Patch Tuesday

Winsage
May 30, 2025
Microsoft has released the May optional update for Windows 11 version 24H2, introducing features such as the Win + C keyboard shortcut for quick access to Copilot, a drag tray feature, and cross-device resume notifications for OneDrive files. The Copilot+ feature is now available in the European Economic Area (EEA) and supports intelligent text actions in Spanish and French. Users can utilize the 'Ask Copilot' option to highlight text or images and open Copilot with the selected content. New text actions for summarizing, creating bulleted lists, or rewriting highlighted text are available for AMD and Intel-powered Copilot+ PCs. Pen users can configure a shortcut button for Click to Do, and Windows Search improvements allow direct typing of settings. The Narrator feature provides detailed descriptions of images for blind and low-vision users. Energy saver controls for IT admins have been introduced, along with HDR and Dolby Vision controls. A new FAQs section in Settings assists users with common inquiries, and mouse settings have been simplified. Users can now edit images shared through the Windows Share window, and a new drag tray area appears when dragging local files. Taskbar policies have been improved to allow unpinning specific apps. The features will roll out with the upcoming Patch Tuesday update, alongside the optional KB5058481 update for Windows 10, which reinstates the clock view displaying seconds on the calendar flyout.
Winsage
May 30, 2025
Microsoft's recent Patch Tuesday update for Windows 11 has faced significant issues, particularly affecting users on versions 22H2 and 23H2. The installation of the May 13 update is failing on some machines, especially in virtual environments, leading to recovery mode entries and boot errors. Users are advised to avoid the update temporarily. The error message indicates a problem with the ACPI.sys file, which is crucial for managing hardware resources. Windows 11 Home and Pro users are likely unaffected, as virtual machines are typically used in enterprise settings. Microsoft has not provided the number of impacted users or a workaround beyond uninstalling the patches, but engineers are working on a resolution. This incident follows previous patching challenges faced by Microsoft this year, including an emergency update for Windows 10 and issues with Remote Desktop sessions in earlier updates.
Winsage
May 29, 2025
Microsoft has acknowledged that some Windows 11 systems may experience startup failures after installing the KB5058405 cumulative update, resulting in a 0xc0000098 recovery error related to ACPI.sys. This issue affects Windows 11 versions 22H2 and 23H2, particularly in enterprise settings like Azure Virtual Machines and on-premises virtual machines. Home users are less likely to encounter these problems. Microsoft is investigating the issue and will provide updates.
Winsage
May 29, 2025
Microsoft has released the optional KB5058481 preview cumulative update for Windows 10 22H2, which includes seven changes, notably the restoration of seconds to the time display in the calendar flyout. This update is part of the routine "optional non-security preview updates" and does not address security vulnerabilities. Users can install the update by navigating to Settings and manually checking for updates. Upon installation, Windows 10 22H2 will be updated to build 19045.5917. The update also includes enhancements for user experience and addresses a known issue with NOTO fonts appearing blurry at 96 DPI, particularly affecting CJK text in Chromium-based browsers. A temporary solution is to adjust the display scaling to 125% or 150%.
Winsage
May 28, 2025
On May 27, Microsoft released an out-of-band update, KB5061977, for Windows 11 version 24H2, elevating the operating system build to 26100.4066. This emergency patch addresses a security vulnerability currently being exploited, likely related to remote code execution or privilege escalation. The update is available through Windows Update, Windows Update for Business, WSUS, and the Microsoft Update Catalog. Organizations are urged to prioritize its installation, especially on publicly accessible or critical systems. The update focuses on security and reliability improvements, with no new features introduced. The issuance of this update outside regular maintenance windows presents challenges for IT administrators, emphasizing the need for proactive patch management strategies.
Winsage
May 22, 2025
Signal has introduced a "screen security" feature in its Windows application to enhance user privacy by preventing Microsoft's AI-driven Recall functionality from capturing content displayed within the app. This feature is active by default on all Windows 11 devices and sets a Digital Rights Management (DRM) flag on Signal's app windows. Recall, launched in May 2024, captures screenshots of active windows and has raised privacy concerns, leading Microsoft to make it optional and implement various security enhancements. Users can disable Signal's screen security but will be warned about potential privacy risks. Signal's developer, Joshua Lund, highlighted ongoing concerns regarding privacy in applications like Signal and called for a balance between privacy and accessibility in AI technologies.
Winsage
May 19, 2025
A critical vulnerability, designated as CVE-2025-21297, has been identified in Microsoft’s Remote Desktop Gateway (RD Gateway) due to a use-after-free (UAF) bug linked to concurrent socket connections during the service's initialization. This flaw, located in the aaedge.dll library within the CTsgMsgServer::GetCTsgMsgServerInstance function, allows multiple threads to overwrite a global pointer, leading to potential arbitrary code execution. The vulnerability affects multiple versions of Windows Server, including 2016, 2019, 2022, and 2025. Microsoft released security updates in May 2025 to address the issue, implementing mutex-based synchronization. The updates are KB5050011 for Windows Server 2016, KB5050008 for Windows Server 2019, KB5049983 for Windows Server 2022, and KB5050009 for Windows Server 2025. Security experts recommend applying these patches promptly and monitoring RD Gateway logs for unusual activity.
Winsage
May 19, 2025
Microsoft's latest Windows 11 update, version 24H2, released in May 2025, resolves a dual-boot issue caused by the Secure Boot Advanced Targeting (SBAT) feature that made Linux partitions unbootable for many users. Additionally, Microsoft has launched a new 13-inch Surface Laptop, which is the lightest and thinnest version ever produced, weighing 2.7 lbs, and emphasizing portability and performance with advanced AI features.
Winsage
May 16, 2025
Microsoft's KB5058379 update has caused issues for Windows 10 users, prompting unexpected requests for the BitLocker recovery key during startup. This problem is affecting users in Germany and the United States, impacting both corporate and personal devices. Users without the recovery key find their systems locked, leading some to perform system recoveries. Additionally, some users experience blue screen crashes after booting into Windows 10. A potential workaround is to disable the “Intel Trusted Execution Technology (Intel TXT)” option in the BIOS/UEFI. The issue primarily affects devices from Dell, HP, and Lenovo running Windows 10 versions 22H2 or 21H2 Enterprise. Microsoft has not yet acknowledged these issues related to the update.
Winsage
May 16, 2025
Microsoft has resolved a dual-booting issue caused by a patch released in 2024 that incorrectly applied Secure Boot Advanced Targeting (SBAT) settings to custom dual-boot configurations, preventing users from booting into Linux. This issue has been fixed in the May 2025 Windows 11 update (version 24H2), allowing seamless dual-booting. Additionally, Microsoft launched a new 13-inch Surface Laptop, which is the lightest and thinnest laptop the company has produced, weighing 2.7 lbs and featuring enhanced performance and advanced AI capabilities.
Search