SafeOS dynamic update

Microsoft has issued an unscheduled update for Windows 11, designated as KB5068221, to address issues with Microsoft Office applications in virtualized environments. The update also provides a workaround for connectivity problems related to the deprecated Server Message Block (SMB) v1 protocol. The update is cumulative, including all security fixes from the earlier KB5065426 update. The specific issue fixed by the update involves a failure in Microsoft Office applications running in Microsoft Application Virtualization (App-V) environments due to a double handle closure in system components. Additionally, after installing the September 2025 Windows update, users may experience connectivity issues with SMB v1 on NetBIOS over TCP/IP. Microsoft suggests allowing network traffic on TCP port 445 as a workaround to switch the connection to TCP. The KB5068221 update is available for download from the Microsoft Update Catalog and requires installation of MSU files in a specific sequence. Instructions for installation include using Deployment Image Servicing and Management (DISM) commands for both running Windows PCs and Windows installation media.