August 12, 2025—KB5063875 (OS Builds 22621.5768 and 22631.5768)

This security update includes quality improvements. Key changes include:

• This build includes all the improvements in Windows 11, version 22H2.

• There are no additional issues documented in this release.

This security update contains fixes and quality improvements from KB5062663 (released July 22, 2025). The following summary outlines key issues addressed by the KB after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.

• [Copilot] Fixed: Improved the Copilot key’s reliability and resolved an issue that prevented users from restarting Copilot after using the key.

If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

For more information about security vulnerabilities, see the Security Update Guide and the August 2025 Security Update.

Symptoms

After installing this security update (KB5063875), attempts to reset or recover the device might fail. This issue occurs when users perform one or more of the following processes:

• System > Recovery > Reset my PC

• System Recovery > Fix problems using Windows Update

• RemoteWipe CSP​​​​​​​

​​​​​​​​​​​​​​Workaround

This issue is addressed in KB5066189.

Symptoms

A security improvement was included in the August 2025 Windows security update and later updates to enforce the requirement that User Account Control (UAC) prompt for administrator credentials when performing Windows Installer (MSI) repair and related operations. This improvement addressed security vulnerability CVE-2025-50173.

After installing the update, standard users might see a User Account Control (UAC) prompt in several scenarios. 

• Running MSI repair commands (such as msiexec /fu).

• Opening Autodesk apps, including some versions of AutoCAD, Civil 3D and Inventor CAM, or when installing an MSI file after a user signs into the app for the first time.

• Installing apps that configure per user.

• Running Windows Installer during Active Setup.

• Deploying packages through Manager Configuration Manager (ConfigMgr) that rely on user-specific "advertising" configurations.

• Enabling Secure Desktop.

If a standard user runs an app that initiates an MSI repair operation without displaying UI, it will fail with an error message. For example, installing and running Office Professional Plus 2010 as a standard user will fail with Error 1730 during the configuration process.

Workaround

The following workarounds are available:

• ​​​​​​​Run the app as an administrator (right-click the app from Start or Search, then select Run as administrator).

• If standard users can’t run apps as administrators, IT admins can apply a special Group Policy using Known Issue Rollback (KIR) to fix the issue on Windows Server 2025, Windows Server 2022, Windows 11 (versions 22H2, 23H2, 24H2), and Windows 10 (versions 21H2, 22H2). To apply this fix, contact Microsoft Support for business. Avoid using other workarounds like disabling related features.

We are working to address this issue by allowing IT admins to permit specific apps to perform MSI repair operations without UAC prompts. This improvement will be released in a future Windows update, and details will be provided as they become available.