KB5065789: Cumulative update for Windows 11, versions 24H2 and 25H2, September 2025. New accessibility, desktop and file tools; fixes for sign-in and playback

For: users with increased text scaling

• Desktop icons and text no longer overlap in the reported cases when text scaling is increased.¹

For: users of Arabic or Hebrew display languages

• Icons in File Explorer's details, preview and navigation panes are properly mirrored when using Arabic or Hebrew.²

• Touch input works again for entering a PIN at sign-in after the PC wakes from sleep.³
• Some characters display correctly when using the Chinese Input Method Editor.¹⁴
• Certain Chinese characters no longer appear as empty boxes in some text fields when a character limit is set.¹⁵
  The issue affected some fields, including those used in Connection Manager Administration Kit.
• Extended Unicode characters in File Explorer's Recent tooltips display as readable characters instead of boxes or unreadable symbols.¹⁶
  The issue included certain Chinese characters from Extension B through Extension F and other four-byte characters.

• Disks and Volumes no longer shows a BitLocker link in unsupported cases that opens with error 0x80004005.⁴

• Voice access responds again if it previously got stuck while saying it was listening.⁵

• The Dynamic Lighting Background Controller no longer occasionally uses excessive CPU after you unlock the PC.⁶

• HDR no longer unexpectedly turns off immediately after being enabled in Settings.⁷

• This update addresses playback problems in certain Blu-ray, DVD and digital TV apps that use EVR with HDCP enforcement; other protected-content playback issues remain listed.⁸
  The issue can occur after KB5064081 in applications using Enhanced Video Renderer with HDCP enforcement.

For: users who need a PIN to cast

• Pressing Enter confirms the PIN when casting from Quick Settings.⁹

• The unexpected “Something happened and your PIN isn’t available” message no longer appears when entering safe mode in the reported cases.¹⁰
• Windows Hello PIN setup works again on affected Microsoft Entra ID domain-joined devices.¹⁹
  Addresses error 0x80090010 after Windows updates released on or after KB5060842.

• Windows Sandbox no longer causes the PC to become unresponsive from high CPU use by VmmemCMFirstBoot after sign-in in the reported cases.¹¹

• Hyper-V virtual machines with TPM can start again on affected ARM64 devices after KB5064081.¹²
  Applies to ARM64 devices running supported Windows versions.
• A VM session no longer freezes and stops responding when a GPU paravirtualization device is assigned, in the reported cases.¹³

For: devices using SMB v1 over NetBT

• Shared files and folders can be reached again in the reported cases using SMB v1 over NetBIOS over TCP/IP.¹⁷
  Addresses an issue that can occur after KB5065426.

For: organizations using WSUS

• Windows Update works again for affected customers using WSUS.¹⁸
  Addresses an issue that disrupted Windows Update for customers using Windows Server Update Services.

• New and popular action tags in the Click to Do menu help you find AI-powered actions.²⁰

For: Copilot+ PC users

• Agent search results include a direct link to the related Settings page.²¹
  Currently rolling out to agents in Settings on Copilot+ PCs.

• You can move the on-screen indicators for brightness, volume, airplane mode and virtual desktops to a different screen position.²²
  Change the position under Settings > System > Notifications > Position of the onscreen pop-up.

For: eligible users outside the EEA

• AI actions let you edit images or summarize documents from File Explorer. This experience is not yet available in the EEA.²³
  Image actions support .jpg, .jpeg and .png files. Copilot summaries for OneDrive and SharePoint files require an active Microsoft 365 subscription and a Copilot license.

• You can pin favorite apps in the Windows share window for quicker access.²⁴

• A redesigned Advanced settings page replaces the For Developers page and makes key options easier to find.²⁵
  Settings include File Explorer version-control details, such as a repository's branch, diff count and last commit message.

• New keyboard shortcuts insert an en dash or em dash while typing.²⁶
  Windows logo key+Minus (-) inserts an en dash; Windows logo key+Shift+Minus (-) inserts an em dash. When Magnifier is running, Windows logo key+hyphen (-) zooms out instead.

For: Narrator users with a Braille display

• Braille Viewer displays on-screen text and its Braille equivalent in a floating window as you use Narrator.²⁷
  Set up Narrator for Braille and install the Braille support package before using Braille Viewer.

• You can use a supported third-party credential manager for passkeys after setting it up in Settings and verifying with Windows Hello.²⁸
  Configure under Settings > Accounts > Passkeys > Advanced options.
• Security keys can be set up with a PIN when a relying party requests preferred user verification and the key has no PIN yet.²⁹
  Applies when the relying party sets User Verification = Preferred during authentication.

For: users of supported Windows handhelds

• On supported Windows handhelds, a short press of the Xbox button opens Game Bar and a long press opens Task View; pressing and holding still turns off the controller.³⁰
  Currently available on supported handheld devices, with wider PC availability planned.

• Several dialogs, including one shown when an app fails to open, use a modern interface aligned with Windows 11.³¹

For: Intel- and AMD-powered Copilot+ PC users

• Voice access understands more natural spoken commands, including filler words and synonyms.³²
  Available for Intel- and AMD-powered Copilot+ PCs.

• Notification Center is available on secondary monitors; open it by selecting the taskbar date and time.³³

• Windows includes Edit, a text editor that you can use from the command line.³⁴
  Open Terminal and type edit followed by the file name.

For: devices with Click to Do

• Summarize action gives shorter, more focused summaries of text.³⁵

• Taskbar pinning policies can take effect without an administrator restarting File Explorer; users might wait about eight hours to see a pin.³⁶
  The delay depends on the policy refresh interval.

• Icons in the Open With menu are easier to see because packaged app icons no longer have an accent-colored background.³⁷
• Cloud files launch and context menus load more quickly in some situations.³⁸
  The update makes underlying changes intended to improve performance.

For: Narrator users in Word

• Narrator provides smoother voice feedback and more reliable reading and navigation in Word.³⁹
  Changes include list announcements, table boundaries and selection feedback.

• Bing search history is now managed through the Privacy dashboard rather than the Search history page in Settings.⁴⁰
  Open the Privacy dashboard from Privacy resources under Related settings.
• More time, language, date, number, currency and keyboard options are now available in Settings instead of Control Panel.⁴¹
  Settings now includes options for clocks, time servers, date formatting, Unicode UTF-8, copying language and region settings, character repeat and cursor blink rate.
• The Installed apps list in Settings loads faster in some situations.⁴²
  The update makes underlying changes to improve loading performance.

For: gamers using overlays

• Gaming performance can improve when Game Bar or other overlays are open, especially with monitors that have different refresh rates.⁴³

• Windows Certificate Authorities can use Certificate Revocation List partitioning.⁴⁴

• Administrator Protection Preview is scheduled to roll out at a future date, rather than with this update.⁴⁵
  The feature is off by default and needs to be enabled through OMA-URI in Intune or Group Policy.

For: devices receiving this update

• The servicing stack receives quality improvements to help devices reliably install Windows updates.⁴⁶
  The update includes servicing stack update KB5067437, build 26100.6717.