Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday

KB5062557

KB5062557: Cumulative update for Windows Server, version 2019, July 2025. SPNEGO remote-code flaw patched; DHCP renewal failures fixed

In short

Patches critical vulnerabilities, including a remote-code execution flaw in SPNEGO, and fixes DHCP service interruptions that affected client IP renewal.

Does it affect you? Applies to: Devices running Windows Server 2019 on x64 systems.

Build
17763.7558
Security
94 fixed · 5 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 2 changes

Network Security and Containers

For: Devices that handle GB18030-2022 text

  • Character rendering works correctly for GB18030-2022 compliance.1
    Fixes incorrect rendering in the CharNextW function, which has been replaced with an ICU-based solution.

DHCP Server

  • The DHCP Server service no longer intermittently stops responding and disrupting clients' IP renewal.2

Improvements 2 changes

Microsoft RPC Netlogon protocol

For: Organizations with Active Directory domain controllers; some Samba users

  • Some Netlogon requests have tighter access checks, which improves security.3
    Active Directory domain controllers no longer allow anonymous clients to invoke some RPC requests through the Netlogon RPC server. Certain file and print service software, including Samba, could be affected.

Servicing stack

  • The component that installs Windows updates receives quality improvements.4
    The cumulative update includes servicing stack update KB5062800, build 17763.7557.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5063877

    Microsoft Changjie Input Method Editor

    After installing this update, the Microsoft Changjie IME for Traditional Chinese might not let you form or select words, respond to the spacebar, or display candidate words correctly. Windows updates released on and after August 12, 2025, including KB5063877, resolve this issue.5

    Resolution Fixed in KB5063877

    Install KB5063877 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Organizations and IT administrators Resolved by KB5063877

    Cluster Service

    After installing this update, Cluster Service might repeatedly stop and restart on Windows Server 2019 configurations using BitLocker with Cluster Shared Volumes. Nodes might fail to rejoin or enter quarantine, virtual machines might restart multiple times, and event logs might show Event ID 7031. Updates released on and after August 12, 2025, including KB5063877, resolve this issue.6

    Resolution Fixed in KB5063877

    Install KB5063877 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-07-08
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5060531, KB5061978, KB5058392, KB5059091
+3 earlier KB5058922, KB5050008, KB5037425
Replaced by
KB5063877
VersionBuildChannel
2019 17763.7558 General availability

Security

94 vulnerabilities fixed
5 critical 87 important 1 moderate 1 low
VulnerabilitySeverityCVSS
CVE-2025-47981
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-48822
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
 Critical 8.6
CVE-2025-47980
Windows Imaging Component Information Disclosure Vulnerability
 Critical 6.2
CVE-2024-36350
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
 Critical 5.6
CVE-2024-36357
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
 Critical 5.6
CVE-2024-21302
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 94 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 2019
705.0 MB
windows10.0-kb5062557-x64.msu Main update · KB5062557 SHA-1: cf62475a…d9c7ab

Updated components

419 files changed since the previous update for the same versions.

Top changed componentsFiles
Secure Boot10
Hyper-V and virtualization8
Graphics and display7
Security and sign-in6
Kernel4
Search4
Storage and file systems4
Windows Update4
Networking3
Remote Desktop3
Audio2
File Explorer and shell2

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. Fixed: An issue in the CharNextW function which caused incorrect character rendering for GB18030-2022 compliance. support.microsoft.com
  2. 2. Fixed: An issue in which the DHCP Server service might intermittently stop responding and affects IP renewal for clients. support.microsoft.com
  3. 3. After this update is installed, Active Directory domain controllers will no longer allow anonymous clients to invoke some RPC requests through the Netlogon RPC server. support.microsoft.com
  4. 4. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  5. 5. This issue is resolved by Windows updates released on and after August 12, 2025 (KB5063877). support.microsoft.com
  6. 6. This issue is resolved by Windows Server 2019 updates released on and after August 12, 2025 (KB5063877). support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake