The Update BureauKB5062572: Cumulative update for Windows Server, version 2022, July 2025. Critical NEGOEX flaw patched; Changjie typing issue remains
A critical SPNEGO NEGOEX flaw could allow remote code execution. Some users might also have trouble typing Traditional Chinese with the Changjie input method.
Does it affect you? Applies to: Devices running Windows Server 2022, x64.
Review notes Additional details from the official release notes (1) Read note
- Known issues The issue can affect anyone using the Microsoft Changjie input method for Traditional Chinese after installing this update; Microsoft does not limit it to business users.
The official sources are linked at the end of the page.
What changes
Fixes 3 changes
DHCP Server (known issue)
For: DHCP Server deployments
- The DHCP Server service might stop responding and disrupt IP renewal for clients. This issue is fixed.1
Language and character support
For: Users of Chinese characters
-
Some Chinese characters now display correctly and are accepted when using extended Unicode.2
A modern ICU-based solution supports GB18030-2022 requirements.
Performance
For: Windows Server administrators
-
Unused language packs and optional features are removed more completely, reducing wasted storage and slow update installs.3
Addresses incomplete removal of unused language packs and Feature on Demand packages.
Improvements 2 changes
Microsoft RPC Netlogon protocol
For: Active Directory domain controllers and Samba users
-
Some anonymous requests to domain controllers are blocked. Certain file and print software might be affected.4
Tightens access checks for a set of remote procedure call (RPC) requests. Active Directory domain controllers no longer allow anonymous clients to invoke some requests through the Netlogon RPC server. Certain file and print service software, including Samba, can be affected.
Servicing stack
For: Windows Server administrators
-
The component that installs Windows updates gets quality improvements.5
Includes servicing stack update KB5062793, build 20348.3920.
Known issues
-
Microsoft Changjie Input Method Editor
After installing this update, some users might have trouble forming or selecting words with the Microsoft Changjie input method for Traditional Chinese. The spacebar might not respond, words might appear incorrectly, or the candidate window might not display properly.6
How to apply the workaround WorkaroundInstall KB5063880; Microsoft says it addresses this issue.6
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-07-08
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5060526, KB5061906, KB5058385, KB5059092
- Replaced by
- KB5063880
| Version | Build | Channel |
|---|---|---|
| 2022 | 20348.3932 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
|
Critical | 8.6 |
|
Windows Imaging Component Information Disclosure Vulnerability
|
Critical | 6.2 |
|
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
|
Critical | 5.6 |
|
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
|
Critical | 5.6 |
The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 96 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
554 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Hyper-V and virtualization | 13 |
| Graphics and display | 12 |
| Secure Boot | 10 |
| Networking | 8 |
| Security and sign-in | 8 |
| Kernel | 6 |
| Remote Desktop | 6 |
| Storage and file systems | 6 |
| Search | 5 |
| Audio | 3 |
| File Explorer and shell | 3 |
| Printing | 2 |
Sources
Cited passages from Microsoft's official notes (6)
-
1.
Fixed: An issue in which the DHCP Server service might intermittently stop responding and affects IP renewal for clients.
support.microsoft.com -
2.
Fixed: An issue that affected some Chinese characters and experienced compliance issue with GB18030. These characters didn’t display correctly or weren’t accepted when using extended Unicode.
support.microsoft.com -
3.
This update addresses an issue that prevented the complete removal of unused language packs and Feature on Demand packages, which previously led to unnecessary storage use and longer Windows Update installation times.
support.microsoft.com -
4.
After this update is installed, Active Directory domain controllers will no longer allow anonymous clients to invoke some RPC requests through the Netlogon RPC server.
support.microsoft.com -
5.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
6.
Following installation of this update, there might be issues when using the Microsoft Changjie IME (input method editor) for Traditional Chinese. Reported symptoms include: - Inability to form or select words after typing the full composition (associate phrase window).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 3/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake