MC1091305 – (Updated) The June 2025 Windows security update is now available

Product:

SharePoint, Windows, Windows Server

Platform:

Online, Windows Desktop, World tenant

Status:

Change type:

Admin impact

Links:

Details:

Note updated on June 11, 2025 (10:00 PT)


The June 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained.

Highlights for the Windows 11, version 24H2 update:
This security update includes improvements that were a part of update KB5058499 (released May 28, 2025).
After installing the June 2025 Windows security update, Windows 11, version 24H2 will retain system restore points for up to 60 days.
This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.


Short on time? Watch our Windows 11 release notes video for this month's tips.


For instructions on how to install this update, see the KB for your operating system listed below:
Windows 11, version 24H2: KB5060842
Windows 11, versions 23H2 and 22H2: KB5060999
Windows 11 Enterprise LTSC 2024: Hotpatch KB5060841
Windows 10, versions 22H2 and 21H2: KB5060533
Windows 10 Enterprise LTSC 2019 and Windows Server 2019: KB5060531
Windows 10 LTSB 2016 and Windows Server 2016: KB5061010
Windows 10 LTSB 2015: KB5060998
Windows Server 2025: KB5060842
Windows Server 2025 Datacenter: Azure Edition: Hotpatch KB5060841
Windows Server 2022: KB5060526
Windows Server 2022 Datacenter: Azure Edition: Hotpatch KB5060525
Windows Server 2012 R2: Monthly Rollup: KB5061018
Windows Server 2012: Monthly Rollup: KB5061059
Windows Server 2008 R2 Service Pack 1: Monthly Rollup: KB5061078 / Security Only: KB5061036
Windows Server 2008 SP2: Monthly Rollup: KB5061026 / Security Only: KB5061072


(Updated) Note: The June 2025 security update for devices running Windows 11, version 24H2 (KB5060842) was released and gradually rolled out June 10, 2025. However, we've identified a compatibility issue affecting a limited set of these devices in version 24H2, which instead will receive the Out-of-Band (OOB) update (KB5063060). The OOB update was released today, June 11, 2025. For more information, see June 11, 2025-KB5063060 (OS Build 26100.4351) Out-of-band - Microsoft Support.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-06-11

updated:
2025-06-12

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

The June 2025 Windows security update includes retaining system restore points for 60 days, fixes issues with self-signed certificates in Windows Hello for Business, and provides an Out-of-Band update for specific compatibility issues.

Direct effects for Operations**

Compatibility Issues
Potential compatibility issues with existing applications due to the new security update, leading to application failures or degraded performance.
   - roles: IT Support, Application Developers
   - references: https://support.microsoft.com/help/5060842" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/help/5060842, https://support.microsoft.com/help/5063060

User Authentication Problems
Users may experience issues signing in with self-signed certificates, impacting access to critical systems and services.
   - roles: End Users, IT Support
   - references: https://support.microsoft.com/help/5060842" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/help/5060842

System Restore Point Management
Changes in system restore point retention may lead to insufficient recovery options for users after the update, increasing the risk of data loss.
   - roles: End Users, IT Support
   - references: https://support.microsoft.com/help/5060842" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/help/5060842

Increased Support Tickets
The update may lead to a surge in support tickets due to unforeseen issues, straining IT resources and response times.
   - roles: IT Support, Help Desk Staff
   - references: https://support.microsoft.com/help/5060842" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/help/5060842

User Experience Degradation
Users may face degraded performance or unexpected behavior in Windows 11 after the update, leading to frustration and decreased productivity.
   - roles: End Users, IT Support
   - references: https://support.microsoft.com/help/5060842" target="_blank" rel="nofollow noopener noreferrer">https://support.microsoft.com/help/5060842

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Improved User Experience with System Restore Points
The June 2025 update allows Windows 11, version 24H2 to retain system restore points for up to 60 days. This enhancement can significantly improve user experience by providing users with more flexibility and security in case of system failures or issues, enabling them to restore their systems to a previous state more effectively.
   - next-steps: Communicate the benefits of this feature to users and provide training on how to utilize system restore points effectively. Consider integrating reminders or prompts for users to create restore points before major changes or updates.
   - roles: End Users, IT Support Staff, System Administrators
   - references: https://support.microsoft.com/help/5060842

Enhanced Security with Windows Hello for Business
The update addresses an issue with signing in using self-signed certificates with Windows Hello for Business, enhancing security and user convenience. This improvement ensures that users can authenticate securely without unnecessary barriers, thereby streamlining access to critical resources.
   - next-steps: Ensure that all users are aware of this fix and provide training on how to utilize Windows Hello for Business effectively. Monitor user feedback to identify any remaining issues and address them promptly.
   - roles: End Users, Security Administrators, IT Support Staff
   - references: https://support.microsoft.com/help/5060842

Streamlined IT Operations through Out-of-Band Updates
The identification of a compatibility issue and the subsequent release of an Out-of-Band (OOB) update demonstrates a proactive approach to IT operations. This opportunity allows IT departments to refine their update management processes, ensuring that critical fixes are deployed swiftly to minimize downtime and user disruption.
   - next-steps: Review current update management policies and procedures to incorporate lessons learned from the OOB update process. Consider implementing automated monitoring tools to detect and respond to similar issues in the future more efficiently.
   - roles: IT Administrators, System Administrators, IT Operations Managers
   - references: https://support.microsoft.com/help/5063060

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only