Skip to the content
The Update Bureau
Windows 11 23H2 Windows 11 23H2 Security update
Patch Tuesday

KB5063875

KB5063875

Cumulative update for Windows 11, version 23H2, August 2025

In short

Security fixes cover a GDI+ code execution flaw and other Windows components. The Copilot key works more reliably, while Secure Boot certificates need attention before they expire.

Does it affect you? Applies to: Devices running Windows 11, version 23H2. The update is available for x64 and Arm64 devices.

Build
22631.5768
Security
47 fixed · 4 critical
Restart
Required
Review notes Additional details from the official release notes (4) Read notes
  • Does it affect you? This update also applies to Windows 11, version 22H2 Enterprise and Education editions.
  • Known issues The reset and recovery issue is addressed in KB5066189.
  • Known issues The unexpected UAC prompt issue is addressed in KB5065431.
  • Known issues If a non-admin user runs an app that starts an MSI repair without showing a prompt, the repair fails with an error.

The official sources are linked at the end of the page.

What changes

Fix 1 change

Copilot

For: Windows 11 23H2 and 22H2 Enterprise and Education devices

  • The Copilot key works more reliably, and using it no longer stops Copilot from restarting.1
    The 22H2 Enterprise and Education changes are included in the 23H2 build, which includes all improvements from Windows 11, version 22H2.

Improvement 1 change

Servicing stack

For: Windows 11 devices

  • The component that installs Windows updates gets quality improvements.2
    The combined update includes servicing stack update KB5062686, builds 22621.5690 and 22631.5690.

Known issues

  1. Open Affects: Everyone

    Unexpected User Account Control (UAC) prompt when doing MSI repair operations

    After installing KB5063875, standard users might see a UAC prompt during MSI repair and related operations. Some repair operations without a visible prompt might fail.3

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Open Affects: Everyone

    Reset and recovery issue

    After installing KB5063875, attempts to reset or recover the device might fail. This can affect Reset my PC, Fix problems using Windows Update, or RemoteWipe CSP.4

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-08-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5062663, KB5062552, KB5060826, KB5060999
+35 earlier KB5062170, KB5058502, KB5058405, KB5055629, KB5058919, KB5055528, KB5053657, KB5053602, KB5052094, KB5051989, KB5050092, KB5050021, KB5048685, KB5046732, KB5046633, KB5044380, KB5044285, KB5043145, KB5043076, KB5041587, KB5041585, KB5040527, KB5040442, KB5039302, KB5039212, KB5037853, KB5037771, KB5036980, KB5036893, KB5035942, KB5035853, KB5034848, KB5034765, KB5034204, KB5034123
Replaced by
KB5066189
VersionBuildChannel
23H2 22631.5768 General availability

Security

47 vulnerabilities fixed
4 critical 43 important
VulnerabilitySeverityCVSS
CVE-2025-53766
GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-53778
Windows NTLM Elevation of Privilege Vulnerability
 Critical 8.8
CVE-2025-50177
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-50176
DirectX Graphics Kernel Remote Code Execution Vulnerability
 Critical 7.8

The table lists the 4 exploited, publicly disclosed or critical vulnerabilities. See all 47 vulnerabilities →

Updated components

699 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display26
Remote Desktop12
Secure Boot10
Security and sign-in8
File Explorer and shell5
Kernel5
Audio2
Hyper-V and virtualization2
Networking2
Storage and file systems2

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. [Copilot] Fixed: Improved the Copilot key’s reliability and resolved an issue that prevented users from restarting Copilot after using the key. support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. After installing the update, standard users might see a User Account Control (UAC) prompt in several scenarios. support.microsoft.com
  4. 4. After installing this security update (KB5063875), attempts to reset or recover the device might fail. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 3/5, clarity 3/5, completeness 3/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake