KB5060533: Overview with user sentiment and feedback

Overview

KB5060533 is a cumulative security update released on June 10, 2025, for Windows 10 version 22H2 and Windows 10 Enterprise LTSC 2021. This update brings OS builds to 19044.5965 and 19045.5965. It contains miscellaneous security improvements to internal Windows OS functionality and includes all fixes from previous updates released in May 2025.

This update is part of Microsoft's regular Patch Tuesday cycle and addresses various security vulnerabilities. As Windows 10 approaches its end of support date (October 14, 2025), Microsoft continues to provide security updates while encouraging users to transition to Windows 11. The update includes the latest servicing stack update (KB5059504) which improves the reliability of the Windows update process.

The update applies to Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021, and Windows 10 version 22H2 (all editions). Microsoft has identified several known issues with this update that users should be aware of before installation.

General Purpose

KB5060533 primarily focuses on security improvements to the Windows 10 operating system. While Microsoft doesn't provide detailed documentation of specific security fixes in this update, it addresses miscellaneous security vulnerabilities in internal Windows OS functionality. The update is cumulative, meaning it includes all previous security fixes and quality improvements from earlier updates released in May 2025.

According to information from Anoop C Nair's blog, this update addresses two zero-day vulnerabilities: CVE-2025-33053 (Web Distributed Authoring and Versioning Remote Code Execution Vulnerability) and CVE-2025-33073 (Windows SMB Client Elevation of Privilege Vulnerability). In total, the update reportedly addresses 66 security flaws.

The update also includes several improvements to the user interface, such as bringing back the clock view that displays seconds in the calendar, enhancing the Rich Calendar feature by extending the upcoming events period to 30 days, and adding new description text for the Weather Button in the Rich Calendar feature. Additionally, it fixes issues with the Graphics Device Interface (GDI) related to GB18030-2022 and GB18030 character rendering, as well as addressing problems with Windows Account Sync Consent system in European Economic Area markets.

General Sentiment

The general sentiment toward KB5060533 appears mixed, with some concerns about installation issues. While there is limited discussion about this specific update in the available sources, one user on Microsoft Q&A reported significant problems after installing the update on two Fujitsu Esprimo PCs running Windows 10. According to the user, both computers stopped booting properly after the update, only showing the Fujitsu logo at startup without progressing further.

Despite these reported issues, the update itself appears to provide important security fixes and some welcome UI improvements. The reintroduction of seconds display in the clock view and enhancements to the Rich Calendar feature are likely to be appreciated by users who rely on these functions.

It's worth noting that as Windows 10 approaches its end of support date in October 2025, Microsoft is still actively patching security vulnerabilities, which demonstrates ongoing commitment to security even as the operating system nears end-of-life. However, the presence of known issues with the update suggests that users should proceed with caution and be prepared for potential complications, particularly on certain hardware configurations like Surface Hub v1 devices.

Known Issues

• Noto fonts: There are reports of blurry or unclear CJK (Chinese, Japanese, Korean) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. The issue is due to limited pixel density at 96 DPI, which can reduce the clarity and alignment of CJK characters. Surface Hub v1: After installing this update, Surface Hub v1 devices might fail to start with error: "Secure Boot Violation: Invalid signature detected. Check Secure Boot Policy in Setup." Microsoft recommends NOT installing this update on Surface Hub v1 devices and instead installing update KB5063159. Update delay with deferral policies: Some devices in environments where IT admins use quality update (QU) deferral policies might experience delays in receiving this update. Although released on June 10, 2025, the update metadata timestamp reflects June 20, 2025, causing devices with configured deferral periods to receive the update later than expected.* Boot issues on some hardware: At least one user has reported that after installing this update on Fujitsu Esprimo PCs, the systems fail to boot properly, getting stuck at the manufacturer logo screen.

Disclaimer: We take measures to ensure that AI-generated content is of the highest possible quality, but we cannot guarantee its accuracy and recommend that users do their own independent research. Generated on 2025-07-31 09:11 PM

Back to Knowledge Base Catalog