Skip to the content
The Update Bureau
Windows Server 2025 Windows Server 2025 Security update
Patch Tuesday Zero-day

KB5060842

KB5060842: Cumulative update for Windows Server, version 2025, June 2025. Exploited shortcut-file flaw patched; AD replication issue remains

In short

An actively exploited flaw in Internet Shortcut Files is patched. Active Directory replication can still fail on some schema master servers; KB5068861 addresses that issue.

Does it affect you? Applies to: Devices running Windows Server 2025, x64.

Build
26100.4349
Security
40 fixed · 4 critical · 1 exploited
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • What to do CVE-2025-33053, an Internet Shortcut Files vulnerability, is listed as actively exploited. KB5060842 is a security update.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 11.

What changes

Fixes 15 changes

File Explorer

3 items
  • Entering a URL in File Explorer's address bar takes you to that location.1
  • Files no longer overlap the address bar in F11 full-screen mode.2
  • The context menu opens faster when you right-click cloud files.3

GDI+

For: apps using GDI+

  • Images keep their correct colors after they are made smaller.4
    The issue occurred when an image was shrunk using GDI+.

Get Help app

For: Windows Server 2025 users

  • The Get Help app opens on Windows Server 2025.5

Hyper-V

For: Hyper-V users

  • Hyper-V Quick Create no longer shows an error about a missing file.6
    Fixes the error "Could not load file or assembly Newtonsoft.Json" in Hyper-V Quick Create.

Live captions

For: Live captions users

  • The live captions window appears after you disconnect an external monitor.7

Mouse

Verified in package
  • A custom mouse color stays selected after a User Account Control dialog appears.8
    The setting is under Settings > Accessibility > Mouse pointer and touch.

Open Secure Shell (OpenSSH)

For: SSH users

  • The OpenSSH service starts, so SSH connections can work again.9
    The sshd.exe service no longer needs to be started manually.

Remote Desktop

Verified in package 2 items

For: Remote Desktop users

  • Remote Desktop display rendering problems are fixed when connecting to certain PCs.10
  • Remote Desktop no longer stops responding.11

Scanners

For: scanner users

  • Apps can recognize a connected scanner again.12

Start menu

Verified in package

For: users with a mixed dark and light custom mode

  • The account menu uses the correct colors with a custom mix of dark and light modes.13
    The setting is under Settings > Personalization > Colors.

Task Manager

  • Task Manager identifies hard disk drives and solid-state drives correctly.14

Windows Hello

For: Windows Hello for Business users using Key Trust

  • Addresses a problem that can block sign-in with self-signed certificates.15
    Applies to Windows Hello for Business using the Key Trust model.

Improvements 2 changes

File Explorer

Verified in package 2 items
  • File Explorer loads folders with many media files faster.16
  • Thumbnails for cloud files appear more consistently in search results.17

New feature 1 change

Narrator

For: Narrator users

  • Narrator scan mode can jump to the start of an item with a comma and to its end with a period.18
    Turn on Narrator with Windows logo key + Ctrl + Enter, then turn on scan mode with Caps Lock + Spacebar.

Known issues

  1. Open Affects: Organizations and IT administrators

    Active Directory Replication

    This issue predates this update. Duplicate schema entries on some Windows Server 2025 schema master controllers can break enterprise-wide replication; KB5068861 addresses it.19

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Resolved Affects: Organizations and IT administrators Resolved by KB5062553

    DHCP Server service

    The DHCP Server service might stop responding after this update, affecting IP renewal for clients. KB5062553 resolves this issue.20

    Resolution Fixed in KB5062553

    Install KB5062553 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  3. Open Affects: Everyone

    Noto fonts

    CJK text might look blurry in Chromium browsers at 96 DPI (100% scaling).21

    How to apply the workaround Workaround

    Increase display scaling to improve text clarity. Users can also report Noto CJK font issues through Google's Noto Fonts GitHub repository.21

  4. Open Affects: Everyone

    Print to PDF might not work

    After KB5058411, Microsoft Print to PDF might disappear or fail to install with error 0x800f0922. Microsoft lists this issue here; KB5062553 addresses it.22

    How to apply the workaround Workaround

    Enable Microsoft Print to PDF in Windows Features, or use the PowerShell commands below.22

    Step-by-step instructions, command & download kit
    2 steps powershell.exe · Administrator Instructions (.txt)
    Show steps & kit Hide steps & kit
    Step-by-step procedure
    1. Press Windows + R, enter optional features, and enable Microsoft Print to PDF in the Windows Features dialog, or open PowerShell as administrator.
    2. Run the commands below in order. The final command might return error 0x800f0922.
    powershell.exe · Administrator 
    > Disable-WindowsOptionalFeature -Online -FeatureName Printing-PrintToPDFServices-Features> Enable-WindowsOptionalFeature -Online -FeatureName Printing-PrintToPDFServices

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-06-10
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5058411, KB5055523, KB5053598, KB5051987
+5 earlier KB5050009, KB5048667, KB5046617, KB5043080, KB5044284
Replaced by
KB5062553
VersionBuildChannel
2025 26100.4349 General availability

Security

40 vulnerabilities fixed
1 exploited 4 critical 36 important
VulnerabilitySeverityCVSS
CVE-2025-33053 Exploited
Internet Shortcut Files Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-29828
Windows Schannel Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-33070
Windows Netlogon Elevation of Privilege Vulnerability
 Critical 8.1
CVE-2025-33071
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-49735
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-33073
Windows SMB Client Elevation of Privilege Vulnerability
 Important 8.8

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 40 vulnerabilities →

Updated components

9,886 files changed since the previous update for the same versions.

Top changed componentsFiles
Settings144
Graphics and display65
Networking54
SQL Server Engine54
Bluetooth50
Printing47
Audio42
.NET networking37
File Explorer and shell31
Remote Desktop30
Hyper-V and virtualization29
Security and sign-in28

Verified in package: changed files confirm Mouse, Remote Desktop, Start menu, File Explorer.

Sources

Updated
Cited passages from Microsoft's official notes (22)
  1. 1. Fixed: When you enter a URL in the address bar, it might not go to the location. support.microsoft.com
  2. 2. Fixed: The address bar overlaps files when you use the F11 full-screen mode. support.microsoft.com
  3. 3. Fixed: The context menu opens slowly when you right-click cloud files. support.microsoft.com
  4. 4. Fixed: After you use GDI+ to shrink an image, the colors of the image might be wrong. support.microsoft.com
  5. 5. Fixed: It fails to open on Windows Server 2025. support.microsoft.com
  6. 6. Fixed: Hyper-V Quick Create shows error "Could not load file or assembly Newtonsoft.Json". support.microsoft.com
  7. 7. Fixed: If you disconnect an external monitor, the live captions window might not show. support.microsoft.com
  8. 8. When you choose a color, it reverts to white after the User Account Control (UAC) dialog appears. support.microsoft.com
  9. 9. Fixed: The service fails to start, which stops SSH connections. There is no detailed logging, and you must run the sshd.exe process manually. support.microsoft.com
  10. 10. Fixed: There are display rendering issues when you connect to certain PCs. support.microsoft.com
  11. 11. Fixed It stops responding. support.microsoft.com
  12. 12. Fixed: Apps might not recognize a scanner is available when it is connected. support.microsoft.com
  13. 13. The colors are wrong when you open the account manager flyout menu. This occurs when you use a mixed dark and light custom mode in Settings > Personalization > Colors. support.microsoft.com
  14. 14. Fixed: It might identify a Hard Disk Drive (HDD) as a Solid State Drive (SSD). support.microsoft.com
  15. 15. This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model. support.microsoft.com
  16. 16. Fixed: Improves performance when it loads folders that have a large number of media files. support.microsoft.com
  17. 17. Thumbnails for cloud files display more consistently in search results. support.microsoft.com
  18. 18. There are new functions for Narrator scan mode. You can use the comma ( , ) to jump to the start of an item, such as a large table, long list, or other content. support.microsoft.com
  19. 19. When this occurs, Active Directory replication fails with a schema mismatch error, such as error 8418: The replication operation failed because of a schema mismatch between the servers involved. support.microsoft.com
  20. 20. This issue was resolved by Windows updates released on and after July 8, 2025 (KB5062553). support.microsoft.com
  21. 21. Increasing the display scaling improves clarity by enhancing text rendering. support.microsoft.com
  22. 22. To address this, try enabling the Printing-PrintToPDFServices-Feature using one of the following options: support.microsoft.com
Checked automatically: 8 of 8 checks passed, 22 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake