Skip to the content
The Update Bureau
Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
Patch Tuesday Zero-day

KB5068781

KB5068781: Cumulative update for Windows 10, versions 21H2 and 22H2, November 2025. Closes exploited kernel flaw and fixes false support warning

In short

Closes 33 vulnerabilities, including the actively exploited Windows Kernel flaw CVE-2025-62215, and fixes a false end-of-support warning. Secure Boot certificates begin expiring in June 2026; Microsoft recommends reviewing its guidance and updating certificates in advance.

Does it affect you? Applies to: This update applies to Windows 10, version 22H2 devices enrolled in ESU and Windows 10 Enterprise LTSC 2021, version 21H2. The installation issue affects some commercial ESU devices activated through Windows subscription activation in the Microsoft 365 admin center.

Builds
19044.6575 · 19045.6575
Security
33 fixed · 2 critical · 1 exploited
Restart
Required

What changes

Fixes 2 changes

Update (known issue)

2 items
  • On Windows 10, version 22H2 ESU devices, this update fixes the message that might incorrectly say Windows has reached the end of support after KB5066791.1
  • On Windows 10 Enterprise LTSC 2021 devices, this update fixes the message that might incorrectly say Windows has reached the end of support after KB5066791.1

Improvement 1 change

Servicing stack

  • The update improves how Azure-hosted devices are identified when installing updates.2
    The servicing stack update (KB5068780) uses an updated certificate chain to verify whether a device is hosted on Azure.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5072653

    This update might fail to install with error 0x800f0922

    On some commercial Windows 10 ESU devices activated through Windows subscription activation in the Microsoft 365 admin center, KB5068781 might fail to install with error 0x800f0922. Installing KB5072653 resolves the issue and allows deployment of KB5068781.3

    Resolution Fixed in KB5072653

    Install KB5072653 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-11-11
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5066791, KB5066198, KB5065429, KB5063842
+25 earlier KB5066188, KB5063709, KB5062649, KB5062554, KB5061087, KB5063159, KB5060533, KB5058481, KB5061979, KB5061768, KB5055612, KB5053643, KB5052077, KB5050081, KB5046714, KB5045594, KB5043131, KB5041582, KB5040525, KB5039299, KB5037849, KB5036979, KB5035941, KB5034843, KB5034203
Replaced by
KB5071546
VersionBuildChannel
21H2 19044.6575 General availability
22H2 19045.6575 General availability

Security

33 vulnerabilities fixed
1 exploited 2 critical 31 important
VulnerabilitySeverityCVSS
CVE-2025-62215 Exploited
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60724
Windows GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-60716
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Critical 7.0

The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 33 vulnerabilities →

Updated components

856 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display26
Networking14
Kernel9
Remote Desktop9
Secure Boot8
File Explorer and shell6
Hyper-V and virtualization6
Security and sign-in6
Bluetooth3
Emoji and input2
Storage and file systems2
Audio1

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. Fixed: After installing the October 14, 2025 Windows update (KB5066791), the message, "Your version of Windows has reached the end of support", might incorrectly display in the Windows Update Settings page. support.microsoft.com
  2. 2. This servicing stack update (SSU) includes enhanced logic to verify whether a device is hosted on Azure, leveraging an updated certificate chain for validation. support.microsoft.com
  3. 3. This issue is fixed in the update KB5072653: Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake