May 19, 2025—KB5061768 (OS Builds 19044.5856 and 19045.5856) Out-of-band
This article lists the security issues and quality improvements included in this update.
Improvements
Windows 10, version 21H2
Applies to: Windows 10 Enterprise LTSC 2021 and Windows 10 IoT Enterprise LTSC 2021
Important: Use EKB KB5003791 to update to Windows 10, version 21H2 on supported editions.
This update includes the improvements that were a part of update KB5058379 (released May 13, 2025). Below is a summary of the key issues that this update addresses when you install this update. If there are new features, it lists them as well. The bold text within the brackets indicates the item or area of the change we are documenting.
[OS Security (Known Issue)] Fixed: A known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors. On these systems, installing the May 13, 2025, Windows security update ( KB5058379) might cause the Local Security Authority Subsystem Service (LSASS) process to terminate unexpectedly, triggering an Automatic Repair prompting for the BitLocker recovery key to continue.
Windows 10, version 22H2
Important: Use EKB KB5015684 to update to Windows 10, version 22H2.
Key changes in this update include:
This build includes all the improvements from the supported Windows 10, version 21H2 editions.
[OS Security (Known Issue)] Fixed: A known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors. On these systems, installing the May 13, 2025, Windows security update ( KB5058379) might cause the Local Security Authority Subsystem Service (LSASS) process to terminate unexpectedly, triggering an Automatic Repair prompting for the BitLocker recovery key to continue.
If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.
For more information about security vulnerabilities, please refer to the new Security Update Guide website and the May 2025 Security Updates.
Windows 10 servicing stack update (KB5058526) - 19044.5853 and 19045.5853
Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing updates.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. To learn more about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
May 19, 2025—KB5061768 (OS Builds 19044.5856 and 19045.5856) Out-of-band - Microsoft Support
Microsoft has released KB5061768, an out-of-band update that resolves security vulnerabilities and enhances quality in Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021, and Windows 10 22H2. The update encompasses enhancements derived from the May 13, 2025, update KB5058379 and addresses a recognized issue on devices equipped with Intel Trusted Execution Technology (TXT). The update also integrates the most recent servicing stack update (SSU) for the operating system with the latest cumulative update (LCU), enhancing the reliability of the update process and implementing quality improvements to the servicing stack responsible for installing Windows updates.
