KB5061768: Cumulative update for Windows 10, versions 21H2 and 22H2, May 2025. LSASS and BitLocker recovery issue fixed

Fixes an issue that could crash LSASS and send some Intel vPro PCs into BitLocker recovery. Blurry CJK text at 96 DPI remains a known issue.

Does it affect you? Applies to: Devices running Windows 10, version 22H2, or version 21H2 Enterprise LTSC 2021 or IoT Enterprise LTSC 2021. The update fixes an issue affecting devices with Intel TXT enabled on 10th generation or later Intel vPro processors.

What changes

Fixes 2 changes

OS Security (Known Issue)

2 items

For: devices with Intel TXT enabled on 10th generation or later Intel vPro processors

The issue that could stop LSASS and trigger Automatic Repair with a BitLocker recovery prompt is fixed for the listed Intel vPro devices.¹
Affects devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors running Windows 10, version 21H2 Enterprise LTSC 2021 or IoT Enterprise LTSC 2021.
The issue that could stop LSASS and trigger Automatic Repair with a BitLocker recovery prompt is fixed for the listed Intel vPro devices.²
Affects devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors running Windows 10, version 22H2.

Improvement 1 change

Servicing stack

The component that installs Windows updates receives quality improvements.³
Includes servicing stack update KB5058526.

Known issues

Open Affects: Everyone

Noto fonts

CJK text might look blurry or unclear at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. The issue is related to limited pixel density at this setting.⁴

How to apply the workaround Workaround

Increase display scaling to improve clarity. For additional support, report Noto CJK font issues through the Google Noto Fonts GitHub repository.⁴

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2025-05-19
Classification: Updates
Type: Cumulative update
Restart: Required
Replaces: KB5055612, KB5053643, KB5052077, KB5050081

+11 earlier
KB5046714, KB5045594, KB5043131, KB5041582, KB5040525, KB5039299, KB5037849, KB5036979, KB5035941, KB5034843, KB5034203
Replaced by: KB5061979

Version	Build	Channel
21H2	19044.5856	General availability
22H2	19045.5856	General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

x64 21H2 / 22H2

711.5 MB

windows10.0-kb5061768-x64.msu Main update · KB5061768 SHA-1: 853083b6…9ef9ac

Arm64 21H2 / 22H2

665.7 MB

windows10.0-kb5061768-arm64.msu Main update · KB5061768 SHA-1: b193e609…e744f7

x86 21H2 / 22H2

415.4 MB

windows10.0-kb5061768-x86.msu Main update · KB5061768 SHA-1: 8f338239…82f671

Updated components

1,137 files changed since the previous update for the same versions.

Top changed components	Files
Bluetooth	54
Settings	46
Remote Desktop	19
Graphics and display	18
File Explorer and shell	16
Networking	15
Security and sign-in	15
Secure Boot	12
Hyper-V and virtualization	11
Kernel	9
Emoji and input	8
Windows Update	7

Sources

Microsoft Support: KB5061768

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (4)

1. Fixed: A known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors. support.microsoft.com
2. might cause the Local Security Authority Subsystem Service (LSASS) process to terminate unexpectedly, triggering an Automatic Repair prompting for the BitLocker recovery key to continue. support.microsoft.com
3. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
4. There are reports of blurry or unclear CJK (Chinese, Japanese, Korean) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake