The Update BureauKB5063871: Cumulative update for Windows 10, version 1607, August 2025. GDI+ remote-code flaw patched; Changjie word selection restored
The update fixes 37 security vulnerabilities, including three critical flaws in GDI+, MSMQ, and NTLM, and restores word selection in the Microsoft Changjie Input Method.
Does it affect you? Applies to: This update applies to Windows 10 IoT Enterprise 2016 LTSB, version 1607, and updates the OS build to 14393.8330.
Review notes Additional details from the official release notes (2) Read notes
- This page Support for Windows 10 ended on October 14, 2025. After that date, Microsoft no longer provides free updates, technical assistance, or security fixes for Windows 10.
- Known issues Standard users might see the UAC prompt in several scenarios, including MSI repairs and opening some Autodesk apps; the issue is not limited to business users.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Fix 1 change
Input and Composition
For: Microsoft Changjie Input Method users
-
Users of the Microsoft Changjie Input Method can select words again.1
Fixes the issue that prevented users from selecting words after a recent update.
Known issues
-
Unexpected User Account Control (UAC) prompt when doing MSI repair operations
After installing the update, standard users might see an unexpected User Account Control (UAC) prompt during MSI repairs and related operations. A non-admin app that starts a repair without showing a prompt might fail. Updates released on or after September 9, 2025, including KB5065427, resolve the issue.2
Resolution Fixed in KB5065427Install KB5065427 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-08-12
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5062560, KB5061010, KB5058383, KB5058921
- Replaced by
- KB5065427
| Version | Build | Channel |
|---|---|---|
| 1607 | 14393.8330 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
GDI+ Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Windows NTLM Elevation of Privilege Vulnerability
|
Critical | 8.8 |
|
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
|
Critical | 8.1 |
The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 37 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
455 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Bluetooth | 24 |
| Graphics and display | 20 |
| Secure Boot | 12 |
| Networking | 10 |
| Kernel | 9 |
| Remote Desktop | 9 |
| Search | 8 |
| File Explorer and shell | 6 |
| Security and sign-in | 6 |
| Hyper-V and virtualization | 5 |
| Settings | 4 |
| Storage and file systems | 2 |
Sources
Cited passages from Microsoft's official notes (2)
-
1.
[Input and Composition] Fixed: A known issue with the Microsoft Changjie Input Method. Users were unable to select words after a recent update.
support.microsoft.com -
2.
After installing the update, standard users might see a User Account Control (UAC) prompt in several scenarios.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 3/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake