Yesterday marked a significant moment for Windows 10 users as Microsoft unveiled an out-of-band update, designated as KB5061768. This particular update, released outside the standard schedule, aims to tackle urgent security vulnerabilities that demand immediate attention.
This critical update is exclusively available through the Microsoft Update Catalog and is designed for PCs operating on Windows 10 versions 1903 and later, as well as Windows 10 LTSB, supporting both x86 and x64 architectures. Users should note that the download size ranges from 415 MB to 711 MB, depending on the system configuration.
Who needs the KB5061768 update?
The KB5061768 update is essential for Windows 10 users experiencing issues related to BitLocker and blue screen crashes, which have emerged following the significant Windows 10 patch released in May. Specifically, affected systems may fail to boot, erroneously prompting users to input their BitLocker recovery key. For those who can access their PCs, they may still encounter frustrating blue screen crashes.
According to Microsoft, the issue primarily impacts Windows 10 devices equipped with Intel Trusted Execution Technology (TXT) enabled on 10th-generation Intel vPro processors or newer.
“Fixed: A known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th-generation or later Intel vPro processors. On these systems, installing the May 13, 2025, Windows security update (KB5058379) might cause the Local Security Authority Subsystem Service (LSASS) process to terminate unexpectedly, triggering an Automatic Repair prompting for the BitLocker recovery key to continue.”
How to apply the update if your PC is affected and can’t log in
For users unable to install update KB5061768 due to boot issues, Microsoft recommends disabling Intel VT for Direct I/O (VTD or VTX) and Intel Trusted Execution Technology (TXT) within the BIOS/UEFI settings. Once these features are turned off, users should find that Windows 10 starts normally, allowing them to apply the update after entering their BitLocker recovery key. Following the installation, users can re-enable Intel VT for Direct I/O and TXT in the BIOS/UEFI.
Further reading: How to save your Windows 10 PC after end-of-support
This article originally appeared on our sister publication PC-WELT and was translated and localized from German.
