Skip to the content
The Update Bureau
Windows Server 2025 Windows Server 2025 Security update
Patch Tuesday

KB5063878

KB5063878: Cumulative update for Windows Server, version 2025, August 2025. Critical graphics flaws patched; Active Directory issue remains open

In short

Critical graphics and DirectX flaws get security fixes, alongside fixes for network and File Explorer problems. Active Directory replication issues remain listed, with KB5068861 named as addressing them.

Does it affect you? Applies to: Devices running Windows Server 2025. The Microsoft Update Catalog lists an x64 package.

Build
26100.4946
Security
61 fixed · 5 critical
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • What changes The update addresses intermittent internet connectivity after devices resume from sleep.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 11.

What changes

Fixes 18 changes

Display

  • Switching display modes with Win + P works without pressing the shortcut twice.1
    Fixes an issue where switching display topologies might require pressing Win + P twice.

Dynamic Host Configuration Protocol (DHCP Client)

  • Internet connections after sleep are more reliable, though they might still drop intermittently.2
    Addresses intermittent internet connectivity after devices resume from sleep.

ExtFloodFill

  • A horizontal line no longer appears in the wrong place in some Win32 apps.3
    Fixes an uncommon ExtFloodFill issue that could place a horizontal line incorrectly in Win32 applications.

File Systems

For: devices using a user profile redirected to a network VHD(X)

  • The system is less likely to stop unexpectedly during normal use with a network-based user profile.4
    Addresses unexpected system stops and blue-screen errors when a user profile is redirected to a network VHD(X).

File Explorer

Verified in package 3 items
  • Text size settings work across File Explorer and its file dialogs.5
    Increases support for text scaling set under Settings > Accessibility > Text size in File Explorer, File Open/Save dialogs, and copy dialogs.
  • Extracting zipped files is faster, especially when they contain many small files.6
    Improves the performance of extracting zipped files, particularly when unzipping a large number of small files.
  • The address bar shows the path after File Explorer opens.7
    Fixes an issue where the address bar might not show a path after opening File Explorer.

Graphics

For: devices with external graphics cards connected over Thunderbolt

  • Some external graphics cards connected through Thunderbolt can be detected again.8
    Fixes cases where external graphics cards connected over Thunderbolt might not be discoverable.

Hyper-V Manager

For: Hyper-V administrators

  • Hyper-V Manager no longer incorrectly shows 0% CPU usage for virtual machines.9
    Fixes Hyper-V Manager unexpectedly displaying 0% CPU usage for virtual machines.

Imaging

  • Some pages with JPEG images display their content again.10
    Addresses an issue where some content pages containing JPEG images were not displaying.

Input (known issue)

For: users of the Microsoft Changjie IME for Traditional Chinese

  • The Microsoft Changjie input method for Traditional Chinese works more reliably after the earlier update.11
    Fixes problems that could occur with the Microsoft Changjie IME after KB5062553, including word entry or selection failures, an unresponsive spacebar or blank key, incorrect output, or a broken candidate window.

Networking

Verified in package
  • Some network setups using Storage Spaces Direct and SMB Direct regain network setup and cluster management functions.12
    Addresses issues affecting Storage Spaces Direct (S2D) and Remote Direct Memory Access (RDMA) with SMB Direct in certain network configurations.

Start

2 items
  • Touch gestures can show the list of apps pinned in Start again.13
    Fixes the inability to use touch gestures to view the list of apps pinned in the Start menu.
  • The Sign out and More options buttons remain visible with larger text.14
    Fixes the Sign out and More options buttons in the Start menu account manager not appearing with increased text size.

Taskbar

2 items
  • Underlines beneath taskbar app icons disappear after the apps close.15
    Fixes underlines beneath app icons remaining visible after apps have closed.
  • Arrow keys move in the expected direction when navigating the taskbar in Arabic and Hebrew.16
    Fixes arrow keys moving in the wrong direction after Windows key + T for Arabic and Hebrew display languages.

Windows Setup

For: IT administrators preparing Windows 11, version 24H2 installations

  • Push-button reset options work after preparing a Windows 11, version 24H2 installation with Sysprep.17
    Fixes boot file configuration not being properly updated when Windows 11, version 24H2 is installed with Windows Setup and System Preparation (Sysprep) is run afterward.

Windows Update

Verified in package

For: IT administrators preparing Windows Server 2025 installations

  • Push-button reset options work after preparing a Windows Server 2025 installation with Sysprep.18
    Fixes boot file configuration not being properly updated when Windows Server 2025 is installed with Windows Setup and System Preparation (Sysprep) is run afterward.

Improvements 2 changes

Desktop icons

For: users who pin packaged apps to the desktop

  • Packaged app icons on the desktop no longer have a colored background plate and are easier to see.19
    The logic for apps pinned to the desktop has been updated so packaged apps no longer show an accent colored backplate.

Servicing stack

  • The component that installs Windows updates receives quality improvements.20
    Includes the Windows Server 2025 servicing stack update KB5065381, build 26100.4933.

Known issues

  1. Open Affects: Organizations and IT administrators

    Active Directory Replication

    Microsoft lists Active Directory replication failures as an open issue for this update. The page says KB5068861 addresses it.21

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Open Affects: Organizations and IT administrators

    Unexpected User Account Control (UAC) prompt when doing MSI repair operations

    Microsoft lists unexpected UAC prompts during MSI repair operations as an open issue for this update. The page says KB5065426 addresses it.22

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-08-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5064489, KB5062553, KB5060842, KB5058411
+8 earlier KB5055523, KB5053598, KB5051987, KB5050009, KB5048667, KB5046617, KB5043080, KB5044284
Replaced by
KB5065426
VersionBuildChannel
2025 26100.4946 General availability

Security

61 vulnerabilities fixed
5 critical 55 important 1 moderate
VulnerabilitySeverityCVSS
Windows Graphics Component Remote Code Execution Vulnerability
Critical 9.8
GDI+ Remote Code Execution Vulnerability
Critical 9.8
Windows NTLM Elevation of Privilege Vulnerability
Critical 8.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Critical 8.1
DirectX Graphics Kernel Remote Code Execution Vulnerability
Critical 7.8
Windows Kerberos Elevation of Privilege Vulnerability
Moderate 7.2

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 61 vulnerabilities →

Updated components

6,825 files changed since the previous update for the same versions.

Top changed componentsFiles
Settings142
Networking47
Bluetooth45
Graphics and display44
Printing44
.NET networking38
Audio34
Security and sign-in34
File Explorer and shell31
Hyper-V and virtualization30
Remote Desktop28
Storage and file systems26

Verified in package: changed files confirm File Explorer, Networking, Windows Update.

Sources

Updated
Cited passages from Microsoft's official notes (22)
  1. 1. Fixed: You might need to press the Win + P keyboard shortcut twice to switch topologies. support.microsoft.com
  2. 2. Fixed: This update addresses an issue affecting internet connectivity on devices after resuming from sleep mode. Users might experience intermittent internet connections. support.microsoft.com
  3. 3. Fixed: There's an uncommon issue with ExtFloodFill where a horizontal line might appear in the incorrect location in Win32 applications. support.microsoft.com
  4. 4. Fixed: This update addresses an issue when the operating system stops unexpectedly, and an error message appears on a blue screen during normal usage with a user profile redirected to a network VHD(X). support.microsoft.com
  5. 5. Fixed: As part of our ongoing commitment to improving File Explorer accessibility, this release includes increased support for the text scaling (Settings > Accessibility > Text size) across File Explorer, File Open/Save dialogs and the copy dialogs. support.microsoft.com
  6. 6. Fixed: Improved the performance of extracting zipped files, particularly in the case where you’re unzipping a large number of small files. support.microsoft.com
  7. 7. Fixed: The address bar in File Explorer might unexpectedly not show a path after opening. support.microsoft.com
  8. 8. Fixed: External graphics cards connected over Thunderbolt might unexpectedly not be discoverable in some cases. support.microsoft.com
  9. 9. Fixed: Hyper-V Manager unexpectedly shows 0% CPU usage for virtual machines. support.microsoft.com
  10. 10. Fixed: This update addresses an issue where some content pages with JPEG images were not displaying. support.microsoft.com
  11. 11. Fixed: An issue when using the Microsoft Changjie IME (input method editor) for Traditional Chinese might cause problems such as not being able to form or select words, unresponsive spacebar or blank key, incorrect word output, or a broken candidate window display. support.microsoft.com
  12. 12. Fixed: This update addresses an issue affecting Storage Spaces Direct (S2D) and Remote Direct Memory Access (RDMA) with SMB Direct in certain network configurations. support.microsoft.com
  13. 13. Fixed: You can’t use touch gestures to view the list of apps pinned in the Start menu. support.microsoft.com
  14. 14. Fixed: The Sign out and More options buttons in the Start menu account manager might not be visible with increased text size. support.microsoft.com
  15. 15. Fixed: The underlines beneath the app icons in the taskbar may remain visible even after the apps have been closed. support.microsoft.com
  16. 16. Fixed: If you use the arrow keys after pressing the Windows key + T, the arrows move in the wrong direction for Arabic and Hebrew display languages. support.microsoft.com
  17. 17. Fixed: If you install Windows 11, version 24H2 with Windows Setup and run System Preparation (Sysprep) afterwards, the boot file configuration is not properly updated, resulting in push-button reset options not working. support.microsoft.com
  18. 18. Fixed: If you install Windows Server 2025 with Windows Setup and run System Preparation (Sysprep) afterwards, the boot file configuration is not properly updated, resulting in push-button reset options not working. support.microsoft.com
  19. 19. The logic for apps pinned to the desktop has been updated, so that packaged apps no longer show an accent colored backplate. support.microsoft.com
  20. 20. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  21. 21. This issue is addressed KB5068861. support.microsoft.com
  22. 22. This issue is addressed in KB5065426. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 22 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake