Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday

KB5071543

KB5071543: Cumulative update for Windows 10, version 1607, December 2025. PowerShell web requests warn before running scripts

In short

PowerShell 5.1 now warns and asks for confirmation before Invoke-WebRequest can run web content, adding a safeguard against script execution risks. The update also addresses 15 Important vulnerabilities.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607.

Build
14393.8688
Security
15 fixed
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvement 1 change

PowerShell 5.1

For: PowerShell 5.1 users

  • Invoke-WebRequest warns about script execution risk and asks for confirmation before continuing.1
    The prompt lets you continue or cancel the request.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5074974

    Message Queuing (MSMQ)

    After installing this update, some users might have MSMQ queues become inactive, IIS sites fail, or applications fail to write to queues. This issue was resolved by KB5074974 or a later update.2

    Resolution Fixed in KB5074974

    Install KB5074974 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-12-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5068864, KB5066836, KB5065427, KB5063871
+11 earlier KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5074974
VersionBuildChannel
1607 14393.8688 General availability

Security

15 vulnerabilities fixed
15 important
VulnerabilitySeverityCVSS
CVE-2025-62549
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59517
Windows Storage VSP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62455
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62458
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62466
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62470
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62472
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62474
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62571
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-64661
Windows Shell Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62565
Windows File Explorer Elevation of Privilege Vulnerability
 Important 7.3
CVE-2025-62573
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62473
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-62567
Windows Hyper-V Denial of Service Vulnerability
 Important 5.3

Updated components

363 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display12
Search10
Secure Boot9
File Explorer and shell8
Security and sign-in8
Hyper-V and virtualization6
Remote Desktop6
Settings6
Kernel4
Storage and file systems4

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. The Invoke-WebRequest command now includes a confirmation prompt with a security warning of a script execution risk. You can choose to continue or cancel the request. support.microsoft.com
  2. 2. This issue was resolved by the Windows out-of-band update released on and after December 18, 2025 (such as KB5074974). support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake