Windows 10: Microsoft Windows Security Updates for May 2025 are now available

Microsoft released security updates and non-security updates for all supported versions of its Windows operating system as well as other company products, including Microsoft Office, today as part of the May 2025 Patch Tuesday.

Our detailed overview of the May 2025 security updates for Windows assists home users and system administrators alike. It lists the updates for each supported version of Windows, highlights known issues, new features and changes, download links, and also links to all major support pages and resources.

Microsoft Windows Security Updates: May 2025


You may download the following Excel spreadsheet to get a list of released updates. Click on the following link to download the archive to the local device: Windows May 2025 Security Updates

Executive Summary

• Microsoft released a total of 78 security updates for various Microsoft products and 5 security update for non-Microsoft issues (e.g. Chromium).
• Windows clients with issues:
  • Windows 10 version 1809, 21H2, 22H2
• Windows Server clients with issues:
  • Windows Server 2008
  • Windows Server 2019
  • Windows Server 2022

Product overview


Each supported version of Windows and their critical vulnerabilities are listed below.

• Windows 10 version 22H2: 34 vulnerabilities, 3 critical, 31 important
• Windows 11 version 22H2 and 23H2: 35 vulnerabilities, 3 critical, 32 important
• Windows 11 version 24H2: 36 vulnerabilities, 3 critical, 33 important

Windows Server products

• Windows Server 2008 R2 (extended support only): 27 vulnerabilities: 3 critical, 36 important
• Windows Server 2016: 35 vulnerabilities: 3 critical, 32 important
• Windows Server 2019: 38 vulnerabilities: 3 critical, 35 important
• Windows Server 2022: 38 vulnerabilities: 3 critical, 35 important
• Windows Server 2025: 38 vulnerabilities: 3 critical, 35 important

Windows Security Updates


Windows 10 version 22H2

• Support Page: KB5058379

Updates and improvements:

• Security updates
• New vulnerable drivers were adde to the Windows Kernel Vulnerable Driver Blocklist that have been used in Bring Your Own Vulnerable Driver attacks.
• Fixed an Event Viewer issue.

Windows 11 version 22H2 / 23H2

• Support Page: KB5058405

Updates and improvements:

• Security updates.
• Lock screen widgets support continues to roll out.
• Phone Link extension of the Start menu continues to roll out.
• Narrator speech recaps continues to roll out.
• Pivot based curated views continue to roll out for Microsoft 365 users in File Explorer.
• Fixed a display issue that could cause the sign out and more buttons in Start to be not available on systems with increased font sizes.

Windows 11 version 24H2

• Support page: KB5058411

Updates and improvements:

• Security updates.
• Recall (preview) continues to roll out on Copilot+PCs. Recall takes snapshots and you may interact with AI about past activities.
• Click to do (preview) is also rolling out to more Copilot+ PCs. This feature enables users to peform certain actions with the help of AI directly on the screen. For instance, removing the background from an image in Paint.
• Text actions continues to roll out on Copilot+ PCs. These allow users to run certain AI tasks on texts, e.g., to get text summarized.
• AI-powered Windows Search continues to roll out. Windows Search supports natural language prompts with the update. This extends to photos stored in the cloud.
• Phone Link extension of the Start menu continues to roll out.
• Narrator speech recaps continues to roll out.
• Pivot based curated views continue to roll out for Microsoft 365 users in File Explorer.
• New Settings page, Settings > Apps > Actions on Copilot+ PCs., to manage apps that Copilot recommends.
• Windows Update and the Start menu power button will now display the time (estimat) it will take to install a pending Windows update.
• Fixed a Blue Screen error.

Windows Security updates

2025-05 Cumulative Security Update for Internet Explorer (KB5058380)

2025-05 Cumulative Update for Windows 10 Version 1507 (KB5058387)

2025-05 Cumulative Update for Windows 10 Version 1607 (KB5058383)

2025-05 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5058385)

2025-05 Cumulative Update for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5058379)

Server

2025-05 Cumulative Update for Windows Server 2019 and Windows 10 Version 1809 (KB5058392)

2025-05 Security Monthly Quality Rollup for Windows Server 2012 R2 (KB5058403)

2025-05 Security Only Quality Update for Windows Server 2008 (KB5058429)

2025-05 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5058430)

2025-05 Security Monthly Quality Rollup for Windows Server 2008 (KB5058449)

2025-05 Security Monthly Quality Rollup for Windows Server 2012 (KB5058451)

2025-05 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5058454)

2025-05 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5058500)

Non-Security updates

2025-05 Dynamic Update for Windows 10 Version 21H2 and Windows 10 Version 22H2 (KB5059607)

Known Issues

Windows 10 version 22H2

• (FIXED) Windows Event Viewer may display an error related to SgrmBroker.exe on devices with the January 14, 2025 update or later installed. It is logged as Event 7023 and the text should say "The System Guard Runtime Monitor Broker service terminated with the following error:".
  • Workaround: Microsoft says that this error has no impact on performance or functionality. The service has not been used "for a very long time" according to Microsoft.
• (OLD) Devices with Citrix components installed may not be able to install the January 2025 security updates.
  • Citrix has released a workaround that needs to be applied before installing the January 2025 security updates. Link here

Windows 11 version 22H2 and 23H2

• (FIXED) Devices with Citrix components installed may not be able to install the January 2025 security updates.
  • Citrix has released a workaround that needs to be applied before installing the January 2025 security updates. Link here

Windows 11 version 24H2

• (FIXED) Windows users who use Windows Hello to sign-in may experience the following. When they reset the PC and decided to keep the files and pick local install, they may be unable to login using Windows Hello facial recognition or their PIN.
  • Workaround: to log on using a PIN, users need to select Set my PIN on the logon screen to re-enroll. Face logon can only be enabled after the initial sign-in. Check Settings > Accounts > Sign-in options > Facial recognition (Windows Hello) > Set up for that.

Security advisories and updates

• ADV 990001 -- Latest Servicing Stack Updates

Microsoft Office Updates

You find Office update information here.
How to download and install the May 2025 security updates


Security updates are installed automatically on non-managed Windows devices by default. While it is possible to change the default configuration, the majority of these systems should receive the updates automatically.

We do recommend that you create a backup of the opera ting system before the update process is started. You may use the free Paragon Backup & Recovery Free software for that or any other suitable backup software.

Once done, complete the following three steps to get started:

1. Open the Start menu, type Windows Update, and select the result.
2. Activate the "check for updates" button. This runs a manual check for updates.
3. Activate the "download & install all" button, if the update is not downloaded automatically.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 10 version 22H2

• 
  KB5058379 -- 2025-05 Cumulative Update for Windows 10 Version 22H2
  

Windows 11 version 22H2

• 
  KB5058405 -- 2025-05 Cumulative Update for Windows 11 version 22H2
  

Windows 11 version 23H2

• KB5058405 -- 2025-05 Cumulative Update for Windows 11 version 23H2

Windows 11 version 24H2

• 
  KB5058411 -- 2025-05 Cumulative Update for Windows 11 version 24H2
  

Additional resources

• May 2025 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 11 24H2 Update History
• Windows 11 23H2 Update History
• Windows 10 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates for May 2025 are now available appeared first on gHacks Technology News.

read more...

 

Microsoft Security Bulletin for September 2007

Microsoft released yesterday the September Security Bulletin for Windows operating system, as part of its monthly security cycle. This bulletin summary lists one critical and three important updates. For more information, see Microsoft Security Bulletin Summary for September 2007.

Source: Microsoft

 

Microsoft Security Updates for May 2007

Microsoft on Tuesday released patches for 19 security flaws as part of its monthly patch cycle. The fixes cover security holes in Windows, Office and Internet Explorer. Two of the updates are for Microsoft’s newest operating system Vista. Microsoft recommends all users to upgrade through either Automatic Updates within Windows or the Windows Update website. You can read Microsoft’s security bulletin detailing all the patches here.

Source: Microsoft

 

Microsoft Botches Up UEFI Support for Windows 7 on ASUS Motherboards



Microsoft suggests updating to Windows 10 to patch Windows 7

• 
  
  
• Chris Merriman
• 
  @ChrisTheDJ
• 05 May 2016

• Tweet
• Facebook
• Google plus
• Send to

9 Comments

MICROSOFT HAS confirmed a potentially lappy-borking problem that it won't be fixing, because Windows 7.

Woody Leonhard, the respected Windows columnist, points to a problem involving Asus motherboards, which also appear rebadged in a variety of other manufacturers' machines, and the activation of UEFI Secure Boot for Windows 7 in a patch KB3133977.

Short version: install update, welcome to Borksville, population you.

Both Asus and Microsoft acknowledged the problem. Microsoft entitled the article "BitLocker can't encrypt drives because of service crashes in svchost.exe process in Windows 7 or Windows Server 2008 R2", but we prefer to just call it "Trevor for brevity."

The firm's advice was that it's an optional update, leave well alone, you'll be fine, or alternatively turn secure boot off.

Then Microsoft did a silly, silly thing.

It moved the update from 'optional' to 'recommended' and anyone who reads this site regularly will know what happens when Microsoft does this. That's right boys and girls - it makes it automatically install, unless you've specifically told your machine not to.

So now, if you have one of the affected motherboard and you keep your security updates automatic like wot Microsoft recommends, then your machine will stop working properly.

We should add it's not permanently bricked, but it will take some mucking about in the BIOS to fix and that's a pain even for an experienced computer user.

Microsoft has, by offering a workaround, suggested heavily that it won't be fixing the problem, though we have asked the question, so expect a response in about a fortnight.

But the real kicker is this piece of advice: "Note The Secure Boot feature is supported in Windows 10. To learn more about the security advantages of this feature and about the upgrade path from Windows 7 to Windows 10, go to the following Windows website"

Holy toledo, this company really knows how to rub people up the wrong way.

After all - if the advice is to manually avoid the update or move to a version of the operating system where there's virtually no control over updates, then Microsoft is dealing in massive contradictions.

A more cynical site would suggest that it's yet another example of Microsoft running Windows 7 into the ground and adding built in obsolescence to encourage quicker updates. But we're not that sort of site.

Its the patching to force secure boot that is the problem win 7 does not support secure boot
hence it borks systems and well microsofts answer is Cactus >your Asshole > insert

from the inquirer