PortalFuse KB Update: August 12, 2025 – Major Security Rollups & System Stability

Welcome to your essential PortalFuse Weekly KB Update Report, hot off the presses for August 12, 2025! This week, we are covering 17 new KB articles, addressing a total of 369 CVEs, including 9 rated as critical and 295 as high. Beyond the numbers, this cycle focuses on significant security enhancements, critical bug fixes, and proactive warnings about upcoming certificate expirations.

Windows 10 Updates

KB5062554: Windows 10 Version 22H2

Targeted OS: Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021, and Windows 10 version 22H2 (OS Builds 19044.6093 and 19045.6093).

Overview: A critical security update that bundles miscellaneous security enhancements with the latest servicing stack update (SSU) to improve update reliability. It also carries a warning about the upcoming Secure Boot certificate expiration in June 2026.

Key Improvements and Bug Fixes

• (Impact: High) Contains unspecified security enhancements to internal Windows OS functionality.
• (Impact: Medium) Enhances the servicing stack component that installs Windows updates.
• (Impact: Medium) Resolves problems with word formation and selection in Traditional Chinese IME.
• (Impact: Medium) Fixes an issue where the search feature in the Emoji Panel becomes non-functional.

Important Known Issues to Note

• Noto fonts: May cause blurry CJK text at 96 DPI in Chromium-based browsers.

KB5062561: Windows 10 Version 1507

Targeted OS: Windows 10 Version 1507 (OS Build 10240.21073).

Overview: A security update for the original release of Windows 10, containing general security improvements. It reminds users that support for this version ends on October 14, 2025, and highlights the Secure Boot certificate expiration.

Key Improvements and Bug Fixes

• (Impact: High) Enhances security within the internal Windows OS functionality.

Important Known Issues to Note

• No Known Issues: Microsoft is not currently aware of any issues with this update.

KB5063709: Windows 10 Version 22H2

Targeted OS: Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021, and all editions of Windows 10 version 22H2 (OS Builds 19044.6216 and 19045.6216).

Overview: This is a critical security update that rolls up previous quality improvements and delivers the latest SSU for enhanced reliability. It reiterates the June 2026 Secure Boot certificate expiration and the October 2025 end-of-support date for Windows 10.

Key Improvements and Bug Fixes

• (Impact: Critical) Contains unspecified security enhancements to internal Windows OS functionality.
• (Impact: High) Improves the reliability of the update process by addressing potential installation issues.
• (Impact: Medium) Incorporates fixes and improvements from prior updates KB5062554 and KB5062649.

Important Known Issues to Note

• No Known Issues: Microsoft is not currently aware of any issues with this update.

KB5063889: Windows 10 Version 1507

Targeted OS: Windows 10 version 1507 (OS Build 10240.21100).

Overview: Another security update for the initial version of Windows 10, this release includes general security enhancements and the standard reminders about the end of support and Secure Boot certificate expiration.

Key Improvements and Bug Fixes

• (Impact: High) Includes unspecified security enhancements to the internal Windows OS functionality.

Important Known Issues to Note

• No Known Issues: Microsoft is not currently aware of any issues with this update.

Windows 11 Updates

KB5062552: Windows 11 Versions 22H2 & 23H2

Targeted OS: Windows 11 Enterprise and Education version 22H2, and all editions of Windows 11 version 23H2 (OS Builds 22621.5624 and 22631.5624).

Overview: A critical security update for Windows 11 that also addresses a black screen issue during display changes. It includes the latest SSU and the warning about Secure Boot certificate expiration.

Key Improvements and Bug Fixes

• (Impact: Critical) Addresses the expiration of Secure Boot certificates set for June 2026.
• (Impact: High) Addresses an issue causing black screen problems during display changes.
• (Impact: Medium) Incorporates all enhancements from Windows 11 version 22H2.
• (Impact: Medium) Resolves post-update issues with the Microsoft Changjie Input Method Editor (addressed in KB5062663).

Important Known Issues to Note

• An issue with the Microsoft Changjie IME for Traditional Chinese users is noted, with the fix available in a subsequent update (KB5062663).

KB5062553: Windows 11 Version 24H2

Targeted OS: Windows 11 version 24H2 (OS Build 26100.4652).

Overview: This security update for version 24H2 addresses the Secure Boot certificate expiration and includes several targeted improvements, such as fixing a graphics synchronization issue in games.

Key Improvements and Bug Fixes

• (Impact: Critical) Addresses potential boot issues due to expiring Secure Boot certificates.
• (Impact: High) Resolves an issue where game content becomes out of sync with cursor position after using ALT + Tab.
• (Impact: Medium) Fixes an issue where notification sounds for alerts and volume adjustments were not playing.

Important Known Issues to Note

• Azure VMs with Trusted Launch disabled may be unable to boot after installing this update.
• Issues with the Microsoft Changjie IME are addressed in a subsequent update (KB5062660).

KB5063875: Windows 11 Versions 22H2 & 23H2

Targeted OS: Windows 11 Enterprise and Education version 22H2 and all editions of Windows 11 version 23H2 (OS Builds 22621.5768 and 22631.5768).

Overview: A critical security update that also improves the reliability of the Copilot key. It marks the end of non-security preview updates for version 22H2 and includes the standard Secure Boot warning.

Key Improvements and Bug Fixes

• (Impact: Critical) Addresses the upcoming expiration of Secure Boot certificates.
• (Impact: High) Improved reliability of the Copilot key and resolved an issue preventing users from restarting Copilot.
• (Impact: Medium) Enhancements made to ensure a robust servicing stack for reliable installation of Microsoft updates.

Important Known Issues to Note

• No Known Issues: Microsoft is not currently aware of any issues with this update.

KB5063878: Windows 11 Version 24H2

Targeted OS: Windows 11 version 24H2 (OS Build 26100.4946).

Overview: This security update for version 24H2 addresses an authentication delay during sign-in on new devices and includes the latest SSU and Secure Boot warnings.

Key Improvements and Bug Fixes

• (Impact: Medium) Resolves an issue causing delays during sign-in on new devices due to certain preinstalled packages.

Important Known Issues to Note

• No Known Issues: Microsoft is not currently aware of any issues with this update.

AI and Copilot+ Updates

This week features a significant number of updates targeting AI components in Windows 11, particularly for Copilot+ PCs. These updates enhance image processing, transformation, and local language model capabilities across different hardware platforms.

KB5063875: Windows 11 (OS Builds 22621.5768 and 22631.5768)

This update for Windows 11 versions 22H2 and 23H2 improves the reliability of the Copilot key and includes the latest servicing stack update (SSU) to ensure robust installation of future updates.

Key Improvements and Bug Fixes

• (Impact: High) Improved the reliability of the Copilot key and resolved an issue preventing users from restarting Copilot after using the key.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065499: Image Processing AI (Qualcomm)

This update targets the Image Processing AI component on Qualcomm-powered systems running Windows 11, version 24H2, enhancing scaling and foreground/background extraction.

Key Improvements and Bug Fixes

• (Impact: High) Enhances the efficiency and accuracy of image processing tasks on Qualcomm-powered systems.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065500: Image Processing AI (Intel)

This update targets the Image Processing AI component on Intel-powered systems running Windows 11, version 24H2, improving image processing capabilities.

Key Improvements and Bug Fixes

• (Impact: High) Enhances the performance of the Image Processing AI component on Intel-powered systems.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065501: Image Processing AI (AMD)

This update targets the Image Processing AI component on AMD-powered systems running Windows 11, version 24H2, optimizing image scaling and extraction.

Key Improvements and Bug Fixes

• (Impact: High) Optimizes image scaling and extraction processes on AMD-powered systems.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065502: Image Transform AI Update

This update for Copilot+ PCs on Windows 11 version 24H2 improves the ability of the Image Transform AI to erase foreground objects and generate appropriate background fills.

Key Improvements and Bug Fixes

• (Impact: High) Significantly improves the capability of the Image Transform AI component for advanced image processing.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065503: Phi Silica AI (Qualcomm)

This update for Windows Copilot+ PCs optimizes the Transformer-based local language model on Qualcomm-powered systems, enhancing efficiency and performance.

Key Improvements and Bug Fixes

• (Impact: High) Optimizes the Transformer-based local language model for improved efficiency on Qualcomm-powered systems.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065504: Phi Silica AI (Intel)

This update for Windows Copilot+ PCs improves the efficiency of the Phi Silica AI component on Intel-powered systems, ensuring better responsiveness from the local language model.

Key Improvements and Bug Fixes

• (Impact: High) Improves the efficiency and performance of the Phi Silica AI component on Intel-powered systems.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

KB5065505: Phi Silica AI (AMD)

This update for Windows Copilot+ PCs enhances the performance of the Phi Silica AI component on AMD-powered systems, ensuring the local language model operates more effectively.

Key Improvements and Bug Fixes

• (Impact: High) Enhances the performance of the local language model in AMD-powered environments.

Important Known Issues to Note

• No Known Issues: There are no known issues reported with this update.

Administrative Focus: Secure Boot and Servicing Stack Updates

• Secure Boot Certificate Expiration: A recurring theme across all updates is the warning that Secure Boot certificates will begin expiring in June 2026. Administrators must plan to update these certificates to prevent devices from failing to boot.
• Servicing Stack Updates (SSU): Nearly every cumulative update now includes the latest SSU. This is a critical component for ensuring the reliability of the update process itself and cannot be uninstalled.
• End of Support Reminders: Updates for older versions of Windows 10 consistently remind admins of the October 14, 2025 end-of-support date, pushing for migration to Windows 11.

Conclusion: Administrator Focus for the Week

This week's updates are heavily focused on foundational security and long-term stability. The primary action item for all administrators is to become familiar with the upcoming Secure Boot certificate expiration and formulate a plan for deployment. For those still managing Windows 10 devices, the end-of-support deadline is rapidly approaching, making migration planning more critical than ever. Finally, the continued integration of SSUs into cumulative updates solidifies the importance of treating these patches as essential, indivisible packages for maintaining a healthy Windows environment.