PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Microsoft released the May 2025 Windows security updates on May 13, 2025. The main packages were KB5058411 for Windows 11 24H2, KB5058405 for Windows 11 23H2 and supported 22H2 editions, and KB5058379 for Windows 10 21H2 and 22H2. Install them, but stage deployment on affected Intel vPro systems and Windows virtual machines.
This article is a historical review of the May 2025 release. The documented risks were not universal: Windows 10 had a hardware- and configuration-specific BitLocker recovery problem, while Windows 11 virtual machines could encounter a separate boot-recovery failure. Later Microsoft updates addressed both issues.
Key takeaways
- Microsoft released the May 2025 Windows security updates on May 13, 2025, as the regular second-Tuesday monthly release.
- Windows 11 24H2 received KB5058411 and build 26100.4061; Windows 11 23H2 and supported 22H2 editions received KB5058405 and builds 22631.5335 or 22621.5335.
- Windows 10 21H2 and 22H2 received KB5058379 and builds 19044.5854 or 19045.5854.
- KB5058379 could trigger an lsass.exe failure, Automatic Repair, and a BitLocker recovery prompt on certain Intel vPro systems with Intel Trusted Execution Technology enabled.
- KB5058405 could cause a Windows 11 virtual machine to enter recovery with ACPI.sys and error 0xc0000098, particularly in Azure, Azure Virtual Desktop, Citrix, and Hyper-V environments.
- Microsoft later listed KB5061768 as the Windows 10 resolution and KB5062170 as a later Windows 11 out-of-band option for affected virtual-machine environments.
Which May 2025 Windows update applies to my computer?
The correct May 2025 Windows update depends on the exact Windows release, edition, architecture, and servicing channel—not merely whether the computer runs Windows 10 or Windows 11. According to Microsoft’s Windows release information, the principal May 13, 2025 client cumulative updates were:
| Windows version | May 2025 cumulative update | Resulting build | Associated servicing stack update |
|---|---|---|---|
| Windows 11 24H2 | KB5058411 | 26100.4061 | KB5058523 |
| Windows 11 23H2 | KB5058405 | 22631.5335 | KB5058528 |
| Supported Windows 11 22H2 editions | KB5058405 | 22621.5335 | KB5058528 |
| Windows 10 22H2 | KB5058379 | 19045.5854 | See the applicable Microsoft package details |
| Windows 10 21H2 | KB5058379 | 19044.5854 | See the applicable Microsoft package details |
The table covers the main client “B” releases. Windows Server editions, preview updates, out-of-band releases, Microsoft Defender intelligence and platform updates, and Microsoft Store application updates require separate applicability checks. A Windows cumulative update does not automatically update Microsoft Store applications, as Microsoft explains in the KB5058411 release documentation.
Popular on Amazon
- Computer lock for HP, Lenovo, Acer, Asus and other brands; not compatible with Dell or Alienware (see part # K68008WW)
- Resettable 4-wheel Number code with 10, 000 possible combinations. Push-button design for one-handed engagement to easily attach lock
- 6’ long carbon steel cable is cut-resistant and anchors to desks, tables, or any fixed structure
- Attaches to laptops, desktops, TVs, monitors, hard drives, docking stations, projectors or any other device featuring a Kensington standard size security slot
- Independently verified and tested for industry-leading standards in torque/pull, foreign implements, lock lifecycle, corrosion, key strength and other environmental condition
How can I identify my Windows version and installed KB?
You can identify the Windows release with winver and confirm the installed cumulative update through Windows Update history or PowerShell.
- Press Windows + R.
- Enter
winverand press Enter. - Record the Windows version and current build.
- Open Settings > Windows Update > Update history.
- Expand Quality Updates and look for KB5058411, KB5058405, or KB5058379.
From Command Prompt, you can list installed hotfixes with:
wmic qfe list brief /format:tableWMIC may be unavailable on newer Windows installations. PowerShell provides the alternative:
Recommended Free Tools
Get-HotFix | Sort-Object InstalledOn -DescendingTo check one package directly, run the relevant command as PowerShell:
Get-HotFix -Id KB5058411Replace KB5058411 with KB5058405 or KB5058379 when checking another Windows release. To confirm the operating-system build from PowerShell, use:
Get-ComputerInfo | Select-Object WindowsProductName, WindowsVersion, OsBuildNumberAdministrators should also verify the edition, x64 or ARM64 architecture, servicing channel, management platform, and whether the device is physical or virtual before manually downloading an MSU package.
Why did the May 2025 Windows updates matter?
The updates combined security fixes with cumulative quality and servicing changes. Security priority should be based on the affected component, exploitability, exposure, and whether exploitation was observed—not simply on the number of CVEs or the word “critical.”
Free tools Windows power users keep installed
One-click scans. No signup required.
Also popular on Amazon
- 5-Foot (1.5m) Carbon Steel Cable - Resists cutting attempts and provides ample length for easily anchoring your laptop to desks, tables, and other attachment points. Incorporates anti-shearing plastic sleeve to protect surfaces
- Slim Lock Head - Designed to support thin laptops using standard lock slots, lock secures while allowing your device to lie flat and stable
- Resettable 4-Wheel Number Code - Set or reset your personal number code from 10,000 possible combinations
- Pivoting Head and Rotating Anchor - The lock tip rotates 360º and the cable rotates up to 90º—allowing access to the ports near the lock slot on most devices and providing a convenient locking and unlocking experience
- One-Handed Attachment - Convenient slider allows for quick and easy attachment to the laptop with one hand
Microsoft’s authoritative source for vulnerability-level information is the Microsoft Security Update Guide. Use that guide to check each CVE’s affected product, attack vector, required privileges, user interaction, disclosure status, and exploitation status. A vulnerability listed in the wider Microsoft release may affect another Microsoft product rather than every Windows client edition.
Third-party reporting from Security Risk Advisors’ May 2025 Patch Tuesday report identified five exploited vulnerabilities in the broader release: CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, and CVE-2025-32709. That “five” figure must be treated as attributed reporting rather than an unqualified count of universally exploitable Windows flaws; counting methods differ between Windows-only vulnerabilities and the wider Microsoft product release.
| Risk characteristic | What it means for deployment |
|---|---|
| Actively exploited | Prioritize quickly after confirming that the affected product and configuration are present. |
| Critical severity | Indicates Microsoft’s severity assessment, but does not by itself prove active exploitation. |
| Public disclosure or proof of concept | Raises urgency, but must be distinguished from confirmed exploitation. |
| Configuration-specific defect | May justify a targeted pilot or temporary hold rather than delaying every Windows device. |
What changed in Windows 11 24H2 with KB5058411?
KB5058411 brought Windows 11 24H2 to build 26100.4061 and included the associated servicing stack update KB5058523. The Microsoft KB5058411 documentation describes security, quality, and servicing content carried forward from the applicable preview release.
- A microphone-audio problem that could mute audio unexpectedly was addressed.
- An issue preventing an eye-controller application from launching was addressed.
- Secure Boot Advanced Targeting and Linux EFI/SBAT improvements were included.
- Microsoft documented blurry or unclear Chinese, Japanese, and Korean text at 96 DPI, or 100% display scaling, in Chromium-based browsers such as Edge and Chrome.
The CJK font problem was a rendering issue, not evidence that the update had failed to install. Increasing Windows display scaling could improve readability, and Microsoft later identified KB5060829 as addressing the issue.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →What changed in Windows 11 23H2 and 22H2 with KB5058405?
KB5058405 brought Windows 11 23H2 to build 22631.5335 and supported Windows 11 22H2 editions to build 22621.5335. Microsoft lists the associated servicing stack update as KB5058528 in the KB5058405 release documentation.
KB5058405 included Secure Boot Advanced Targeting and Linux EFI improvements. The package also addressed an earlier issue in which upgrading to Windows 11 24H2 through WSUS could fail to download or complete with error 0x80240069. Installing KB5058405 was still not the same as performing a Windows 11 24H2 feature upgrade.
The most important operational warning involved virtual machines. Some Windows 11 22H2 and 23H2 virtual machines could fail during recovery with ACPI.sys and error 0xc0000098. Microsoft documented the issue in environments including Azure Virtual Machines, Azure Virtual Desktop, Citrix-hosted virtual machines, and Hyper-V.
Also popular on Amazon
- KEYLESS CIPHER LOCK: The resettable 4-number combination lock offers 10,000 possible codes. An individual can select their own code--easy to remember and no lost keys
- 6 FOOT COMPUTER LOCK: Galvanized wire rope and hardened stainless steel, so this laptop security lock cable is anti-cut and high security. Suitable for 3*7mm keyholes
- COMPATIBILITY NOTICE: The following models cannot be used: Lenovo U41 / U31 / M41 / S41 / K41 / Ideapad series / Flex3 series; Acer Aspire V Nitro/Chromebook R13; Dell XPS13/SPX13 / 7000 / M3800 / Alienware / Insprion 7000/Inspiron 7779 with square keyhole; Apple Macbook Pro models released after 2014 (newer Macbooks are not compatible)
- CHANGE PASSWORD INSTRUCTIONS: The preset combination is 0-0-0-0. To set your own combination, use a small flat-head screwdriver or similar object to push in screw (Bottom of password lock) and rotate clockwise to vertical position. Set your new combination, then rotate the screw counter-clockwise back to its original horizontal position. The new combination has now been saved. Make note of the new combination as it cannot be reset
- TESTING PROCEDURE: Test the combination before attaching the lock to your Notebook by scrambling the combination and pushing in turn, then return to the newly set combination and check that locking button depresses completely
For environments that had not yet deployed the affected update, Microsoft recommended the later out-of-band KB5062170. Administrators should not assume that an Azure repair method, an on-premises Hyper-V repair, and a Citrix recovery procedure are interchangeable.
What was the Windows 10 KB5058379 BitLocker risk?
KB5058379 brought Windows 10 version 22H2 to build 19045.5854 and version 21H2 to build 19044.5854. On certain systems with 10th-generation-or-newer Intel vPro processors and Intel Trusted Execution Technology enabled, the update could cause lsass.exe to terminate unexpectedly, send Windows into Automatic Repair, and prompt for the BitLocker recovery key.
Microsoft described the affected client platform as Windows 10 version 22H2 and later listed KB5061768 as the resolution in its Windows 10 22H2 resolved-issues notice. The issue did not affect all Windows 10 PCs, and “the update breaks BitLocker” is inaccurate shorthand. A BitLocker prompt can mean that a measured-boot change triggered BitLocker protection after a boot or authentication failure; it does not automatically mean that the update encrypted or destroyed the disk.
The practical prerequisite was recovery-key access. Microsoft states that Microsoft Support cannot retrieve, provide, or recreate a lost BitLocker recovery key. Before deployment, organizations should verify that keys are escrowed in Microsoft Entra ID, Active Directory, Intune, or the organization’s documented key-management system.
How should organizations deploy the May 2025 updates?
A staged rollout was safer than either an uncontrolled immediate deployment or an indefinite delay. A practical deployment sequence was:
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems- Confirm that the Windows versions remain within the organization’s supported servicing scope.
- Confirm that every BitLocker recovery key is escrowed and can actually be retrieved.
- Identify Windows 10 Intel vPro devices with Intel Trusted Execution Technology enabled.
- Inventory Azure VMs, Azure Virtual Desktop sessions, Citrix machines, Hyper-V VMs, and production VDI images.
- Deploy the relevant KB to a pilot ring.
- Reboot pilot devices and validate sign-in, BitLocker behavior, networking, VPN, printing, line-of-business applications, VM boot, and management reporting.
- Expand deployment gradually while monitoring update errors, recovery events, and help-desk reports.
- Keep the relevant later fixes, including KB5061768 and KB5062170, available before broad rollout.
Organizations already using Microsoft-native management can evaluate Microsoft Intune for device inventory, update rings, compliance policies, BitLocker policy, and Windows deployment. Windows Update for Business and Windows Autopatch provide Microsoft-native rollout controls, while WSUS and Configuration Manager remain relevant to organizations with established on-premises servicing infrastructure. A patch-management platform can control deployment; it cannot replace vulnerability applicability review, backups, snapshots, or BitLocker key escrow.
Pausing updates is not a complete security strategy. If deployment is delayed, document the reason, compensating controls, maximum delay, validation tests, and escalation path.
Also popular on Amazon
- Laptop Lock for Dell laptops fits seamlessly into Dell and Alienware laptops with the wedge type lock slot
- Resettable 4-wheel Number code with 10, 000 possible combinations. Push-button design for one-handed engagement to easily attach lock
- Unique lock engagement creates the strongest connection between the lock head and slot; 6' long carbon steel cable is cut-resistant and anchors to desk, table or any fixed structure
- Independently verified and tested for industry-leading standards in torque/pull, foreign implements, lock lifecycle, corrosion, key strength and other environmental condition
What should you do if a May 2025 update causes a failure?
If Windows 10 requests a BitLocker recovery key
- Do not repeatedly power-cycle the device without recording the displayed recovery information.
- Retrieve the recovery key from the organization’s escrow location.
- Enter the recovery key and allow Automatic Repair to complete.
- Check whether Windows starts normally.
- Apply KB5061768 where appropriate.
- Escalate to organizational IT or hardware support if the key is unavailable or the device still fails.
Uninstalling KB5058379 is not a universal remedy. The correct response depends on whether the documented Intel TXT and LSASS issue is present, whether Windows has a separate boot failure, and whether the BitLocker state changed for another reason.
If a Windows 11 virtual machine shows 0xc0000098
- Enter Windows Recovery Environment if it is available.
- Restart and allow Windows to revert to the last successfully installed update when that recovery option is offered.
- If recovery is unavailable, shut down the VM rather than repeatedly restarting it.
- Mount the affected VHD or VHDX on another machine or VM as a data disk.
- Follow the platform-specific Microsoft repair procedure for Azure, Hyper-V, or the relevant Citrix environment.
- Install KB5062170, reboot, and validate the VM before returning it to production.
If installation fails without either documented symptom
First record the Windows version, KB number, error code, reboot state, and recent hardware or driver changes. Then restart and retry Windows Update after checking available disk space and management-policy status. As general servicing troubleshooting—not a guaranteed fix for every May 2025 failure—run:
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannowRestart after the commands complete and retry the update. Microsoft’s KB documentation also provides DISM and PowerShell examples for offline package installation. Use offline servicing only when the package matches the exact Windows release and architecture.
Why might the KB not appear in Windows Update?
A missing KB does not necessarily mean that Windows Update is broken. Possible explanations include a different Windows release, an organizational update policy, a safeguard hold, an already superseded package, a required servicing-stack condition, an unsupported servicing state, or a preview or Insider channel.
Run winver first, then compare the release and build with the table above. Administrators should check Windows Update for Business, Intune, Configuration Manager, or WSUS approval and reporting before manually downloading an MSU. Manual installation can bypass useful compatibility controls and should not be the first response to an unidentified applicability problem.
Should you install the May 2025 Windows security updates?
Yes, the security updates generally deserved deployment, but the timing depended on the device’s risk and failure exposure. The right choice was targeted staging, not a blanket “install immediately” or “never install” rule.
| Environment | Recommended approach | Reason |
|---|---|---|
| Home Windows 11 PC | Install after confirming the correct release and having a current backup. | The update contained security and quality fixes; the documented VM issue did not apply to ordinary physical PCs in the same way. |
| Standard business endpoint | Pilot first, then expand after reboot and application checks. | Managed validation reduces disruption while preserving security improvements. |
| Windows 10 Intel vPro/TXT device | Stage carefully and verify BitLocker recovery before deployment; use the later resolution where appropriate. | The documented LSASS, Automatic Repair, and BitLocker prompt risk was hardware- and configuration-specific. |
| Azure, Azure Virtual Desktop, Citrix, or Hyper-V Windows 11 VM | Use a tested pilot, backup or snapshot, and the later KB5062170 path where applicable. | KB5058405 had a documented ACPI.sys and 0xc0000098 recovery risk in virtual environments. |
| Windows 10 after October 14, 2025 | Plan migration to Windows 11, an eligible paid extended-security option, or a documented replacement. | Microsoft ended free Windows 10 security-update support on October 14, 2025. |
Microsoft’s Windows 10 KB5058379 release page records the end-of-support context. A Windows 10 computer continuing to operate after that date does not prove that the computer is still receiving free security fixes.
Also popular on Amazon
- 🎁FIT FOR ALL THE TABLETS: 🎁With an anchor plate, The Hardware cable lock fits for Mac Book and all the Tablets, Smart Phones, such as for iPad, Microsoft Surface, Kindle, Samsung, Android Tablets and phones, etc
- 🎁FIT FOR MOST THE LAPTOPS: 🎁With standard lock, the security cable lock also fits for most laptops that have Standard slots.
- 🎁HOW TO USE: 🎁For Tablets/Laptops without standard lock slot: Bound the anchor plate, which is lined with strong adhesive, to the hard surface of the devices, then insert the locking head into the plate with keys and loop the cable around a fixed object. FOR LAPTOPS WITH LOCK SLOT, just simply insert the lock head into the slot, and loop the cable around a fixed object
- 🎁ANTI THEFT: 🎁The lock head is made of super-strong stainless steel, can be rotated in 360 degrees. The cable is made of cut-resistant twisted steel with a PVC coat, the extra length of 6.5ft fully meets your daily demands
- 🎁MODEL TIPS-- 🎁There are some Models need to be used with I3C Adhesive Security Plate, if you mind using I3C anchor plate, please buy it berofe thinking twice
What was the May 2025 update timeline?
| Period | Event |
|---|---|
| May 13, 2025 | Microsoft released KB5058411, KB5058405, and KB5058379 as the principal May security cumulative updates. |
| May 2025 | Microsoft documented the Windows 11 virtual-machine recovery issue involving ACPI.sys and 0xc0000098. |
| Later in the Windows 10 release-health record | Microsoft documented the Windows 10 Intel vPro/TXT LSASS, Automatic Repair, and BitLocker recovery issue and listed KB5061768 as the resolution. |
| Later out-of-band servicing | KB5062170 became the later Windows 11 option associated with the virtual-machine recovery problem. |
| October 14, 2025 | Microsoft’s free security-update support for Windows 10 ended. |
These are historical May 2025 deployment risks. They should not be described as necessarily unresolved in August 2026. Current exposure depends on the device’s installed cumulative updates, Windows support status, configuration, and whether later remediation was applied.
What the May 2025 release does not update
A Windows cumulative update does not mean that every Microsoft component and application is current. Defender intelligence and platform updates, Microsoft Edge, Office, firmware, third-party drivers, third-party applications, and Microsoft Store applications may follow separate update mechanisms. A device that has KB5058411, KB5058405, or KB5058379 installed may still require additional security and application updates.
Frequently Asked Questions
What is the May 2025 Windows security update for Windows 11 24H2?
The May 2025 Windows security update for Windows 11 24H2 is KB5058411, which brings the operating system to build 26100.4061. The package also included quality, Secure Boot, Linux EFI/SBAT, microphone, and eye-controller changes.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What is the May 2025 Windows security update for Windows 10?
The May 2025 Windows security update for Windows 10 21H2 and 22H2 is KB5058379. It produces builds 19044.5854 and 19045.5854 respectively, but certain Intel vPro systems with Intel Trusted Execution Technology enabled could encounter LSASS failure, Automatic Repair, and a BitLocker recovery prompt.
Does a BitLocker recovery prompt mean the May 2025 update destroyed my files?
No. A BitLocker recovery prompt does not by itself mean that the update destroyed or encrypted the disk. The documented Windows 10 issue could change the measured-boot state after an LSASS or Automatic Repair failure, causing BitLocker to request the recovery key.
What is Windows 11 error 0xc0000098 after KB5058405?
Error 0xc0000098, often accompanied by an ACPI.sys recovery error, was a documented Windows 11 virtual-machine problem after KB5058405. Microsoft associated the issue particularly with Azure, Azure Virtual Desktop, Citrix, and Hyper-V environments and later identified KB5062170 as an out-of-band option.
Is Windows 10 still receiving free security updates after October 14, 2025?
No. Microsoft ended free Windows 10 security-update support on October 14, 2025. A Windows 10 system may continue operating after that date, but continued operation does not mean that free security fixes are still being provided.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →The Bottom Line
Install the May 2025 Windows security updates, but deploy them intelligently. Confirm the exact KB, test a pilot ring, escrow and retrieve BitLocker keys, inventory virtual machines, and keep the later KB5061768 or KB5062170 remediation paths available where applicable. The documented failures were serious but targeted: they were not proof that every Windows 10 or Windows 11 system was unsafe to update.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
