Out-of-band — All products

Audit policy status display addressed; Citrix update failures have a workaround

The out-of-band update addresses an Active Directory audit-policy display issue and improves the servicing stack. Devices with Citrix Session Recording Agent 2411 might still fail to install the January 2025 security update.

Enabled logon auditing display issue addressed

The update addresses a mismatch where local audit policy could show enabled logon auditing as “No auditing.” It also includes servicing stack improvements and documents a Citrix installation issue.

Audit policy status display issue addressed

Addresses a display issue where enabled logon and logoff auditing can appear disabled in local policy settings on Windows Server 2016.

Database links to Azure SQL Managed Instance added

The feature pack adds database replication from SQL Server to Azure SQL Managed Instance. It also improves connections and certificate handling.

Fixes startup failures on servers with multiple NUMA nodes

Fixes a startup failure affecting some servers with two or more NUMA nodes and improves the servicing stack.

Transport and DLP rules work again after the earlier update

Exchange Transport Rules and Data Loss Prevention rules work again after the earlier November update. The rerelease also addresses a publicly disclosed Exchange Server vulnerability.

Out-of-band update requires a restart

This out-of-band cumulative update for Windows Server 2025 requires a restart. The available information does not describe specific fixes or features.

Out-of-band update requires a restart

This out-of-band cumulative update is for Windows Server 2025 x64 devices and requires a restart.

Energy-saving controls arrive; Roblox remains unavailable on Arm

Adds energy-saving and interface features and fixes several setup, accessibility, and app issues. Roblox still cannot be downloaded from the Microsoft Store on Arm devices, but players can get it directly from Roblox.com.

Widgets change, Android sharing arrives, and Explorer issues are fixed

Adds Android sharing and improves Narrator, battery life, and File Explorer. Some Widgets Board widgets are removed or temporarily affected, and Roblox players on Arm devices need a workaround.

Roblox Store downloads remain unavailable on Arm; six emoji added

Adds six emoji and new sharing, account, and backup features. Players on Arm devices still cannot get Roblox through the Microsoft Store, but can download it directly from Roblox.com.

Roblox Store downloads fail on Arm; DWM and IME issues fixed

Fixes several Windows issues, including problems with WDAC, DWM.exe, and the IME candidate list. Players on Arm devices cannot download or play Roblox through the Microsoft Store; they can get it directly from Roblox.com.

RSA signing errors addressed; profile-picture changes may fail

Addresses an error affecting some RSA signing calls. Changing a user account profile picture might still fail on some devices.

Bluetooth volume and Arm game issues addressed; Copilot pinned

Addresses Bluetooth volume and Arm64 gaming problems, and pins Copilot to the taskbar as an app. Roblox downloads through the Microsoft Store remain unavailable on Arm devices, with a direct-download workaround.

English (US) language-pack errors addressed; update expired

Addresses installation failures tied to the English (United States) language pack, but it has been unavailable since March 31, 2026.

English language pack issue affecting May 14 update installation

Addresses an English (United States) language-pack issue that might make KB5037765 fail to install (0x800f0982 without the pack; 0x80004005 on some devices with it). It is no longer available as of March 31, 2026.

Stops LSASS memory leaks that could restart domain controllers

Addresses an LSASS memory leak that could cause domain controllers to stop responding and restart unexpectedly while handling Kerberos requests.

LSASS memory leak on domain controllers addressed

The update addresses an LSASS memory leak that could make domain controllers stop responding and restart unexpectedly.

LSASS memory leak could trigger unexpected domain controller restarts

Addresses an LSASS memory leak on domain controllers. If the leak becomes substantial, LSASS might stop responding and the controllers might restart unexpectedly.

LSASS memory leak on domain controllers addressed

Addresses an LSASS memory leak on domain controllers that could cause the service to stop responding and trigger unexpected restarts.

LSASS memory leak on domain controllers addressed

Addresses an LSASS memory leak that can cause domain controllers to stop responding and restart unexpectedly after KB5035855.