The Update BureauKB5071544: Cumulative update for Windows 10, version 1809, December 2025. Exploited Cloud Files flaw fixed; PowerShell adds a script warning
In short
Fixes 26 vulnerabilities, including an exploited Cloud Files driver flaw and a publicly disclosed PowerShell vulnerability. It also adds a web-script warning to PowerShell 5.1 and retires the taskbar People icon.
Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809, on x86 or x64.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Improvements 2 changes
PowerShell 5.1
For: PowerShell 5.1 users
-
Invoke-WebRequestnow asks for confirmation and warns that processing web content can run scripts. You can continue or cancel.1The confirmation prompt addresses the script execution risk associated with web content; see CVE-2025-54100.
Servicing stack
-
The component that installs Windows updates receives quality improvements.2
The cumulative update includes servicing stack update KB5070248, build 17763.8020.
Removal 1 change
People app
For: Windows 10 version 1809 users
-
The People icon on the taskbar no longer responds because this feature is being deprecated in Windows 10, version 1809.3
The feature is also being deprecated in Windows Server 2019.
Known issues
-
Message Queuing (MSMQ)
After installing this update, Message Queuing (MSMQ) might have problems, including inactive queues, failed message sends, and IIS errors. The issue primarily affects enterprise or managed IT environments and is resolved by KB5074975.4
Resolution Fixed in KB5074975Install KB5074975 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-12-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5068791, KB5066586, KB5065428, KB5066187
- Replaced by
- KB5074975
| Version | Build | Channel |
|---|---|---|
| 1809 | 17763.8146 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2025-62221
Exploited
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 8.8 |
|
PowerShell Remote Code Execution Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Storage VSP Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Storage VSP Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Win32k Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Client-Side Caching Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Installer Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Shell Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Storage VSP Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows File Explorer Elevation of Privilege Vulnerability
|
Important | 7.5 |
|
Windows File Explorer Elevation of Privilege Vulnerability
|
Important | 7.3 |
|
DirectX Graphics Kernel Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
|
Important | 6.5 |
|
Windows Hyper-V Denial of Service Vulnerability
|
Important | 5.3 |
Downloads (Microsoft Update Catalog)
x64
1809
712.5 MB
x86
1809
382.3 MB
Updated components
282 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 12 |
| File Explorer and shell | 10 |
| Kernel | 6 |
| Secure Boot | 6 |
| Security and sign-in | 6 |
| Storage and file systems | 4 |
| Hyper-V and virtualization | 3 |
| Search | 2 |
| Settings | 2 |
Sources
Updated
Cited passages from Microsoft's official notes (4)
-
1.
[PowerShell 5.1] The Invoke-WebRequest command now includes a confirmation prompt with a security warning of a script execution risk.
support.microsoft.com -
2.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
3.
[People app] After installing this update, the People icon on the taskbar will no longer respond. This feature is being deprecated in Windows Server 2019 and Windows 10, version 1809.
support.microsoft.com -
4.
This issue was resolved by the Windows out-of-band update released on and after December 18, 2025 (such as KB5074975).
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake