KB5055523: Cumulative update for Windows Server, version 2025, April 2025. Exploited CLFS flaw patched; Remote Desktop freezes addressed

• When the taskbar is set to hide automatically, the search box appears as a search box instead of an icon.¹
• Using the keyboard on the Users page no longer makes Task Manager stop responding.²

• The StartComponentCleanup task no longer stops at 71% with error 6842.³

For: Apps that read JPG rotation information

• Apps can use an API to find rotation information in JPG files again.⁴
  The update fixes an issue that prevented an API from finding rotation information.

For: Windows Server 2025 devices with SQL Server Machine Learning Services

• SQL Server Launchpad can start when SQL Server Machine Learning Services is installed.⁵
  Addresses a problem on Windows Server 2025 after KB5051987 and later updates, where SQL Server Launchpad might not start if SQL Server Machine Learning Services is installed.

• The Get-WindowsCapability command no longer sometimes stops responding and requires a restart.⁶
  Fixes the Get-WindowsCapability command sometimes stopping responding.

For: Remote Desktop users

• Remote Desktop sessions that freeze shortly after connection are addressed.⁷
  Mouse and keyboard input could become unresponsive shortly after connecting, requiring users to disconnect and reconnect.

• WSL starts and works again.⁸
  Fixes an issue that caused WSL to stop working and not start.

• Installing an update no longer produces error 0x800f0905 in the affected cases.⁹

For: Devices performing Windows copy operations

• A memory leak that could happen during Windows copy operations is addressed.¹⁰

• The update addresses a machine password rotation problem that could affect sign-in. It also disables a related security feature until a permanent fix is available.¹¹
  The issue affected the Identity Update Manager certificate/PKNIT path, particularly when Kerberos and Credential Guard were used. Machine Accounts in Credential Guard is disabled until a permanent fix is available.

For: Devices set to the Aysen region in Chile

• Time settings for the Aysen region in Chile reflect the government’s 2025 daylight saving time change.¹²

• A new inetpub folder appears on the system drive. Do not delete it, even if IIS is not enabled.¹³
  The folder is created after this update or a later Windows update as part of changes that increase protection. No action is required.

• New protections address a certificate authority issue. Domain controllers might log Event ID 45.¹⁴
  Protections apply when a certificate authority is in the Windows root store but not the NTAuth store. The change is enabled by default.

For: People using Windows Hello facial recognition

• Windows Hello facial sign-in now needs a color camera to see a visible face.¹⁵
  This security change applies after installing this update or a later Windows update.

• Windows Search runs IFilters with fewer permissions to limit the harm if a process is compromised.¹⁶
  Windows Search runs IFilters in Less Privileged App Containers (LPAC), which minimize permissions by default.

For: People using Chinese or Japanese input

• The IME toolbar hides in full-screen apps while you type Chinese or Japanese characters.¹⁷
  This applies only when the IME toolbar is active.

For: Narrator users

• Narrator scan mode adds shortcuts to skip past links and jump to lists.¹⁸
  Press N to skip past links and L to jump to lists. Turn on Narrator with Windows logo key + Ctrl + Enter, then use Caps lock + Spacebar to activate scan mode.

• The Disconnect and Logoff dialogs support dark mode and larger text.¹⁹
  The Disconnect and Logoff dialogs now support dark mode and text scaling.
• The Performance section now shows the type of each disk.²⁰