KB5062557: Cumulative update for Windows 10, version 1809, July 2025. NEGOEX remote-code flaw patched; language-pack cleanup fixed
The update fixes 75 security vulnerabilities, including five critical flaws, and resolves an issue that wasted storage and slowed updates. It also improves Windows update servicing.
Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809, on x86 or x64.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Fix 1 change
Input and Composition
-
Unused language packs and Feature on Demand packages are removed completely, avoiding unnecessary storage use and longer update installations.1
Fixes incomplete removal of unused language packs and Feature on Demand (FOD) packages.
Improvement 1 change
Servicing stack
-
The component that installs Windows updates receives quality improvements.2
Includes servicing stack update KB5062800 (build 17763.7557).
Known issues
-
Microsoft Changjie Input Method Editor
The Microsoft Changjie IME for Traditional Chinese might fail to form or select words, ignore the spacebar, show incorrect output, or display its conversion candidate window incorrectly. This issue is resolved by updates released on and after August 12, 2025, including KB5063877.3
Resolution Fixed in KB5063877Install KB5063877 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Cluster Service
On Windows Server 2019, the Cluster Service might repeatedly stop and restart when BitLocker is used with Cluster Shared Volumes. Nodes might fail to rejoin or enter quarantine, virtual machines might restart repeatedly, and Event ID 7031 errors might appear. This issue is resolved by Windows Server 2019 updates released on and after August 12, 2025, including KB5063877.4
Resolution Fixed in KB5063877Install KB5063877 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-07-08
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5060531, KB5061978, KB5058392, KB5059091
- Replaced by
- KB5063877
| Version | Build | Channel |
|---|---|---|
| 1809 | 17763.7558 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
|
Critical | 8.6 |
|
Windows Imaging Component Information Disclosure Vulnerability
|
Critical | 6.2 |
|
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
|
Critical | 5.6 |
|
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
|
Critical | 5.6 |
|
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
|
Important | 6.7 |
The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 75 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
781 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Secure Boot | 19 |
| Graphics and display | 14 |
| Security and sign-in | 12 |
| Hyper-V and virtualization | 10 |
| Search | 8 |
| Storage and file systems | 8 |
| Windows Update | 8 |
| Kernel | 7 |
| Networking | 6 |
| Remote Desktop | 6 |
| Printing | 4 |
| Audio | 3 |
Sources
Cited passages from Microsoft's official notes (4)
-
1.
[Input and Composition] Fixed: An issue affecting the complete removal of unused language packs and Feature on Demand (FOD) packages. This issue led to unnecessary storage use and increased Windows update installation time.
support.microsoft.com -
2.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
3.
This issue is resolved by Windows updates released on and after August 12, 2025 ([KB5063877]).
support.microsoft.com -
4.
This issue only occurs in configurations using BitLocker with Cluster Shared Volumes (CSV).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake