Skip to the content
The Update Bureau
Windows 11 24H2 Windows 11 24H2 Out-of-band update
Out-of-band

KB5068221

KB5068221: Cumulative update for Windows 11, version 24H2, September 2025. App-V Office app failures addressed

In short

Office apps running in App-V get a fix for a handle-closure failure. Secure Boot certificates start expiring in June 2026, so affected devices should be prepared in advance.

Does it affect you? Applies to: Devices running Windows 11, version 24H2, on x64 or Arm64.

Build
26100.6588
Restart
Required
Review notes Additional details from the official release notes (3) Read notes
  • Known issues The SMBv1 connection problem can occur after a Windows update released on or after September 9, 2025, if either the SMB client or the SMB server has that update.
  • Known issues KB5065789 addresses the SMBv1 connectivity issue.
  • Known issues KB5065789 addresses problems affecting certain apps using Enhanced Video Renderer with HDCP enforcement. KB5067036 includes additional improvements for apps using DRM for digital audio.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 2 changes

AI components

  • AI components receive updated versions on Copilot+ PCs. They do not install on other Windows PCs or Windows Server.1
    Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2508.906.0.

Servicing stack

For: Windows 11, version 24H2 devices

  • The component that installs Windows updates receives quality improvements.2
    Includes servicing stack update KB5064531, build 26100.5074.

Fix 1 change

Virtualization and platform compatibility

For: Devices running Office apps in App-V environments

  • Office apps running in App-V get a fix for a failure caused by a handle closing twice.3
    Addresses a double handle closure in AppVEntSubsystems32 or AppVEntSubsystems64.

Known issues

  1. Open Affects: Organizations and IT administrators

    Password icon might be missing or invisible in the lock screen sign-in options

    The password icon might be missing from the lock screen sign-in options after the August 2025 preview update or later updates. This mainly affects managed or enterprise environments; personal Home and Pro devices are very unlikely to be affected.4

    How to apply the workaround Workaround

    Select the blank space where the password icon should appear to open the password box.4

  2. Open Affects: Everyone

    Problems playing protected content in some BluRay/DVD/Digital TV apps

    Some digital TV, Blu-ray, or DVD apps might not play protected content as expected after the August 29, 2025 preview update or later updates. Streaming services are not affected.5

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  3. Open Affects: Everyone

    SMBv1 protocol connectivity

    After installing the September 2025 security update on an SMB client or server, connections to shared files and folders might fail when using SMBv1 over NetBIOS over TCP/IP. SMBv2 and SMBv3 are not affected.6

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-09-22
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5065426, KB5064081, KB5063878, KB5062660
+30 earlier KB5064489, KB5062553, KB5060829, KB5063060, KB5060842, KB5058499, KB5061977, KB5058411, KB5055627, KB5059087, KB5055523, KB5053656, KB5053598, KB5052093, KB5051987, KB5050094, KB5050009, KB5048667, KB5046740, KB5046617, KB5044384, KB5044284, KB5043178, KB5043080, KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239
Replaced by
KB5066835
VersionBuildChannel
24H2 26100.6588 General availability

Security

No vulnerabilities are listed for this update.

Updated components

33 files changed since the previous update for the same versions.

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. | Image Search | 1.2508.906.0 | | Content Extraction | 1.2508.906.0 | | Semantic Analysis | 1.2508.906.0 | | Settings Model | 1.2508.906.0 | support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. Fixed: This update addresses an issue that affects Microsoft Office applications running in Microsoft Application Virtualization (App-V) environments. The failure occurred due to a double handle closure in the AppVEntSubsystems32 or AppVEntSubsystems64 system component. support.microsoft.com
  4. 4. the password icon is not visible in the sign-in options on the lock screen. If you hover over the space where the icon should appear, you’ll see that the password button is still available. support.microsoft.com
  5. 5. Some Digital TV and Blu-ray/DVD apps might not play protected content as expected after installing the August 29, 2025, Windows non-security preview update (KB5064081), or later updates. support.microsoft.com
  6. 6. After installing the Windows update released on or after September 9, 2025, you might fail to connect to shared files and folders using the Server Message Block (SMB) v1 protocol on NetBIOS over TCP/IP support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 3/5, clarity 3/5, completeness 3/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake