The Update BureauKB5063709: Cumulative update for Windows 10, versions 21H2 and 22H2, August 2025. Critical GDI+ flaw patched; reset and recovery issue resolved
Addresses 44 vulnerabilities, including three critical flaws, and resolves a reset and recovery failure. The critical flaws affect GDI+, Microsoft Message Queuing, and Windows NTLM.
Does it affect you? Applies to: This update applies to Windows 10, version 22H2, and Windows 10, version 21H2 Enterprise LTSC 2021 and IoT Enterprise LTSC 2021. It updates these versions to builds 19045.6216 and 19044.6216, respectively.
Review notes Additional details from the official release notes (1) Read note
- What to do For offline images, KB5031539 is required only if the image lacks the July 25, 2023 LCU or a later LCU. For WSUS or Catalog installations, KB5005260 is required only if the device lacks the May 11, 2021 LCU or a later LCU.
The official sources are linked at the end of the page.
What changes
Improvements 4 changes
Internal Windows OS
Windows 10, version 22H2
- Version 22H2 includes the improvements from the supported version 21H2 editions.2
Servicing stack
-
The component that installs Windows updates receives quality improvements.3
Servicing stack update KB5063261 is combined with the latest cumulative update.
Fix 1 change
Reset and recovery
-
Resetting or recovering a device no longer encounters the issue that could make the process fail.4
The issue affected Reset my PC, Fix problems using Windows Update, and RemoteWipe CSP. Resolved by KB5063709.
Known issues
-
Network Device Interface streaming performance issue
Using Network Device Interface (NDI) to stream or transfer feeds between PCs might cause delays or uneven audio and video performance, especially with Display Capture enabled on the source PC. KB5065429 resolves this issue.5
Resolution Fixed in KB5065429Install KB5065429 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Unexpected User Account Control (UAC) prompt when doing MSI repair operations
Standard users might see unexpected User Account Control (UAC) prompts during some MSI repair and related operations. KB5065429 resolves this unexpected-prompt issue; it does not mean that all MSI repair prompts are removed, because the security change requires administrator credentials for these operations.6
Resolution Fixed in KB5065429Install KB5065429 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Reset and recovery issue
Resetting or recovering a device might fail when using Reset my PC, Fix problems using Windows Update, or RemoteWipe CSP. KB5063709 resolves this issue.4
Resolution Fixed in KB5063709Install KB5063709 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-08-12
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5062649, KB5062554, KB5061087, KB5063159
- Replaced by
- KB5066188
| Version | Build | Channel |
|---|---|---|
| 21H2 | 19044.6216 | General availability |
| 22H2 | 19045.6216 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
GDI+ Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Windows NTLM Elevation of Privilege Vulnerability
|
Critical | 8.8 |
|
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
|
Critical | 8.1 |
The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 44 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
892 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 38 |
| Secure Boot | 16 |
| File Explorer and shell | 12 |
| Security and sign-in | 12 |
| Remote Desktop | 11 |
| Hyper-V and virtualization | 7 |
| Kernel | 6 |
| Networking | 4 |
| Storage and file systems | 4 |
| Audio | 3 |
| Emoji and input | 2 |
| Settings | 1 |
Verified in package: changed files confirm Reset and recovery.
Sources
Cited passages from Microsoft's official notes (6)
-
1.
This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release.
support.microsoft.com -
2.
This build includes all the improvements from the supported Windows 10, version 21H2 editions.
support.microsoft.com -
3.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
4.
This issue is resolved by Windows updates released on and after August 19, 2025 (KB5063709).
support.microsoft.com -
5.
This issue is resolved by Windows updates released on and after September 9, 2025 (KB5065429).
support.microsoft.com -
6.
This issue is resolved by Windows updates released on and after September 9, 2025 (KB5065429).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake