Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday

KB5062560

KB5062560: Cumulative update for Windows 10, version 1607, July 2025. Critical SPNEGO and Hyper-V remote-code flaws addressed

In short

The update addresses 69 vulnerabilities, including five critical flaws. It also causes reported input problems with the Microsoft Changjie IME; KB5063871 resolves that issue.

Does it affect you? Applies to: Devices running Windows 10, version 1607, specifically Windows 10 IoT Enterprise LTSB 2016. Packages are available for x86 and x64.

Build
14393.8246
Security
69 fixed · 5 critical
Restart
Required
Review notes Additional details from the official release notes (2) Read notes
  • In detail Microsoft recommends reviewing its Secure Boot certificate guidance and taking action to update certificates in advance to avoid disruption.
  • What to do Microsoft recommends reviewing its Secure Boot certificate guidance and taking action to update certificates in advance to avoid disruption.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvement 1 change

Internal Windows OS

  • The update includes general security improvements to Windows; no specific issues are listed.1

Known issues

  1. Resolved Affects: Everyone Resolved by KB5063871

    Microsoft Changjie Input Method Editor

    After installing this update, the Microsoft Changjie input method editor for Traditional Chinese might have problems forming or selecting words, responding to the spacebar, showing conversion candidates, or displaying the correct words. KB5063871 resolves the issue.2

    Resolution Fixed in KB5063871

    Install KB5063871 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-07-08
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5061010, KB5058383, KB5058921, KB5055521
+6 earlier KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5063871
VersionBuildChannel
1607 14393.8246 General availability

Security

69 vulnerabilities fixed
5 critical 62 important 1 moderate 1 low
VulnerabilitySeverityCVSS
CVE-2025-47981
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-48822
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
 Critical 8.6
CVE-2025-47980
Windows Imaging Component Information Disclosure Vulnerability
 Critical 6.2
CVE-2024-36350
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
 Critical 5.6
CVE-2024-36357
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
 Critical 5.6
CVE-2024-21302
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 69 vulnerabilities →

Updated components

729 files changed since the previous update for the same versions.

Top changed componentsFiles
Audio19
Secure Boot18
Graphics and display14
.NET runtime (CLR)12
Hyper-V and virtualization12
Security and sign-in12
Remote Desktop8
Search8
Storage and file systems8
Kernel7
File Explorer and shell6
Networking6

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release. support.microsoft.com
  2. 2. This issue is resolved by Windows updates released on and after August 12, 2025 (KB5063871). support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake