Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Security update
Patch Tuesday

KB5071543

KB5071543: Cumulative update for Windows Server, version 2016, December 2025. PowerShell warns before web content can run scripts

In short

PowerShell 5.1 now warns before Invoke-WebRequest content can run scripts, addressing a publicly disclosed remote code execution risk. The update also addresses 15 Important vulnerabilities; an MSMQ issue was later resolved by KB5074974.

Does it affect you? Applies to: Windows Server 2016 x64 devices.

Build
14393.8688
Security
15 fixed
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Improvement 1 change

PowerShell 5.1

For: PowerShell 5.1 users

  • PowerShell 5.1 now warns about script execution risk before a web request, letting you continue or cancel.1
    Invoke-WebRequest now displays a confirmation prompt with a security warning.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5074974

    Message Queuing (MSMQ)

    In enterprise or managed environments, including clustered MSMQ under load, queues might become inactive, IIS sites might show resource errors, and applications might fail to write messages. KB5074974 resolved this issue.2

    Resolution Fixed in KB5074974

    Install KB5074974 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-12-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5068864, KB5070882, KB5066836, KB5065427
+12 earlier KB5063871, KB5062560, KB5061010, KB5058383, KB5058921, KB5055521, KB5053594, KB5052006, KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5074974
VersionBuildChannel
2016 14393.8688 General availability

Security

15 vulnerabilities fixed
15 important
VulnerabilitySeverityCVSS
CVE-2025-62549
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59517
Windows Storage VSP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62455
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62458
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62466
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62470
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62472
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62474
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62571
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-64661
Windows Shell Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62565
Windows File Explorer Elevation of Privilege Vulnerability
 Important 7.3
CVE-2025-62573
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62473
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-62567
Windows Hyper-V Denial of Service Vulnerability
 Important 5.3

Updated components

215 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display6
Hyper-V and virtualization6
Search5
Secure Boot5
File Explorer and shell4
Security and sign-in4
Remote Desktop3
Settings3
Kernel2
Storage and file systems2

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. The Invoke-WebRequest command now includes a confirmation prompt with a security warning of a script execution risk. You can choose to continue or cancel the request. support.microsoft.com
  2. 2. This issue was resolved by the Windows out-of-band update released on and after December 18, 2025 (such as KB5074974). support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake