KB5052000

Cumulative update for Windows Server, version 2019, February 2025

Windows Storage and WinSock elevation-of-privilege flaws are under active attack. The update also fixes USB camera, audio, and Microsoft Edge issues.

Does it affect you? Applies to: Devices running Windows Server 2019.

Review notes Additional details from the official release notes (2) Read notes

In detail Before this update, Microsoft Edge IE mode pop-up windows could open in the background instead of the foreground; this update fixes that behavior.
What changes Before this update, Microsoft Edge IE mode pop-up windows could open in the background instead of the foreground; this update fixes that behavior.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 4 changes

USB cameras

Some USB cameras were not recognized as on after the January 2025 security update. This issue is fixed.¹

USB audio device drivers

For: devices using certain external audio management devices

Some external audio devices showed a “This device cannot start” error when connected. This issue is fixed.²
The error is code 10.

Microsoft Edge IE mode

For: devices using Microsoft Edge IE mode

Pop-up windows open in the foreground instead of the background.³

Digital/Analog converter (DAC)

Some USB audio devices might stop working and stop playback. This issue is fixed.⁴
The issue is more likely with USB 1.0-based DAC audio drivers.

Improvements 2 changes

Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)

Adds drivers at risk from Bring Your Own Vulnerable Driver attacks to the blocklist.⁵
The blocklist is DriverSiPolicy.p7b.

Servicing stack

The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.⁶
The servicing stack update is KB5050110, build 17763.6763.

New feature 1 change

GB18030-2022

Adds support for the GB18030-2022 amendment.⁷

Known issues

Open Affects: Organizations and IT administrators

Citrix

Some devices with Citrix Session Recording Agent version 2411 might fail to install the January 2025 security update and undo the changes. Home users are not expected to be affected.⁸

How to apply the workaround Workaround

Update Citrix Session Recording Agent to version 2503 or newer.⁸
Open Affects: Organizations and IT administrators

Open Secure Shell service

Microsoft lists an OpenSSH service issue reported after the October 2024 security update. On some enterprise, IoT, and education devices, the service might fail to start and block SSH connections.⁹

How to apply the workaround Workaround

Install KB5053596, which addresses this issue.⁹

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2025-02-11
Type: Cumulative update

Version	Build	Channel
2019	17763.6893	General availability

Security

34 vulnerabilities fixed

2 exploited 1 critical 33 important

Vulnerability	Severity	CVSS
CVE-2025-21418 Exploited Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Important	7.8
CVE-2025-21391 Exploited Windows Storage Elevation of Privilege Vulnerability	Important	7.1
CVE-2025-21376 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	Critical	8.1
CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability	Important	6.5

The table lists the 4 exploited, publicly disclosed or critical vulnerabilities. See all 34 vulnerabilities →

Sources

Microsoft Support: KB5052000

Updated Nov 7, 2026

Cited passages from Microsoft's official notes (9)

1. [USB cameras] Fixed: Your device does not recognize the camera is on. This issue occurs after you install the January 2025 security update. support.microsoft.com
2. [USB audio device drivers] Fixed: The code 10 error message, “This device cannot start” appears. This occurs when you connect to certain external audio management devices. support.microsoft.com
3. [Microsoft Edge IE mode] Fixed: Pop-up windows open in the background instead of in the foreground. support.microsoft.com
4. [Digital/Analog converter (DAC) (known issue)] Fixed: You might experience issues with USB audio devices. This is more likely when you use a DAC audio driver based on USB 1.0. support.microsoft.com
5. [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. support.microsoft.com
6. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack support.microsoft.com
7. [GB18030-2022] This update adds support for this amendment. support.microsoft.com
8. The issue has been resolved in Citrix Session Recording Agent version 2503, released on April 28, 2025, and newer versions. support.microsoft.com
9. Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections. support.microsoft.com

Checked automatically: 7 of 8 checks passed, 9 quoted passages · compared with Microsoft's page on Nov 14, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: not passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake