for Windows 11 22H2 Enterprise and Education. CJK text can still look blurry in Chromium browsers at 96 DPI.
Does it affect you? Applies to: This preview applies to Windows 11, version 23H2, and also documents improvements for Windows 11, version 22H2 Enterprise and Education editions.
Review notes Additional details from the official release notes (1) Read note
- What changes The update addresses slow Windows Search: the Search Box could take over 10 seconds to load before it was usable.
The official sources are linked at the end of the page.
What changes
Fixes 8 changes
Audit
For: Windows 11 22H2 Enterprise and Education
- Auditing privilege use no longer creates too many security event logs that can fill the system drive and prevent sign-in.1
Authentication
For: Domain-joined devices running Windows 11 22H2 or 23H2
-
Domain-joined devices can update account passwords with Windows Server 2025 domain controllers without the trust relationship problem described in the update.2
The issue affected domain-joined machines running Windows 11 22H2 or 23H2.
Display Kernel
For: Windows 11 22H2 Enterprise and Education
- Remote Desktop Protocol connections no longer require a device restart to connect in the situation described.3
Network file sharing
For: Windows 11 22H2 Enterprise and Education
- Workstations and servers are less likely to stop responding when connecting to resources on SMB shares.4
Performance
For: Windows 11 22H2 Enterprise and Education
- The update addresses incomplete removal of unused language packs and Feature on Demand packages, which can use unnecessary storage and lengthen Windows Update installation times.5
Shell
For: Windows 11 22H2 Enterprise and Education
- Kiosk devices no longer stop responding after an administrator locks and unlocks them.6
Windows Hello
For: Windows 11 22H2 Enterprise and Education
- The update addresses a problem that prevented expiring Windows Hello for Business certificates from renewing automatically.7
Windows Search
For: Windows 11 22H2 Enterprise and Education
- Windows Search responds to input more quickly; the Search Box no longer takes over 10 seconds to load in the situation described.8
New features 4 changes
App defaults
- In the European Economic Area, setting a default browser can also set additional file and link types it supports and pin it to Start and the taskbar unless you clear the pinning options. A separate button lets a browser that supports PDF files become the default for .pdf.9
PC Migration
- The Windows Backup app is beginning to show landing and pairing pages for PC-to-PC migration, giving you an early look at the feature. File and settings transfer during setup is part of the full experience and will arrive in a future update.10
Windows Share
- When you share a link or web content, the Windows share window shows a visual preview.11
Windows Setup
-
Administrators can configure whether a new device receives critical updates during its first-time setup.12
The setting applies during the out-of-box experience (OOBE).
Improvements 2 changes
Country and Operator Settings Asset (COSA)
For: Windows 11 22H2 Enterprise and Education
- Profiles for certain mobile operators are brought up to date.13
Servicing stack
-
The component that installs Windows updates receives quality improvements to help devices reliably receive and install updates.14
Includes servicing stack update KB5061903.
Known issues
-
Noto fonts issue
CJK (Chinese, Japanese, Korean) text might look blurry or unclear at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. The issue is related to limited pixel density at that scaling.15
How to apply the workaround WorkaroundIncrease display scaling to improve clarity. For additional support, report Noto CJK font issues in Google's Noto CJK Fonts repository.15
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-06-26
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
-
KB5060999, KB5062170, KB5058502, KB5058405
+32 earlier
KB5055629, KB5058919, KB5055528, KB5053657, KB5053602, KB5052094, KB5051989, KB5050092, KB5050021, KB5048685, KB5046732, KB5046633, KB5044380, KB5044285, KB5043145, KB5043076, KB5041587, KB5041585, KB5040527, KB5040442, KB5039302, KB5039212, KB5037853, KB5037771, KB5036980, KB5036893, KB5035942, KB5035853, KB5034848, KB5034765, KB5034204, KB5034123 - Replaced by
- KB5062552
| Version | Build | Channel |
|---|---|---|
| 23H2 | 22631.5549 | General availability |
| 23H2 | 22631.5548 | Release Preview Channel |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
1,412 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Settings | 137 |
| File Explorer and shell | 22 |
| Graphics and display | 20 |
| Hyper-V and virtualization | 18 |
| Remote Desktop | 10 |
| Audio | 9 |
| Secure Boot | 9 |
| Security and sign-in | 8 |
| Bluetooth | 7 |
| Kernel | 7 |
| Emoji and input | 6 |
| Storage and file systems | 6 |
Verified in package: changed files confirm Display Kernel, Performance, Windows Search, PC Migration, Country and Operator Settings Asset (COSA).
Sources
Cited passages from Microsoft's official notes (15)
-
1.
Fixed: An issue with auditing privilege use created too many security event logs. These logs filled up the system drive and prevented users from signing in.
support.microsoft.com -
2.
This update fixes an issue where domain-joined machines running Windows 11 22H2 or 23H2 couldn’t update their account passwords on Windows Server 2025 domain controllers, which led to trust relationship issues.
support.microsoft.com -
3.
An issue that prevented Remote Desktop Protocol (RDP) connections until you restarted your device.
support.microsoft.com -
4.
This update fixes an issue where workstations and servers might stop responding when connecting to resources located on Server Message Block (SMB) shares.
support.microsoft.com -
5.
This update addresses an issue that prevented the complete removal of unused language packs and Feature on Demand packages, which previously led to unnecessary storage use and longer Windows Update installation times.
support.microsoft.com -
6.
This update resolves an issue where kiosk devices might stop responding after being locked and unlocked by an administrator.
support.microsoft.com -
7.
This update addresses an issue that prevented the automatic renewal of expiring certificates in Windows Hello for Business.
support.microsoft.com -
8.
Windows Search responds very slowly—the Search Box can take over 10 seconds to load before you can use it.
support.microsoft.com -
9.
Additional file and link types will be set for the new default browser, if it registers them.
support.microsoft.com -
10.
In the full experience, you’ll be able to transfer files and settings from an old PC to a new one during setup. Support for this feature during PC setup will arrive in a future update.
support.microsoft.com -
11.
When you share links or web content using the Windows share window, you will see a visual preview for that content.
support.microsoft.com -
12.
Admins can configure whether a new device gets critical updates during the out-of-box experience (OOBE).
support.microsoft.com -
13.
This update brings profiles up to date for certain mobile operators.
support.microsoft.com -
14.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
15.
There are reports of blurry or unclear CJK (Chinese, Japanese, Korean) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 15 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake