KB5068864: Cumulative update for Windows 10, version 1607, November 2025. Critical GDI+ flaw fixed; unexpected app prompts addressed

Fixes 25 security vulnerabilities, including the critical GDI+ remote-code execution flaw CVE-2025-60724. It also addresses unexpected UAC prompts for some apps, including Autodesk AutoCAD.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607.

Review notes Additional details from the official release notes (1) Read note

In detail Microsoft recommends installing SSU KB5070247 first; without it, the update might not install. Windows Update offers the SSU automatically, while WSUS administrators must approve both KB5070247 and KB5068864.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fix 1 change

App compatibility (known issue)

Unexpected UAC prompts for some apps, including Autodesk AutoCAD, are addressed.¹
Addresses unexpected User Account Control (UAC) prompts during MSI repair operations.

Improvement 1 change

Internal Windows OS

The update includes miscellaneous security improvements to internal Windows OS functionality.²
No specific issues are documented for these improvements.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2025-11-11
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5066836, KB5065427, KB5063871, KB5062560

+10 earlier
KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by: KB5071543

Version	Build	Channel
1607	14393.8594	General availability

Security

25 vulnerabilities fixed

1 critical 24 important

Vulnerability	Severity	CVSS
CVE-2025-60724 Windows GDI+ Remote Code Execution Vulnerability	Critical	9.8
CVE-2025-64678 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	8.8
CVE-2025-60715 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	8.0
CVE-2025-62452 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	8.0
CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-59514 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-60703 Windows Remote Desktop Services Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-60705 Windows Client-Side Caching Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-60714 Windows OLE Remote Code Execution Vulnerability	Important	7.8
CVE-2025-60720 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-60704 Windows Kerberos Elevation of Privilege Vulnerability	Important	7.5
CVE-2025-59506 DirectX Graphics Kernel Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-59507 Windows Speech Runtime Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-59508 Windows Speech Recognition Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-60719 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-62213 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-62217 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-62218 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-62219 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability	Important	7.0
CVE-2025-60708 Storvsp.sys Driver Denial of Service Vulnerability	Important	6.5
CVE-2025-59510 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability	Important	5.5
CVE-2025-59513 Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability	Important	5.5
CVE-2025-60706 Windows Hyper-V Information Disclosure Vulnerability	Important	5.5

Downloads (Microsoft Update Catalog)

x64 1607

1.6 GB

windows10.0-kb5068864-x64.msu Main update · KB5068864 SHA-1: 8107e0ba…765fa4

x86 1607

0.9 GB

windows10.0-kb5068864-x86.msu Main update · KB5068864 SHA-1: d021db44…812b6e

Updated components

812 files changed since the previous update for the same versions.

Top changed components	Files
Graphics and display	20
Remote Desktop	13
Security and sign-in	10
Search	8
File Explorer and shell	6
Hyper-V and virtualization	6
Kernel	5
Secure Boot	4
Settings	4
Bluetooth	2
Networking	2
Storage and file systems	2

Sources

Microsoft Support: KB5068864

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (2)

1. Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. support.microsoft.com
2. This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake