Skip to the content
The Update Bureau

Windows Server 2025

Windows Server 2025

Every published release for Windows Server 2025, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5136489 Nov 13, 2026
Build
26100.33828
Released
Nov 1, 2024
All editions
updates until Nov 14, 2034
Known issues
20 open

Build history

  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11

    KB5063878

    Critical graphics flaws patched; Active Directory issue remains open

    Critical graphics and DirectX flaws get security fixes, alongside fixes for network and File Explorer problems. Active Directory replication issues remain listed, with KB5068861 named as addressing them.

    Check the newer update, KB5065426
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance.
    Known issues: 1 open Organizations and IT administrators
    • Active Directory Replication

    Key changes 61 CVEs · 20 changes

    • Improved Desktop icons: Packaged app icons on the desktop no longer have a colored background plate and are easier to see.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Display: Switching display modes with Win + P works without pressing the shortcut twice.

    Read update Source: Microsoft

    Build
    26100.4946
    Security
    61 fixed · 5 critical
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band

    KB5064489

    Azure VM startup issue addressed; Active Directory replication risk remains

    Some Azure virtual machines with Virtualization-Based Security enabled could not start; this update addresses that issue. Active Directory replication can still fail on affected domain controllers.

    Check the newer update, KB5063878
    Secure Boot certificates began expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid boot problems.
    Known issues: 1 open Organizations and IT administrators
    • Active Directory Replication

    Key changes 3 changes

    • Improved Includes the security fixes and improvements from the July 8, 2025 security update.
    • Improved Servicing stack: The servicing stack update improves the component that installs Windows updates.
    • Fix Azure Virtual Machines: Some Azure virtual machines could not start when Virtualization-Based Security was enabled. This update addresses the issue.

    Read update Source: Microsoft

    Build
    26100.4656
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11

    KB5062553

    Fixes 102 vulnerabilities (5 critical)

    Critical flaws in NEGOEX and Hyper-V are among the security fixes. The update also fixes issues with authentication, graphics, and other server features.

    Check the newer update, KB5064489
    Secure Boot certificates have started expiring in June 2026. Microsoft recommends reviewing its guidance and updating certificates in advance.
    Known issues: 2 open Organizations and IT administrators
    • Active Directory Replication
    • Azure VM with Trusted Launch disabled

    Key changes 102 CVEs · 23 changes

    • Improved Task manager: Task Manager uses consistent CPU workload measures on its Processes, Performance, and Users pages.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Application installation: Installing apps with many files takes less time in some cases.

    Read update Source: Microsoft

    Build
    26100.4652
    Security
    102 fixed · 5 critical
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5060842

    Exploited shortcut-file flaw patched; AD replication issue remains

    An actively exploited flaw in Internet Shortcut Files is patched. Active Directory replication can still fail on some schema master servers; KB5068861 addresses that issue.

    Check the newer update, KB5062553
    Known issues: 3 open
    • Active Directory Replication
    • Noto fonts
    • Print to PDF might not work

    Key changes 40 CVEs · 18 changes

    • New Narrator: Narrator scan mode can jump to the start of an item with a comma and to its end with a period.
    • Improved File Explorer: File Explorer loads folders with many media files faster.
    • Improved File Explorer: Thumbnails for cloud files appear more consistently in search results.

    Read update Source: Microsoft

    Build
    26100.4349
    Security
    40 fixed · 4 critical · 1 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band

    KB5061977

    Hyper-V guest hangs fixed; print and replication issues remain

    Confidential virtual machines on Hyper-V might stop responding or restart unexpectedly; this update fixes that problem. Print to PDF and Active Directory replication issues are also listed.

    Known issues: 2 open
    • Active Directory Replication
    • Print to PDF might not work

    Key changes 3 changes

    • Improved Catalog: The x64 download name on the Catalog tab was corrected.
    • Improved Servicing stack: The update includes quality improvements to the component that installs Windows updates.
    • Fix Hyper-V Platform: Confidential virtual machines on Hyper-V might stop responding or restart unexpectedly. This can affect service availability and requir...

    Read update Source: Microsoft

    Build
    26100.4066
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5058411

    Remote Desktop flaws patched; File Explorer search fixed

    Remote Desktop code-execution flaws and several exploited security bugs are addressed. The update also fixes File Explorer search and other problems.

    Check the newer update, KB5060842
    Known issues: 2 open
    • Active Directory Replication
    • Print to PDF might not work

    Key changes 43 CVEs · 23 changes

    • New Fonts: A new Chinese font includes the Biangbiang noodles character. Some apps might not show these added characters yet.
    • New Settings: You can change time zones in Settings without being an admin.
    • Improved Chinese Pinyin Input Method Editor (IME): Bing no longer gives automatic search suggestions for search engines such as Baidu. You can still request suggestions manually.

    Read update Source: Microsoft

    Build
    26100.4061
    Security
    43 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band

    KB5059087

    Hyper-V container startup failures fixed

    Windows containers in Hyper-V isolation can start again when their update level differs from the host utility virtual machine. The update also improves the servicing stack.

