Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Microsoft released four Windows 10 security updates on June 10, 2025: KB5060533, KB5060531, KB5061010 and KB5060998. They apply to different Windows versions and servicing branches, so check the device’s edition, version and OS build before choosing a package. The updates install builds 19044.5965/19045.5965, 17763.7434, 14393.8148 and 10240.21034, respectively.

Which June 2025 update applies to your Windows device?

These packages are not interchangeable. Match the device’s installed branch and edition to the Microsoft release notes before deploying an update.

Update Resulting OS build Applicable branch What it addresses
KB5060533 19044.5965 or 19045.5965 Windows 10 versions 21H2 and 22H2, including the supported LTSC editions described in Microsoft’s release notes General internal Windows OS security improvements; the notes also document CJK text clarity, Surface Hub v1 startup and update-delivery timing concerns.
KB5060531 17763.7434 Windows 10 Enterprise LTSC 2019, IoT Enterprise LTSC 2019, IoT Core LTSC, and Windows Server 2019 GDI/GDI+ text rendering and Windows Hello for Business Key Trust fixes. Later release-health notes document a DHCP Server issue.
KB5061010 14393.8148 Windows 10 Enterprise LTSB 2016, IoT Enterprise 2016 LTSB, and the Windows Server 2016 servicing branch Remote Web Access behavior and Windows Hello for Business Key Trust fixes. Later notes also document a DHCP Server issue.
KB5060998 10240.21034 Windows 10 version 1507 General internal Windows OS security improvements; the release page said Microsoft was not aware of known issues at the time.

For additional edition and servicing details, see Microsoft’s notes for KB5060531, KB5061010 and KB5060998. The KB number alone is not enough to determine applicability: confirm the installed Windows version and build first.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Version 21H2 and 22H2 details for KB5060533

Microsoft’s KB5060533 notes cover Windows 10 versions 21H2 and 22H2, with edition-specific applicability. The page identifies Windows 10 version 22H2 across all editions and Enterprise LTSC 2021 and IoT Enterprise LTSC 2021. On supported editions, enablement package KB5003791 moves devices to version 21H2; KB5015684 is used for version 22H2. The cumulative update includes fixes from earlier May 2025 updates and previews.

What changed in the updates?

KB5060531: text rendering and Windows Hello

KB5060531 fixes a GDI/GDI+ problem in which some characters could appear wider than intended and break a sample paragraph’s layout. It also addresses sign-in failures involving self-signed certificates when Windows Hello for Business uses the Key Trust model.

KB5061010: Remote Web Access and Windows Hello

KB5061010 addresses unpredictable Remote Web Access connections and the Windows Hello for Business Key Trust sign-in issue.

KB5060533 and KB5060998: security improvements

Microsoft describes these packages as miscellaneous security improvements to internal Windows OS functionality. Their summaries do not identify individual vulnerabilities or issue-level changes. Microsoft directs readers seeking vulnerability details to its Security Update Guide.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Each update is cumulative for its branch. If earlier updates are installed, Microsoft says only newly included content needs to be downloaded and installed.

Rank #3
HP 2020 15.6" Touchscreen Laptop Computer/ 10th Gen Intel Quard-Core i5 1035G1 up to 3.6GHz/ 12GB DDR4 RAM/ 256GB PCIe SSD/ 802.11ac WiFi/Bluetooth 4.2/ USB 3.1 Type-C/HDMI/Silver/Windows 10 Home
  • 10th Generation Intel Core i5-1035G1 processor
  • 12GB system memory for full-power multitasking
  • 256GB Solid State Drive
  • 15.6" Micro-edge touchscreen display

Known issues and what happened afterward

KB5060533: blurry CJK text in Chromium browsers

Microsoft recorded reports that Chinese, Japanese and Korean text could look blurry or unclear at 96 DPI and 100% display scaling in Chromium-based browsers such as Edge and Chrome. The note links the behavior to Noto CJK fallback fonts introduced in the March 2025 Preview Update in collaboration with Google. Increasing display scaling can improve clarity; Microsoft says it shared findings and possible solutions with Google.

KB5060533: Surface Hub v1 startup failure

On Surface Hub v1, the update could prevent startup and display “Secure Boot Violation: Invalid signature detected. Check Secure Boot Policy in Setup.” Surface Hub 2S and Surface Hub 3 are not affected. Microsoft says the issue is fixed in KB5063159 and advises Surface Hub v1 users not to install KB5060533, but to install KB5063159 instead.

Rank #4
Dell Latitude 7480 Laptop 14 - Intel Core i7 6th Gen - i7-6600U - 3.4Ghz - 256GB SSD - 16GB RAM - 1920x1080 FHD - Windows 10 Pro (Renewed)
  • Latitude 7480 Laptop 14"
  • Intel Core i7 6th Gen i7-6600U -Core Processor 2.6GHz (3.4GHz With Turbo Boost)
  • 256 GB SSD Hard Drive & 16GB Memory
  • 1920x1080 FHD resolution Non-Touch with Webcam and an integrated graphics chip
  • Wireless Wifi & Bluetooth

KB5060533: quality-update deferral timing

Organizations using quality-update deferral policies could receive the June update later than expected because it was released on June 10 while its metadata carried June 20, 2025. Microsoft says this affected delivery timing, not the update’s quality or applicability. Its suggested mitigations are an expedite policy for Windows Autopatch or adjusted deployment rings and deferral settings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

KB5060531 and KB5061010: intermittent DHCP Server hangs

Microsoft later reported that the DHCP Server service could intermittently stop responding after either update, affecting clients’ ability to renew IP addresses. Updates released on and after July 8, 2025 resolved the issue: KB5062557 for the KB5060531 branch and KB5062560 for the KB5061010 branch. For a device being maintained now, use its latest applicable update rather than treating the June package as current.

KB5060998: no known issues reported at release

Microsoft’s KB5060998 release page said it was not aware of known issues with that update at the time of the note.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Installation channels and servicing-stack requirements

Microsoft lists Windows Update, Windows Update for Business, Microsoft Update Catalog and WSUS among the distribution channels across these release notes. Use the instructions for the device’s branch and deployment method; servicing-stack prerequisites differ by update and servicing state.

  • KB5060531: Microsoft specifies the August 10, 2021 servicing stack update KB5005112 first if the device’s servicing state requires it.
  • KB5060998: For Windows 10 version 1507 updates released on or after January 14, 2025, install the latest SSU first. The page names KB5058527 and says WSUS administrators must approve both that SSU and KB5060998.
  • KB5060533: Requirements differ between offline image servicing and installation through WSUS or the Catalog. Microsoft’s notes specify older standalone SSUs when the image or device lacks the stated baseline LCU.
  • Combined servicing stack updates: Microsoft’s notes warn that WUSA’s /uninstall switch will not remove a combined LCU, and the SSU cannot be removed. Where LCU removal is necessary, follow Microsoft’s documented DISM procedure for the applicable update.

Check the relevant Microsoft release page for the exact prerequisites before deploying to an offline image or managing a fleet through WSUS.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Is Windows 10 still receiving security updates?

Windows 10 support ended October 14, 2025, according to Microsoft’s current support notice. Microsoft says that after that date it no longer provides free software updates from Windows Update, technical assistance or security fixes for Windows 10. The PC will continue to work; Microsoft recommends moving to Windows 11. Organizations should account for any separate extended-security arrangement and the lifecycle of the specific Windows edition when planning updates.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.