out-of-band update

Winsage
July 16, 2025
Microsoft has announced that Secure Boot certificates for Windows devices will begin to expire in June 2026, which may affect device functionality and security. An out-of-band update (KB5064489) was released on July 13, 2025, to address immediate security concerns and prepare systems for the certificate transition. This update includes essential quality improvements and fixes issues related to the startup of certain Azure Virtual Machines when Virtualization-Based Security (VBS) is enabled. The update is cumulative and incorporates previous security fixes. Users are advised to install the update promptly and review guidance for updating their certificates before the expiration deadline.
Winsage
July 15, 2025
Microsoft released an emergency update to address a bug affecting Azure virtual machines (VMs) that prevented them from launching when the Trusted Launch setting was disabled while Virtualization-Based Security (VBS) was enabled. This issue emerged during the July Patch Tuesday security updates and impacted Windows Server 2025 and Windows 11 24H2, specifically affecting VMs using version 8.0 with VBS provided by the host. The root cause was identified as a secure kernel initialization issue, which has been fixed with the KB5064489 out-of-band update. Administrators are advised to check if their VMs are created as "Standard" and if VBS is enabled. If affected, they should install the out-of-band update instead of the July 8th KB5062553 Patch Tuesday update and consider using the Trusted Launch security feature. Microsoft has also updated Windows Server 2025 VM images to include the latest cumulative update addressing this bug.
Winsage
June 18, 2025
Microsoft has acknowledged that the updates released on June 10 during Patch Tuesday may disrupt the Dynamic Host Configuration Protocol (DHCP) service on Windows Server versions 2025, 2022, 2019, and 2016. The DHCP Server service might intermittently stop responding after installing this security update, causing issues for network administrators as clients may be unable to renew their IP addresses. There is currently no viable workaround for affected users other than rolling back the patch, which is not ideal due to the critical security fixes included in the update. The impact of this issue varies among users, with some experiencing significant problems while others report no disruptions. Microsoft is working on a resolution and will provide further information soon. Additionally, Microsoft has faced challenges with its Surface Hub v1 devices, requiring an out-of-band update.
Winsage
June 17, 2025
Microsoft has released an out-of-band update to fix an issue with Surface Hub v1 devices that arose from the June Patch Tuesday updates, specifically related to KB5060533 for Windows 10 versions 21H2 and 22H2. This issue caused some Surface Hub v1 units to become inoperable, displaying a "Secure Boot Violation: Invalid signature detected" error message. Microsoft paused the update on June 11 and issued a patch a week later. The problem does not affect Surface Hub 2S and 3 models. Users have reported inconsistent success using a disk re-imaging tool, and the Surface team is investigating potential recovery methods. Microsoft is working on a solution for the affected devices and will provide updates as they become available.
Winsage
June 17, 2025
Microsoft released an emergency update (KB5063159) to address startup failures in certain Surface Hub v1 devices running Windows 10, specifically those encountering Secure Boot Violation errors after installing the June 2025 Windows security update (KB5060533). The issue was limited to Surface Hub v1 systems on Windows 10, version 22H2, and did not affect Surface Hub 2S and 3 devices. Microsoft paused the rollout of the KB5060533 update on June 11, 2025, to prevent further complications. Additionally, the June 2025 Patch Tuesday updates included security patches for 66 vulnerabilities, including critical ones that allowed remote code execution and privilege escalation.
Winsage
June 17, 2025
Microsoft released update KB5060842 on Patch Tuesday, followed by an out-of-band update KB5063060 to address issues with the first update, particularly an incompatibility affecting games using Easy Anti-Cheat. However, KB5063060 has caused new complications, with users reporting error codes 0x800f0922, 0x80070002, 0x80070306, and 0x800f0991 during installation, as well as installation freezes and boot failures. Users who installed KB5063060 are experiencing performance issues, graphical glitches, game crashes, a corrupted taskbar, and some devices not recognizing Bluetooth devices. Microsoft has not yet addressed these concerns, and users can uninstall KB5063060 to revert to KB5060842.
Winsage
June 12, 2025
Microsoft released an emergency update, KB5063060, to address a compatibility issue causing unexpected restarts and blue screen of death (BSOD) errors on Windows 11 systems using Easy Anti-Cheat. This update follows the earlier cumulative update, KB5060842, which led to reports of system reboots linked to IRQLNOTLESSOREQUAL BSODs. The issues were confirmed to affect devices running Easy Anti-Cheat, which is used in popular games like Fortnite and Apex Legends. The update will install automatically for devices with Easy Anti-Cheat, and manual installation options are available for x64 and arm64 systems. Additionally, Microsoft implemented a compatibility hold for Windows 24H2 upgrades on Intel Alder Lake+ and vPro systems due to related blue screen issues. On the same day, Microsoft also released security updates addressing 66 vulnerabilities in Windows 11, including critical flaws in Windows SMB and WebDAV.
Winsage
June 12, 2025
Microsoft has issued an emergency update for Windows users in June to address issues related to the June update (Windows 11 24H2 KB5060842), which caused significant problems for users with Easy Anti-Cheat gaming software. The initial update was paused due to stability concerns, and a patch was applied, but it did not resolve the issues. Users reported installation failures with error code (0x80073712). Microsoft acknowledged compatibility issues and ultimately retracted the faulty update, replacing it with the emergency update KB5063060. This new update addresses unexpected reboots while launching games that use Easy Anti-Cheat and will automatically download and install on affected devices.
Winsage
June 3, 2025
Microsoft has released a fix for a recent patch that caused some Windows 11 PCs to enter recovery mode due to an error code linked to the May Patch Tuesday update. The issue primarily affected virtual boxes and some physical devices, displaying the message: "Your PC/Device needs to be repaired. The operating system couldn't be loaded because a required file is missing or contains errors. File: ACPI.sys. Error code: 0xc0000098." The fix, identified as KB5062170, does not address an ongoing issue with Noto fonts, where CJK characters appear blurry in Chromium browsers at 100 percent scaling. Users can temporarily adjust the scaling to 125 or 150 percent to mitigate this problem. Microsoft has faced similar challenges with out-of-band fixes in the past, affecting both Windows 10 and Windows Server.
Search