    Known issues: 4 open
    • Active Directory Replication
    • Citrix
    • and 2 more

    Key changes 2 changes

    • Improved Servicing stack: The servicing stack gets quality improvements to help devices receive and install updates.
    • Fix Windows containers: Windows containers in Hyper-V isolation can start when their update level differs from the host utility virtual machine.

    Read update Source: Microsoft

    Build
    26100.3781
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5055523

    Exploited CLFS flaw patched; Remote Desktop freezes addressed

    Attackers are exploiting a Windows Common Log File System Driver flaw. The update also addresses Remote Desktop session freezes.

    Check the newer update, KB5058411
    Known issues: 4 open
    • Active Directory Replication
    • Citrix
    • and 2 more

    Key changes 81 CVEs · 20 changes

    • New IFilters: Windows Search runs IFilters with fewer permissions to limit the harm if a process is compromised.
    • New Input Method Editor (IME): The IME toolbar hides in full-screen apps while you type Chinese or Japanese characters.
    • New Narrator: Narrator scan mode adds shortcuts to skip past links and jump to lists.

    Read update Source: Microsoft

    Build
    26100.3775
    Security
    81 fixed · 6 critical · 1 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5053598

    Exploited NTFS, Fast FAT and MMC flaws patched

    Attackers are exploiting flaws in NTFS, Fast FAT, and Microsoft Management Console. The KB page also lists Remote Desktop freezes and Azure Arc setup hangs, later resolved by KB5055523.

    Check the newer update, KB5055523
    Known issues: 3 open
    • Citrix
    • Remote desktop
    • Azure Arc Setup wizard app

    Key changes 35 CVEs · 11 changes

    • New Narrator: Narrator can copy its last spoken content to the clipboard with a keyboard shortcut.
    • New Narrator: Narrator can now read email messages in the new Outlook.
    • New Virtual hard disk (VHD/VHDx): Settings adds a button to detach a virtual hard disk.

    Read update Source: Microsoft

    Build
    26100.3476
    Security
    35 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5051987

    Exploited storage and networking flaws patched; Remote Desktop issues noted

    Fixes 38 vulnerabilities, including two critical flaws and two vulnerabilities already exploited. It also fixes USB audio and camera problems, while known issues affect Citrix update installation, Remote Desktop, and Azure Arc Setup.

    Check the newer update, KB5053598
    Known issues: 3 open
    • Citrix
    • Remote desktop
    • Azure Arc Setup wizard app

    Key changes 38 CVEs · 4 changes

    • Improved Microsoft RPC Netlogon protocol: The update page now clarifies that Microsoft RPC Netlogon protocol was enabled by default on Windows Server 2025 starting in May 2025.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Digital/Analog converter (DAC): USB audio devices might stop working and stop playback less often, especially when using a USB 1.0-based DAC audio driver.

    Read update Source: Microsoft

    Build
    26100.3194
    Security
    38 fixed · 2 critical · 2 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5050009

    Exploited Hyper-V flaws patched; USB audio issues reported

    Fixes 126 vulnerabilities, including three exploited Hyper-V elevation-of-privilege flaws. It also expands the vulnerable-driver blocklist; USB audio might stop working after installation.

    Check the newer update, KB5051987

    Key changes 126 CVEs · 2 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file: More at-risk drivers are added to the blocklist to help protect against attacks that use vulnerable drivers.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Exploited CVE-2025-21333: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    26100.2894
    Security
    126 fixed · 9 critical · 3 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5048667

    Actively exploited Common Log File System flaw addressed

    The update addresses an actively exploited flaw in the Common Log File System Driver. It covers 57 vulnerabilities, including 15 critical ones.

    Check the newer update, KB5050009

    Key changes 57 CVEs · 2 changes

    • Improved Internal OS functionality: Parts of the operating system get security improvements.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    26100.2605
    Security
    57 fixed · 15 critical · 1 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5046617

    Exploited Task Scheduler flaw patched; Dev Drive access restored

    The update fixes 32 vulnerabilities, including two critical ones and two that attackers are exploiting. It also restores Dev Drive access from WSL and fixes several other installation and connectivity problems.

    Check the newer update, KB5048667

    Key changes 32 CVEs · 5 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
    • Fix Task Manager: Task Manager shows the correct group count on the Processes tab when you turn on “Group by type.”
    • Fix Windows Subsystem for Linux (WSL): You can access your Dev Drive from WSL again.

    Read update Source: Microsoft

    Build
    26100.2314
    Security
    32 fixed · 2 critical · 2 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band

    KB5044284

    Out-of-band update requires a restart

    This out-of-band cumulative update for Windows Server 2025 requires a restart. The available information does not describe specific fixes or features.

    Check the newer update, KB5046617

    Key security notes

    • Other This is an out-of-band cumulative update; no specific fixes or features are listed in the available information.

    Read update Source: Microsoft

    Restart
    Required