Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Security update
Patch Tuesday

KB5063871

KB5063871: Cumulative update for Windows Server, version 2016, August 2025. GDI+ flaw patched; Changjie word selection restored

In short

The update fixes 48 vulnerabilities, including three critical flaws in GDI+, Microsoft Message Queuing, and Windows NTLM. It also restores word selection in the Microsoft Changjie Input Method.

Does it affect you? Applies to: Windows Server 2016 and Hyper-V Server 2016 devices with x64 architecture. The update installs build 14393.8330.

Build
14393.8330
Security
48 fixed · 3 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fix 1 change

Input and Composition

For: Users of the Microsoft Changjie Input Method

  • Users can select words again with the Microsoft Changjie Input Method.1
    Fixes the issue that prevented users from selecting words after a recent update.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5065427

    Unexpected User Account Control (UAC) prompt when doing MSI repair operations

    Standard users might see unexpected UAC prompts during MSI repair and related operations. Updates released on and after September 9, 2025, including KB5065427, resolve this issue.2

    Resolution Fixed in KB5065427

    Install KB5065427 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-08-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5062560, KB5061010, KB5058383, KB5058921
+7 earlier KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5065427
VersionBuildChannel
2016 14393.8330 General availability

Security

48 vulnerabilities fixed
3 critical 45 important
VulnerabilitySeverityCVSS
CVE-2025-53766
GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-53778
Windows NTLM Elevation of Privilege Vulnerability
 Critical 8.8
CVE-2025-50177
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1

The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 48 vulnerabilities →

Updated components

258 files changed since the previous update for the same versions.

Top changed componentsFiles
Bluetooth12
Graphics and display10
Secure Boot6
Hyper-V and virtualization5
Kernel5
Networking5
Remote Desktop5
Search4
File Explorer and shell3
Security and sign-in3
Settings2
Audio1

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. [Input and Composition] Fixed: A known issue with the Microsoft Changjie Input Method. Users were unable to select words after a recent update. support.microsoft.com
  2. 2. After installing the update, standard users might see a User Account Control (UAC) prompt in several scenarios. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake