KB5061010: Cumulative update for Windows Server, version 2016, June 2025. Exploited Internet Shortcut flaw fixed; DHCP service could stall

Fixes 37 vulnerabilities, including an actively exploited flaw in Internet Shortcut files. It also introduced a DHCP Server issue that KB5062560 later resolved.

Does it affect you? Applies to: Devices running Windows Server 2016, x64.

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 2 changes

Cloud Infrastructure

For: Windows Server administrators

Remote Web Access connections no longer behave unpredictably.¹

Windows Hello

For: Windows Hello for Business users

The update addresses an issue that prevents some users from signing in with self-signed certificates using Windows Hello for Business.²
The issue concerns Windows Hello for Business with the Key Trust model.

Known issues

Resolved Affects: Organizations and IT administrators Resolved by KB5062560

DHCP Server service

The DHCP Server service might intermittently stop responding after this update, affecting IP renewal for clients. KB5062560 resolves the issue.³

Resolution Fixed in KB5062560

Install KB5062560 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2025-06-10
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5058383, KB5058921, KB5055521, KB5053594

+5 earlier
KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by: KB5062560

Version	Build	Channel
2016	14393.8148	General availability

Security

37 vulnerabilities fixed

1 exploited 3 critical 34 important

Vulnerability	Severity	CVSS
CVE-2025-33053 Exploited Internet Shortcut Files Remote Code Execution Vulnerability	Important	8.8
CVE-2025-33070 Windows Netlogon Elevation of Privilege Vulnerability	Critical	8.1
CVE-2025-33071 Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability	Critical	8.1
CVE-2025-49735 Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability	Critical	8.1
CVE-2025-33073 Windows SMB Client Elevation of Privilege Vulnerability	Important	8.8

The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 37 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 2016

1.6 GB

windows10.0-kb5061010-x64.msu Main update · KB5061010 SHA-1: eecf3345…ba3c7d

Updated components

317 files changed since the previous update for the same versions.

Top changed components	Files
Secure Boot	6
Hyper-V and virtualization	5
Kernel	5
Networking	5
Remote Desktop	4
Search	4
File Explorer and shell	3
Security and sign-in	3
Graphics and display	2
Settings	2
Storage and file systems	2

Sources

Microsoft Support: KB5061010

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (3)

1. [Cloud Infrastructure] Fixed: Remote Web Access (RWA) was causing remote connections to act unpredictably. support.microsoft.com
2. [Windows Hello] Fixed: This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model. support.microsoft.com
3. This issue was resolved by Windows updates released on and after July 8, 2025 (KB5062560). support.microsoft.com

Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake