Skip to the content
The Update Bureau
Windows Server 2025 Windows Server 2025 Security update
Patch Tuesday Zero-day

KB5072033

KB5072033: Cumulative update for Windows Server, version 2025, December 2025. Exploited Cloud Files flaw patched; RemoteApp may fail

In short

Attackers are exploiting a Cloud Files driver flaw, while RemoteApp connections might fail on Azure Virtual Desktop. The update also adds privacy prompts and other features.

Does it affect you? Applies to: This update is for x64 devices running Windows Server 2025. It installs build 26100.7462.

Build
26100.7462
Security
34 fixed · 1 exploited
Restart
Required
Review notes Additional details from the official release notes (2) Read notes
  • Known issues RemoteApp connections can fail after KB5072033 or later, but Microsoft says the issue is addressed by KB5073379.
  • What changes PowerShell’s Invoke-WebRequest now shows a confirmation prompt warning about script-execution risk; users can continue or cancel.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 11.

What changes

Fixes 12 changes

Taskbar

  • Taskbar previews no longer stop working if you accidentally drag a preview thumbnail.1

Active Directory (known issue)

For: Administrators upgrading to Windows Server 2025

  • An in-place upgrade to Windows Server 2025 no longer risks damaging the directory database in this situation.2
    Addresses an issue using ntdsutil.exe with 8KB database pages during an in-place upgrade; it could damage NTDS.dit and prevent the domain controller from mounting it.

Cryptographic Provider (known issue)

  • An Event Viewer error about a cryptographic provider failing to start is addressed.3
    Addresses Error ID 57: “The 'Microsoft Pluton Cryptographic Provider' provider was not loaded because initialization failed.”

dbgcore.dll

  • Some apps, including File Explorer, are less likely to crash because of an underlying issue.4
    The issue in dbgcore.dll could cause apps such as explorer.exe to crash.

Device management

  • Some device recovery features and management tools work properly again.5
    Addresses a temporary file-sharing conflict that stopped some system recovery features and disrupted key functions on some devices.

File system

For: Devices using ReFS and backup apps with large files

  • Using backup apps with large files is less likely to exhaust system memory.6
    Addresses a Resilient File System (ReFS) issue that could exhaust system memory when backup apps used large files.

Input

4 items
  • The first character is no longer missing when you type Chinese with an IME after copying text.7
    The issue occurred after copying with CTRL + C and then typing Chinese with an Input Method Editor (IME).
  • Sticky Notes, Notepad, and some other apps are less likely to crash because of an underlying issue.8
    The issue was related to textinputframework.dll.
  • Some extended Chinese characters no longer appear as empty boxes.9
    Addresses an issue with the Chinese (Simplified) Input Method Editor (IME).
  • The touch keyboard can accept typing again after switching to a previous version of an IME.10
    Addresses an issue with Microsoft Changjie, Microsoft Bopomofo, and Microsoft Japanese Input Method Editors (IMEs).

Kerberos

For: Devices accessing cloud file shares

  • Accessing a cloud file share is less likely to cause an underlying crash.11
    Addresses an underlying crash in Kerberos when accessing a cloud file share.

Live captions

Verified in package
  • Changing the opacity of live captions now affects how they look.12
    The setting is under Settings > Accessibility > Captions > Caption Style.

Improvements 6 changes

Task Manager

  • Task Manager now shows CPU workload consistently across its pages.13
    The Details tab has an optional CPU Utility column that shows the earlier CPU usage value from the Processes page.

Audio

Verified in package
  • The update addresses an issue that could stop audio playback in some cases.14
    Addresses an underlying issue where the audio service stops responding.

Login

For: Some users

  • Some people are less likely to see a blank white screen or a “just a moment” message for several minutes while signing in.15
    Addresses some underlying cases that could cause these sign-in delays.

PowerShell 5.1

For: PowerShell 5.1 users

  • PowerShell now warns you about script risks before it processes web content; you can continue or cancel.16
    Invoke-WebRequest now includes a confirmation prompt with a security warning about script execution risk. See CVE-2025-54100 and KB5074596.

System Components

  • The AppX Deployment Service now starts automatically to improve reliability in some isolated situations.17
    The AppX Deployment Service (Appxsvc) startup type changed to Automatic.

Servicing stack

For: Windows Server 2025 devices

  • The component that installs Windows updates receives quality improvements.18
    The combined update includes servicing stack update KB5071142, build 26100.7295.

New features 5 changes

File Explorer

  • Dividers now separate the top-level icons in File Explorer's right-click menu.19

General

  • When an app asks to use your camera, microphone, location, or another device feature, a redesigned prompt appears in the center of a dimmed screen.20

Search on the Taskbar

Verified in package
  • A new grid view helps you find images more quickly and accurately in taskbar search.21

Settings

Verified in package
  • Windows activation and expiration alerts now appear as system notifications when action is needed.22
    Messaging under Settings > System > Activation is also improved.

Taskbar

Verified in package
  • The notification center can show a larger clock with seconds above the date and calendar.23
    Turn on Show time in the Notification Center under Settings > Time & language > Date & time.

Removal 1 change

PowerShell 2.0

For: Windows 11 version 24H2 users

  • Windows 11, version 24H2, no longer includes PowerShell 2.0; update older scripts or tools that rely on it.24
    The page says PowerShell 2.0 was removed from Windows 11, version 24H2, starting in August 2025. PowerShell 5.1 and PowerShell 7.x remain available and supported.

Known issues

  1. Open Affects: Organizations and IT administrators

    Windows Server Update Services (WSUS) does not display error details

    WSUS does not show synchronization error details after KB5070881 or later updates.25

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Open Affects: Organizations and IT administrators

    RemoteApp sessions might fail to start on Azure Virtual Desktop

    RemoteApp connections in Azure Virtual Desktop might fail after this update; full desktop sessions are not affected.26

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-12-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5072359, KB5068861, KB5070881, KB5070773
+16 earlier KB5066835, KB5068221, KB5065426, KB5063878, KB5064489, KB5062553, KB5060842, KB5058411, KB5055523, KB5053598, KB5051987, KB5050009, KB5048667, KB5046617, KB5043080, KB5044284
Replaced by
KB5073379
VersionBuildChannel
2025 26100.7462 General availability

Security

34 vulnerabilities fixed
1 exploited 34 important
VulnerabilitySeverityCVSS
CVE-2025-62221 Exploited
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
 Important 7.8

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 34 vulnerabilities →

Updated components

5,579 files changed since the previous update for the same versions.

Top changed componentsFiles
Settings76
Graphics and display33
Networking31
Audio30
Printing29
Bluetooth27
Hyper-V and virtualization26
Remote Desktop24
Security and sign-in20
.NET networking19
File Explorer and shell17
Windows Update16

Verified in package: changed files confirm Live captions, Audio, Search on the Taskbar, Settings, Taskbar.

Sources

Updated
Cited passages from Microsoft's official notes (26)
  1. 1. Fixed: If you accidentally click and drag your mouse across the taskbar preview thumbnail, the preview might stop working. support.microsoft.com
  2. 2. This update addresses an issue that occurs when you use ntdsutil.exe with 8KB database pages during an in-place upgrade to Windows Server 2025. support.microsoft.com
  3. 3. This update addresses an issue where you might see an error in Windows Event Viewer with Error ID 57. support.microsoft.com
  4. 4. An underlying issue with dbgcore.dll could result in certain apps, including explorer.exe, crashing. support.microsoft.com
  5. 5. This update addresses an issue that prevented some system recovery features from working properly due to a temporary file sharing conflict. support.microsoft.com
  6. 6. An issue in Resilient File System (ReFS) where using backup apps with large files could sometimes exhaust system memory. support.microsoft.com
  7. 7. Attempting to type Chinese with an IME after copying something with CTRL + C can result in the first character not displaying. support.microsoft.com
  8. 8. An underlying issue related to textinputframework.dll could result in certain apps like Sticky Notes and Notepad crashing. support.microsoft.com
  9. 9. This update addresses an issue with the Chinese (Simplified) Input Method Editor (IME) where some extended characters appear as empty boxes. support.microsoft.com
  10. 10. This update addresses an issue that prevents typing on the touch keyboard when using the Microsoft Changjie, Microsoft Bopomofo, or Microsoft Japanese Input Method Editors (IMEs). support.microsoft.com
  11. 11. There might be an underlying crash in Kerberos when attempting to access a cloud file share. support.microsoft.com
  12. 12. Changing the opacity of live captions in Settings > Accessibility > Captions > Caption Style, has no effect. support.microsoft.com
  13. 13. [Task Manager] New! Task Manager now uses standard metrics to show CPU workload consistently across all pages, aligning with industry standards and third-party tools. support.microsoft.com
  14. 14. [Audio] Improved: Addressed an underlying audio service stops responding which could impact the ability to play audio in certain cases. support.microsoft.com
  15. 15. Addressed some underlying cases which could lead to you seeing a blank white screen, or a screen saying, "just a moment", for a few minutes when logging into your PC. support.microsoft.com
  16. 16. Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. support.microsoft.com
  17. 17. The AppX Deployment Service (Appxsvc) has moved to Automatic startup type to improve reliability in some isolated scenarios. support.microsoft.com
  18. 18. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  19. 19. [File Explorer] New! Dividers now separate top-level icons in the File Explorer context menu. support.microsoft.com
  20. 20. When an app requests access to location, camera, microphone, or other device capabilities, Windows shows a redesigned system dialog box. support.microsoft.com
  21. 21. [Search on the Taskbar] New! When you use Search from the Windows taskbar, a new grid view will help you more quickly and accurately identify the desired image within your search. support.microsoft.com
  22. 22. [Settings] New! Windows activation and expiration prompts match the Windows 11 design and appear as system notifications when action is required. support.microsoft.com
  23. 23. The larger clock with seconds is now back in the notification center, displayed above the date and calendar. support.microsoft.com
  24. 24. Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. support.microsoft.com
  25. 25. After installing KB5070881 or later updates, Windows Server Update Services (WSUS) does not display synchronization error details within its error reporting. support.microsoft.com
  26. 26. After installing the December 2025 Windows security update (KB5072033) or later updates, you might experience RemoteApp connection failures in Azure Virtual Desktop (AVD) environments. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 26 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake