Skip to the content
The Update Bureau
Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
Patch Tuesday

KB5062554

KB5062554: Cumulative update for Windows 10, versions 21H2 and 22H2, July 2025. SPNEGO and Hyper-V flaws patched; CJK text may blur

In short

Fixes 75 vulnerabilities, including 5 critical ones. Some CJK text may look blurry at 96 DPI in Chromium-based browsers, and two input-related issues are resolved by KB5062649.

Does it affect you? Applies to: This update applies to Windows 10, version 22H2, all editions, and version 21H2 on Enterprise LTSC 2021 and IoT Enterprise LTSC 2021. It installs builds 19045.6093 and 19044.6093, respectively.

Builds
19044.6093 · 19045.6093
Security
75 fixed · 5 critical
Restart
Required

What changes

Improvements 3 changes

Internal Windows OS

2 items
  • Internal Windows components receive miscellaneous security improvements; no specific user-facing change is listed.1
    Applies to Windows 10, version 21H2, Enterprise LTSC 2021 and IoT Enterprise LTSC 2021.
  • Internal Windows components receive miscellaneous security improvements; no specific user-facing change is listed.1
    Applies to Windows 10, version 22H2, all editions.

Servicing stack

For: Devices installing this update

  • The component that installs Windows updates gets reliability improvements.2
    The update combines servicing stack update KB5063706 with the latest cumulative update.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5062649

    Microsoft Changjie Input Method Editor

    The Microsoft Changjie IME for Traditional Chinese might fail to form or select words, respond to the spacebar, show the conversion candidate window properly, or produce correct words. This issue is resolved by updates released on and after July 22, 2025, including KB5062649.3

    Resolution Fixed in KB5062649

    Install KB5062649 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Open Affects: Everyone

    Noto fonts

    CJK text might look blurry or unclear at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome.4

    How to apply the workaround Workaround

    Increase display scaling to improve text clarity.4

  3. Resolved Affects: Everyone Resolved by KB5062649

    Windows Emoji Panel

    Windows Emoji Panel search might fail even though the panel still opens and emojis can be selected manually. This issue is resolved by updates released on and after July 22, 2025, including KB5062649.5

    Resolution Fixed in KB5062649

    Install KB5062649 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-07-08
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5061087, KB5063159, KB5060533, KB5058481
+17 earlier KB5061979, KB5061768, KB5055612, KB5053643, KB5052077, KB5050081, KB5046714, KB5045594, KB5043131, KB5041582, KB5040525, KB5039299, KB5037849, KB5036979, KB5035941, KB5034843, KB5034203
Replaced by
KB5063709
VersionBuildChannel
21H2 19044.6093 General availability
22H2 19045.6093 General availability

Security

75 vulnerabilities fixed
5 critical 68 important 1 moderate 1 low
VulnerabilitySeverityCVSS
CVE-2025-47981
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-48822
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
 Critical 8.6
CVE-2025-47980
Windows Imaging Component Information Disclosure Vulnerability
 Critical 6.2
CVE-2024-36350
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
 Critical 5.6
CVE-2024-36357
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
 Critical 5.6

The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 75 vulnerabilities →

Updated components

996 files changed since the previous update for the same versions.

Top changed componentsFiles
Secure Boot27
Graphics and display23
Hyper-V and virtualization19
Search15
Remote Desktop14
Windows Update12
Security and sign-in9
File Explorer and shell8
Storage and file systems8
Kernel6
Networking6
Printing6

Sources

Updated
Cited passages from Microsoft's official notes (5)
  1. 1. [Internal Windows OS] This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release. support.microsoft.com
  2. 2. SSUs improve the reliability of the update process to mitigate potential issues while installing updates. support.microsoft.com
  3. 3. This issue is resolved by the Windows update released on and after July 22, 2025 (KB5062649). support.microsoft.com
  4. 4. The issue is due to limited pixel density at 96 DPI, which can reduce the clarity and alignment of CJK characters. Increasing the display scaling improves clarity by enhancing text rendering. support.microsoft.com
  5. 5. This issue is resolved by the Windows update released on and after July 22, 2025 (KB5062649). support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake