KB5063878: Cumulative update for Windows Server, version 2025, August 2025. Critical graphics flaws patched; Active Directory issue remains open
Critical graphics and DirectX flaws get security fixes, alongside fixes for network and File Explorer problems. Active Directory replication issues remain listed, with KB5068861 named as addressing them.
Does it affect you? Applies to: Devices running Windows Server 2025. The Microsoft Update Catalog lists an x64 package.
Review notes Additional details from the official release notes (1) Read note
- What changes The update addresses intermittent internet connectivity after devices resume from sleep.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows 11.
What changes
Fixes 18 changes
Display
-
Switching display modes with Win + P works without pressing the shortcut twice.1
Fixes an issue where switching display topologies might require pressing Win + P twice.
Dynamic Host Configuration Protocol (DHCP Client)
-
Internet connections after sleep are more reliable, though they might still drop intermittently.2
Addresses intermittent internet connectivity after devices resume from sleep.
ExtFloodFill
-
A horizontal line no longer appears in the wrong place in some Win32 apps.3
Fixes an uncommon ExtFloodFill issue that could place a horizontal line incorrectly in Win32 applications.
File Systems
For: devices using a user profile redirected to a network VHD(X)
-
The system is less likely to stop unexpectedly during normal use with a network-based user profile.4
Addresses unexpected system stops and blue-screen errors when a user profile is redirected to a network VHD(X).
File Explorer
-
Text size settings work across File Explorer and its file dialogs.5
Increases support for text scaling set under Settings > Accessibility > Text size in File Explorer, File Open/Save dialogs, and copy dialogs.
-
Extracting zipped files is faster, especially when they contain many small files.6
Improves the performance of extracting zipped files, particularly when unzipping a large number of small files.
-
The address bar shows the path after File Explorer opens.7
Fixes an issue where the address bar might not show a path after opening File Explorer.
Graphics
For: devices with external graphics cards connected over Thunderbolt
-
Some external graphics cards connected through Thunderbolt can be detected again.8
Fixes cases where external graphics cards connected over Thunderbolt might not be discoverable.
Hyper-V Manager
For: Hyper-V administrators
-
Hyper-V Manager no longer incorrectly shows 0% CPU usage for virtual machines.9
Fixes Hyper-V Manager unexpectedly displaying 0% CPU usage for virtual machines.
Imaging
-
Some pages with JPEG images display their content again.10
Addresses an issue where some content pages containing JPEG images were not displaying.
Input (known issue)
For: users of the Microsoft Changjie IME for Traditional Chinese
-
The Microsoft Changjie input method for Traditional Chinese works more reliably after the earlier update.11
Fixes problems that could occur with the Microsoft Changjie IME after KB5062553, including word entry or selection failures, an unresponsive spacebar or blank key, incorrect output, or a broken candidate window.
Networking
-
Some network setups using Storage Spaces Direct and SMB Direct regain network setup and cluster management functions.12
Addresses issues affecting Storage Spaces Direct (S2D) and Remote Direct Memory Access (RDMA) with SMB Direct in certain network configurations.
Start
-
Touch gestures can show the list of apps pinned in Start again.13
Fixes the inability to use touch gestures to view the list of apps pinned in the Start menu.
-
The Sign out and More options buttons remain visible with larger text.14
Fixes the Sign out and More options buttons in the Start menu account manager not appearing with increased text size.
Taskbar
-
Underlines beneath taskbar app icons disappear after the apps close.15
Fixes underlines beneath app icons remaining visible after apps have closed.
-
Arrow keys move in the expected direction when navigating the taskbar in Arabic and Hebrew.16
Fixes arrow keys moving in the wrong direction after Windows key + T for Arabic and Hebrew display languages.
Windows Setup
For: IT administrators preparing Windows 11, version 24H2 installations
-
Push-button reset options work after preparing a Windows 11, version 24H2 installation with Sysprep.17
Fixes boot file configuration not being properly updated when Windows 11, version 24H2 is installed with Windows Setup and System Preparation (Sysprep) is run afterward.
Windows Update
For: IT administrators preparing Windows Server 2025 installations
-
Push-button reset options work after preparing a Windows Server 2025 installation with Sysprep.18
Fixes boot file configuration not being properly updated when Windows Server 2025 is installed with Windows Setup and System Preparation (Sysprep) is run afterward.
Improvements 2 changes
Desktop icons
For: users who pin packaged apps to the desktop
-
Packaged app icons on the desktop no longer have a colored background plate and are easier to see.19
The logic for apps pinned to the desktop has been updated so packaged apps no longer show an accent colored backplate.
Servicing stack
-
The component that installs Windows updates receives quality improvements.20
Includes the Windows Server 2025 servicing stack update KB5065381, build 26100.4933.
Known issues
-
Active Directory Replication
Microsoft lists Active Directory replication failures as an open issue for this update. The page says KB5068861 addresses it.21
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
-
Unexpected User Account Control (UAC) prompt when doing MSI repair operations
Microsoft lists unexpected UAC prompts during MSI repair operations as an open issue for this update. The page says KB5065426 addresses it.22
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-08-12
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5064489, KB5062553, KB5060842, KB5058411
- Replaced by
- KB5065426
| Version | Build | Channel |
|---|---|---|
| 2025 | 26100.4946 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Windows Graphics Component Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
GDI+ Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Windows NTLM Elevation of Privilege Vulnerability
|
Critical | 8.8 |
|
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
|
Critical | 8.1 |
|
DirectX Graphics Kernel Remote Code Execution Vulnerability
|
Critical | 7.8 |
|
Windows Kerberos Elevation of Privilege Vulnerability
|
Moderate | 7.2 |
The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 61 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
6,825 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Settings | 142 |
| Networking | 47 |
| Bluetooth | 45 |
| Graphics and display | 44 |
| Printing | 44 |
| .NET networking | 38 |
| Audio | 34 |
| Security and sign-in | 34 |
| File Explorer and shell | 31 |
| Hyper-V and virtualization | 30 |
| Remote Desktop | 28 |
| Storage and file systems | 26 |
Verified in package: changed files confirm File Explorer, Networking, Windows Update.
Sources
Cited passages from Microsoft's official notes (22)
-
1.
Fixed: You might need to press the Win + P keyboard shortcut twice to switch topologies.
support.microsoft.com -
2.
Fixed: This update addresses an issue affecting internet connectivity on devices after resuming from sleep mode. Users might experience intermittent internet connections.
support.microsoft.com -
3.
Fixed: There's an uncommon issue with ExtFloodFill where a horizontal line might appear in the incorrect location in Win32 applications.
support.microsoft.com -
4.
Fixed: This update addresses an issue when the operating system stops unexpectedly, and an error message appears on a blue screen during normal usage with a user profile redirected to a network VHD(X).
support.microsoft.com -
5.
Fixed: As part of our ongoing commitment to improving File Explorer accessibility, this release includes increased support for the text scaling (Settings > Accessibility > Text size) across File Explorer, File Open/Save dialogs and the copy dialogs.
support.microsoft.com -
6.
Fixed: Improved the performance of extracting zipped files, particularly in the case where you’re unzipping a large number of small files.
support.microsoft.com -
7.
Fixed: The address bar in File Explorer might unexpectedly not show a path after opening.
support.microsoft.com -
8.
Fixed: External graphics cards connected over Thunderbolt might unexpectedly not be discoverable in some cases.
support.microsoft.com -
9.
Fixed: Hyper-V Manager unexpectedly shows 0% CPU usage for virtual machines.
support.microsoft.com -
10.
Fixed: This update addresses an issue where some content pages with JPEG images were not displaying.
support.microsoft.com -
11.
Fixed: An issue when using the Microsoft Changjie IME (input method editor) for Traditional Chinese might cause problems such as not being able to form or select words, unresponsive spacebar or blank key, incorrect word output, or a broken candidate window display.
support.microsoft.com -
12.
Fixed: This update addresses an issue affecting Storage Spaces Direct (S2D) and Remote Direct Memory Access (RDMA) with SMB Direct in certain network configurations.
support.microsoft.com -
13.
Fixed: You can’t use touch gestures to view the list of apps pinned in the Start menu.
support.microsoft.com -
14.
Fixed: The Sign out and More options buttons in the Start menu account manager might not be visible with increased text size.
support.microsoft.com -
15.
Fixed: The underlines beneath the app icons in the taskbar may remain visible even after the apps have been closed.
support.microsoft.com -
16.
Fixed: If you use the arrow keys after pressing the Windows key + T, the arrows move in the wrong direction for Arabic and Hebrew display languages.
support.microsoft.com -
17.
Fixed: If you install Windows 11, version 24H2 with Windows Setup and run System Preparation (Sysprep) afterwards, the boot file configuration is not properly updated, resulting in push-button reset options not working.
support.microsoft.com -
18.
Fixed: If you install Windows Server 2025 with Windows Setup and run System Preparation (Sysprep) afterwards, the boot file configuration is not properly updated, resulting in push-button reset options not working.
support.microsoft.com -
19.
The logic for apps pinned to the desktop has been updated, so that packaged apps no longer show an accent colored backplate.
support.microsoft.com -
20.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
21.
This issue is addressed KB5068861.
support.microsoft.com -
22.
This issue is addressed in KB5065426.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 22 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake