The Update BureauKB5061010: Cumulative update for Windows 10, version 1607, June 2025. Exploited Internet Shortcut flaw patched; Remote Web Access fixed
The update closes 32 vulnerabilities, including exploited remote-code-execution flaw CVE-2025-33053, and fixes Remote Web Access connection instability and a Windows Hello sign-in issue.
Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607.
Review notes Additional details from the official release notes (1) Read note
- In detail Windows 10 Enterprise LTSB 2016 (version 1607) has updates through October 13, 2026. The October 14, 2025 date is not this edition’s end-of-updates date.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Fixes 2 changes
Cloud Infrastructure
-
Remote Web Access no longer causes remote connections to act unpredictably.1
Fixes unpredictable remote connections caused by Remote Web Access (RWA).
Windows Hello
For: Windows Hello for Business users using the Key Trust model
-
Signing in with Windows Hello for Business works with self-signed certificates in the Key Trust model.2
Addresses an issue that prevents sign-in with self-signed certificates when Windows Hello for Business uses the Key Trust model.
Known issues
-
DHCP Server service
The DHCP Server service might intermittently stop responding after this update, affecting IP renewal for clients. KB5062560 resolves the issue.3
Resolution Fixed in KB5062560Install KB5062560 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-06-10
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5058383, KB5058921, KB5055521, KB5053594
- Replaced by
- KB5062560
| Version | Build | Channel |
|---|---|---|
| 1607 | 14393.8148 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2025-33053
Exploited
Internet Shortcut Files Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows Netlogon Elevation of Privilege Vulnerability
|
Critical | 8.1 |
|
Windows SMB Client Elevation of Privilege Vulnerability
|
Important | 8.8 |
The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 32 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
568 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Secure Boot | 12 |
| Kernel | 10 |
| Networking | 10 |
| Remote Desktop | 8 |
| Search | 8 |
| Security and sign-in | 6 |
| File Explorer and shell | 5 |
| Hyper-V and virtualization | 5 |
| Graphics and display | 4 |
| Settings | 4 |
| Storage and file systems | 4 |
Sources
Cited passages from Microsoft's official notes (3)
-
1.
[Cloud Infrastructure] Fixed: Remote Web Access (RWA) was causing remote connections to act unpredictably.
support.microsoft.com -
2.
[Windows Hello] Fixed: This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.
support.microsoft.com -
3.
This issue was resolved by Windows updates released on and after July 8, 2025 (KB5062560).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 3/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake