Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Security update
Patch Tuesday

KB5068864

KB5068864: Cumulative update for Windows Server, version 2016, November 2025. Critical GDI+ flaw patched; unexpected UAC prompts addressed

In short

Fixes 24 security vulnerabilities, including critical GDI+ remote code execution flaw CVE-2025-60724, and addresses unexpected UAC prompts for some apps, including Autodesk AutoCAD.

Does it affect you? Applies to: Devices running Windows Server 2016, x64.

Build
14393.8594
Security
24 fixed · 1 critical
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fix 1 change

App compatibility (known issue)

  • Unexpected User Account Control prompts for some apps, including Autodesk AutoCAD, are addressed.1

Improvement 1 change

Internal Windows OS

  • Internal Windows OS functionality receives miscellaneous security improvements; no specific issues are documented.2

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-11-11
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5070882, KB5066836, KB5065427, KB5063871
+11 earlier KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5071543
VersionBuildChannel
2016 14393.8594 General availability

Security

24 vulnerabilities fixed
1 critical 23 important
VulnerabilitySeverityCVSS
CVE-2025-60724
Windows GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-64678
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-60715
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-62452
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-59505
Windows Smart Card Reader Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59512
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59514
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60703
Windows Remote Desktop Services Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60705
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60709
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60713
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60714
Windows OLE Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-60720
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60704
Windows Kerberos Elevation of Privilege Vulnerability
 Important 7.5
CVE-2025-59506
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-59507
Windows Speech Runtime Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-59508
Windows Speech Recognition Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60719
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62213
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62217
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60708
Storvsp.sys Driver Denial of Service Vulnerability
 Important 6.5
CVE-2025-59510
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
 Important 5.5
CVE-2025-59513
Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2025-60706
Windows Hyper-V Information Disclosure Vulnerability
 Important 5.5

Updated components

478 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display10
Remote Desktop7
Hyper-V and virtualization6
Security and sign-in5
Search4
File Explorer and shell3
Kernel3
Secure Boot2
Settings2
Audio1
Bluetooth1
Networking1

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. support.microsoft.com
  2. 2. This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake