Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday

KB5065428

KB5065428: Cumulative update for Windows Server, version 2019, September 2025. SMB compatibility auditing added; MSI repair prompts reduced

In short

The update adds SMB compatibility auditing and Certificate Revocation List partitioning, and reduces unexpected UAC prompts during some MSI repairs. It also addresses 52 vulnerabilities, including 7 Critical vulnerabilities.

Does it affect you? Applies to: All editions of Windows Server 2019, on x64 devices.

Build
17763.7792
Security
52 fixed · 7 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

New features 2 changes

Active Directory

  • Windows Certificate Authorities can use Certificate Revocation List partitioning.1
    Adds support for Certificate Revocation List (CRL) partitioning in Windows Certificate Authorities.

File Server

  • IT administrators can check whether SMB clients might be incompatible with SMB Server signing and EPA before deploying the related hardening measures.2
    Enables auditing SMB client compatibility for SMB Server signing and SMB Server EPA.

Fix 1 change

App compatibility (known issue)

For: Non-admin users and IT administrators

  • Unexpected UAC prompts during some MSI repairs are reduced. IT administrators can allowlist specific apps to disable prompts for those apps.3
    Addresses unexpected User Account Control (UAC) prompts for non-admin users when MSI installers perform certain custom actions. The fix reduces the scope for requiring prompts; it does not state that all such prompts are eliminated.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-09-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5066187, KB5063877, KB5062557, KB5060531
+6 earlier KB5061978, KB5058392, KB5059091, KB5058922, KB5050008, KB5037425
Replaced by
KB5066586
VersionBuildChannel
2019 17763.7792 General availability

Security

52 vulnerabilities fixed
7 critical 44 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2025-54918
Windows NTLM Elevation of Privilege Vulnerability
 Critical 8.8
CVE-2025-53800
Windows Graphics Component Elevation of Privilege Vulnerability
 Critical 7.8
CVE-2025-55224
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 7.8
CVE-2025-55236
Graphics Kernel Remote Code Execution Vulnerability
 Critical 7.3
CVE-2025-48807
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 6.7
CVE-2025-55226
Graphics Kernel Remote Code Execution Vulnerability
 Critical 6.7
CVE-2025-53799
Windows Imaging Component Information Disclosure Vulnerability
 Critical 5.5
CVE-2025-55234
Windows SMB Elevation of Privilege Vulnerability
 Important 8.8

The table lists the 8 exploited, publicly disclosed or critical vulnerabilities. See all 52 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 2019
706.7 MB
windows10.0-kb5065428-x64.msu Main update · KB5065428 SHA-1: 3c83399a…ceafb1

Updated components

348 files changed since the previous update for the same versions.

Top changed componentsFiles
Security and sign-in9
Networking8
Graphics and display7
Secure Boot6
Kernel5
Remote Desktop5
Search4
File Explorer and shell3
Hyper-V and virtualization3
Printing2
Storage and file systems2
Settings1

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. Adds support for Certificate Revocation List (CRL) partitioning in Windows Certificate Authorities. support.microsoft.com
  2. 2. This update enables auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. support.microsoft.com
  3. 3. This fix reduces the scope for requiring UAC prompts for MSI repairs and enables IT admins to disable UAC prompts for specific apps by adding them to an allowlist. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake