Windows 11 June 2025 KB5060999 Update: Security Fixes & Known Issues

Here is a summary of the main points from the official Microsoft support article for the June 10, 2025—KB5060999 (OS Builds 22621.5472 and 22631.5472) cumulative update for Windows 11:

---

Applies to​

• Windows 11 Enterprise and Education, version 22H2
• Windows 11 version 23H2, all editions

---

Highlights​

• This update addresses security issues for your Windows operating system.

---

Improvements​

For Windows 11, version 23H2:​

• No new issues are documented.
• Includes all improvements from Windows 11, version 22H2.

For Windows 11, version 22H2:​

• Includes improvements from KB5058502 (May 27, 2025), especially:
• Graphics: Fixes a Remote Desktop graphics support issue that caused connection failures.
• Quality improvements include a servicing stack update (KB5058546) to ensure robust and reliable updates.

---

Known Issues​

• Noto fonts issue (CJK languages):
• Blurry or unclear Chinese, Japanese, or Korean text at 96 DPI (100% scaling) in Chromium-based browsers (Edge, Chrome).
• Root cause: March 2025 update introduced Noto fonts for these languages; clarity is affected at low DPI.
• Workaround: Increase display scaling or report issues on the Google Noto Fonts GitHub.
• Update delay with deferral policies:
• In some IT-managed environments with quality update (QU) deferral policies, this update may be delayed due to a metadata timestamp of June 20, 2025 (while the update released June 10).
• Workarounds: Expedite policy or adjust rings/deferral settings for quicker delivery. Delay only affects availability timing, not update content.

---

How to get this update​

• Windows Update / Microsoft Update: Installs automatically.
• Windows Update for Business: Installs automatically per policies.
• Microsoft Update Catalog: Manual download link.
• WSUS: Syncs automatically when "Windows 11" and "Security Updates" are selected.

---

Removal​

• Use DISM /online /get-packages and DISM/Remove-Package if needed. The Windows Update Standalone Installer (wusa.exe) cannot remove updates that include the servicing stack update.

---

Additional file info​

• Cumulative update file list
• Servicing stack update file list (KB5058546)

---

For more details, see the full Microsoft article. If you have a specific question about this update, let me know!

---

Source: Microsoft Support June 10, 2025—KB5060999 (OS Builds 22621.5472 and 22631.5472) - Microsoft Support

 

[ChatGPT]

Microsoft has released the KB5060999 update for Windows 11, encompassing OS Builds 22621.5472 and 22631.5472, as part of its June 10, 2025, security and quality enhancements. This update addresses critical security vulnerabilities and introduces several improvements to system functionality.

Overview of KB5060999​

The KB5060999 update is designed for Windows 11 versions 22H2 and 23H2. It focuses on bolstering the operating system's security framework and refining user experience through targeted fixes.

Key Improvements and Fixes​

Graphics and Remote Desktop​

A significant issue addressed in this update pertains to graphics support affecting Remote Desktop connections. Users previously encountered errors such as "The Remote Desktop Services session has ended" or "A remote desktop connection cannot be established." The update resolves these errors, ensuring stable and reliable Remote Desktop sessions.

Servicing Stack Update​

The update includes a servicing stack update (KB5058546) for builds 22621.5412 and 22631.5412. This enhancement improves the component responsible for installing Windows updates, ensuring a robust and reliable servicing stack for future updates.

Known Issues​

Noto Fonts Rendering​

Post-update, some users have reported blurry or unclear Chinese, Japanese, and Korean (CJK) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers like Microsoft Edge and Google Chrome. This issue arises from the introduction of Noto fonts as fallbacks to improve text rendering. The limited pixel density at 96 DPI can reduce the clarity and alignment of CJK characters. Increasing the display scaling enhances text clarity. Microsoft is collaborating with Google to address this issue and recommends users report related problems through the official Google Noto Fonts GitHub repository.

Update Delay with Deferral Policies​

Devices in environments where IT administrators use quality update deferral policies might experience delays in receiving the June 2025 Windows security update. Although released on June 10, 2025, the update's metadata timestamp reflects June 20, 2025. This discrepancy may cause devices with configured deferral periods to receive the update later than expected. To expedite deployment, administrators can create an expedite policy to bypass deferral settings or adjust deployment rings to reduce the delay window. This issue affects only the timing of update availability and does not impact the quality or applicability of the update.

Installation Guidance​

Before installing this update, ensure that the latest servicing stack update (SSU) is installed to facilitate a smooth update process. Microsoft combines the latest SSU with the latest cumulative update (LCU) to streamline the installation. The update is available through Windows Update, Windows Update for Business, and the Microsoft Update Catalog. For devices with deferral policies, administrators should consider the known issue regarding update delays and take appropriate actions to ensure timely deployment.

Conclusion​

The KB5060999 update is a critical release that enhances the security and functionality of Windows 11. By addressing key issues such as Remote Desktop errors and improving the servicing stack, Microsoft continues to refine the user experience. Users and administrators are encouraged to install this update promptly while being mindful of the known issues and recommended workarounds to maintain optimal system performance.

---

Source: Microsoft Support June 10, 2025—KB5060999 (OS Builds 22621.5472 and 22631.5472) - Microsoft Support