Skip to the content
The Update Bureau
Windows 10 1809 Windows 10 1809 Security update
Patch Tuesday

KB5063877

KB5063877: Cumulative update for Windows 10, version 1809, August 2025. GDI+ remote-code flaw patched; Changjie word selection restored

In short

Fixes 43 vulnerabilities, including three critical flaws, and restores word selection in the Microsoft Changjie Input Method.

Does it affect you? Applies to: Devices running Windows 10 version 1809: Windows 10 Enterprise LTSC 2019, Windows 10 IoT Enterprise LTSC 2019, and Windows 10 IoT Core LTSC.

Build
17763.7678
Security
43 fixed · 3 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fix 1 change

Input and Composition

  • Users of the Microsoft Changjie Input Method can select words again after a recent update prevented it.1
    Fixes the known issue that prevented users from selecting words with the Microsoft Changjie Input Method.

Improvement 1 change

Servicing stack

For: Devices receiving this update

  • The component that installs Windows updates receives quality improvements.2
    The update combines servicing stack update KB5062800, build 17763.7557, with the latest cumulative update.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5065428

    Unexpected User Account Control (UAC) prompt when doing MSI repair operations

    After the August 2025 security update, standard users might see UAC prompts during MSI repair and related operations. KB5065428 resolves this issue.3

    Resolution Fixed in KB5065428

    Install KB5065428 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Everyone Resolved by KB5066187

    Reset and recovery issue

    Resetting or recovering a device might fail when using Reset my PC, Fix problems using Windows Update, or RemoteWipe CSP. KB5066187 resolves this issue.4

    Resolution Fixed in KB5066187

    Install KB5066187 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-08-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5062557, KB5060531, KB5061978, KB5058392
+4 earlier KB5059091, KB5058922, KB5050008, KB5037425
Replaced by
KB5066187
VersionBuildChannel
1809 17763.7678 General availability

Security

43 vulnerabilities fixed
3 critical 40 important
VulnerabilitySeverityCVSS
CVE-2025-53766
GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-53778
Windows NTLM Elevation of Privilege Vulnerability
 Critical 8.8
CVE-2025-50177
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1

The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 43 vulnerabilities →

Updated components

697 files changed since the previous update for the same versions.

Top changed componentsFiles
Bluetooth34
Graphics and display22
Secure Boot13
Security and sign-in13
Networking10
Kernel9
Hyper-V and virtualization7
File Explorer and shell2
Remote Desktop2
Storage and file systems2
Audio1

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. [Input and Composition] Fixed: A known issue with the Microsoft Changjie Input Method. Users were unable to select words after a recent update. support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. This issue is resolved by Windows updates released on and after September 9, 2025 (KB5065428). support.microsoft.com
  4. 4. These issues are resolved by Windows updates released on and after August 19, 2025 (KB5066187). support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake