Win Update KB5060842 Windows 11 Cumulative Update build 26100.4349 (24H2) - June 10


UPDATE 6/11:


 Microsoft Support:

June 10, 2025 - KB5060842 (OS Build 26100.4343)​

For information about Windows update terminology, see types of Windows updates and the monthly quality update types. To find an overview, see the update history page for Windows 11, version 24H2.

Follow @WindowsUpdate to find out when new content is published to the Windows release health dashboard.

Windows updates don't install Microsoft Store application updates. If you are an enterprise user. see Microsoft Store apps - Configuration Manager. If you are a consumer user, see Get updates for apps and games in Microsoft Store.


Highlights

  • This update addresses security issues for your Windows operating system.

Improvements

This security update includes improvements that were a part of update KB5058499 (released May 28, 2025). The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.
  • [System Restore] After installing the June 2025 Windows security update, Windows 11, version 24H2 will retain system restore points for up to 60 days. To apply a restore point, select Open System Restore. Restore points older than 60 days are not available. This 60-day limit will also apply to future versions of Windows 11, version 24H2.
  • [Windows Hello] Fixed: This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.
If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

For more information about security vulnerabilities, please refer to the Security Update Guide website and the June 2025 Security Updates.

AI Components

This release updates the following AI components:

AI ComponentVersion
Image Search1.2505.838.0
Content Extraction1.2505.838.0
Semantic Analysis1.2505.838.0

Windows 11 servicing stack update (KB5059502)- 26100.4193​

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.

Known issues in this update

1 Noto fonts issue

Applies to: All users

Symptom
There are reports of blurry or unclear CJK (Chinese, Japanese, Korean) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. The March 2025 Preview Update introduced Noto fonts in collaboration with Google, for CJK languages as fallbacks to improve text rendering when websites or apps don’t specify appropriate fonts. The issue is due to limited pixel density at 96 DPI, which can reduce the clarity and alignment of CJK characters. Increasing the display scaling improves clarity by enhancing text rendering.

Workaround
As a temporary workaround, increase your display scaling to 125% or 150% to improve text clarity. For more information, see Change your screen resolution and layout in Windows.

We are investigating this issue and will provide more information when it is available.

How to get this update

Before you install this update

Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Install this update

To install this update, use one of the following Windows and Microsoft release channels.

AvailableNext Step
Included
This update downloads and installs automatically from Windows Update and Microsoft Update.
Yes (1)Before you install this update

To get the standalone package(s) for this update, go to the Microsoft Update Catalog website. This KB contains one or more MSU files that require installation in a specific order.

Install this update
Method 1: Install all MSU files together


Download all MSU files for KB5058411 from Microsoft Update Catalog and place them in the same folder (for example, C:/Packages). Use Deployment Image Servicing and Management (DISM.exe) to install the target update. DISM will use the folder specified in PackagePath to discover and install one or more prerequisite MSU files as needed. Updating Windows PC

To apply this update to a running Windows PC, run the following command from an elevated Command Prompt:

DISM /Online /Add-Package /PackagePath:c:\packages\Windows11.0-KB5051987-x64.msu

Or, run the following command from an elevated Windows PowerShell prompt:

Add-WindowsPackage -Online -PackagePath "c:\packages\Windows11.0-KB5051987-x64.msu"

Updating Windows Installation media

To apply this update to Windows Installation media, see Update Windows installation media with Dynamic Update.

To add this update to a mounted image, run the following command from an elevated Command Prompt:

DISM /Image:mountdir /Add-Package /PackagePath:Windows11.0-KB5051987-x64.msu

Or, run the following command from an elevated Windows PowerShell prompt:

Add-WindowsPackage -Path "c:\offline" -PackagePath "Windows11.0-KB5051987-x64.msu" -PreventPending

Method 2: Install each MSU file individually, in order

Download and install each MSU file individually either using DISM or Windows Update Standalone Installer in the following order:
  1. windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu
  2. windows11.0-kb5051987-x64_199ed7806a74fe78e3b0ef4f2073760000f71972.msu
1 This latest cumulative update includes updates for AI components. Even though the AI component updates are included in the update, the AI components are only applicable to Windows Copilot+ PCs and will not install on Windows PC or Windows Server.

If you want to remove the LCU

To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.

Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.

File information

For a list of the files provided in this update, download the file information for cumulative update 5060842.

For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5059502) - version 26100.4193.


 Source:



Check Windows Updates


UUP Dump:

64-bit ISO download:

ARM64 ISO download:

 
Last edited:
My point is a limit has been introduced. I accept it might be crazy but if something is not working, you might need to go back further than desirable.

If you need to go back more than 2 months - you have bigger issues than worrying about System Restore.

S
 

My Computer

System One

  • OS
    Windows 11 PRO 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    ASUS
    CPU
    Intel i5-13600K
    Motherboard
    PRIME z790-A
    Memory
    Corsair Vengeance LPX 64GB (2x32GB) (CMK64GX5M2B5600C40)
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    RME UCX-II
    Monitor(s) Displays
    Samsung LN40B530 LCD TV
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung NMVE (990 Pro, 970 EVO)
    PSU
    Seasonic GX750
    Case
    Coolermaster CM-690II
    Cooling
    Noctua
    Keyboard
    Logitech MX Keys
    Mouse
    Logitech M510
    Internet Speed
    1 GBPS+
    Browser
    MS Edge
    Antivirus
    Windows Defender
So will it automatically make a new system restore point after 60 days when it deletes the old ones? Otherwise we'd have to keep remembering to occasionally do a system restore point.
Apparently, the restore points will permanently disappear after 60 days. What I gather is that this is being done because Microsoft does not want to have earlier restore points that would undo its latest updates to the OS--just my opinion, of course. Go back beyond 60 days, and then we'll be dinged by Win update to install updates all over again. But I think that 60 days should be sufficient, as I only use system restore immediately before installing software that I judge might be problematic in some way. Often, I forget to use it at all, unfortunately!....;)
 

My Computer

System One

  • OS
    Win11 Release Preview channel
    Computer type
    PC/Desktop
    Manufacturer/Model
    a cherry-picked assembly
    CPU
    AMD R7 7800X3D
    Motherboard
    x870e Aorus Master Rev 1.0, bios F4i
    Memory
    2x 16GB 6400MT/s
    Graphics Card(s)
    AMD RX-6900 XT
    Sound Card
    Creative Labs G6 USB External Sound device, Gaming DAC, Sound Card & Earphone AMP.. HIGHLY RECOMMENDED, btw. Totally changed my opinion of external USB sound. I like!...;)
    Monitor(s) Displays
    Philips 43" Momentum DisplayHDR 1000-certified
    Screen Resolution
    3840x2160
    Hard Drives
    Boot: Samsung 980 Pro PCIe4 2TB NVMe| 980 Pro 500GB NVMe| ST4000DM004 S3 4TB| 8 TB Toshiba X300 S3
    PSU
    Gigabyte 850W Gold, Rev 2
    Case
    Lian Li 216 Lancool
    Cooling
    Air coutesy Lian Li
    Keyboard
    Non-mechanical (mechanicals are too small for my hands)
    Mouse
    Razer Basilisk V2 20k DPI
    Internet Speed
    ~850Mbps down and up!
    Browser
    Firefox x64 DE
    Antivirus
    Defender
    Other Info
    Great New system. Exceeds my expectations by quite a bit, btw.

My Computer

System One

  • OS
    Win11 Release Preview channel
    Computer type
    PC/Desktop
    Manufacturer/Model
    a cherry-picked assembly
    CPU
    AMD R7 7800X3D
    Motherboard
    x870e Aorus Master Rev 1.0, bios F4i
    Memory
    2x 16GB 6400MT/s
    Graphics Card(s)
    AMD RX-6900 XT
    Sound Card
    Creative Labs G6 USB External Sound device, Gaming DAC, Sound Card & Earphone AMP.. HIGHLY RECOMMENDED, btw. Totally changed my opinion of external USB sound. I like!...;)
    Monitor(s) Displays
    Philips 43" Momentum DisplayHDR 1000-certified
    Screen Resolution
    3840x2160
    Hard Drives
    Boot: Samsung 980 Pro PCIe4 2TB NVMe| 980 Pro 500GB NVMe| ST4000DM004 S3 4TB| 8 TB Toshiba X300 S3
    PSU
    Gigabyte 850W Gold, Rev 2
    Case
    Lian Li 216 Lancool
    Cooling
    Air coutesy Lian Li
    Keyboard
    Non-mechanical (mechanicals are too small for my hands)
    Mouse
    Razer Basilisk V2 20k DPI
    Internet Speed
    ~850Mbps down and up!
    Browser
    Firefox x64 DE
    Antivirus
    Defender
    Other Info
    Great New system. Exceeds my expectations by quite a bit, btw.
I only use system restore immediately before installing software that I judge might be problematic in some way.

As do I.

Sys Restore (to me) was never intended to be a "return to a distant point in the distant past' kinda thing.

It is an ideal way to "return to a state 10 minutes ago now that this file is acting up" kinda thing.

If I ever needed to go wayyyyy back - I would restore a Macrium full system image and forget about Sys Restore all together.

S
 

My Computer

System One

  • OS
    Windows 11 PRO 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    ASUS
    CPU
    Intel i5-13600K
    Motherboard
    PRIME z790-A
    Memory
    Corsair Vengeance LPX 64GB (2x32GB) (CMK64GX5M2B5600C40)
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    RME UCX-II
    Monitor(s) Displays
    Samsung LN40B530 LCD TV
    Screen Resolution
    1920x1080
    Hard Drives
    Samsung NMVE (990 Pro, 970 EVO)
    PSU
    Seasonic GX750
    Case
    Coolermaster CM-690II
    Cooling
    Noctua
    Keyboard
    Logitech MX Keys
    Mouse
    Logitech M510
    Internet Speed
    1 GBPS+
    Browser
    MS Edge
    Antivirus
    Windows Defender
So will it automatically make a new system restore point after 60 days when it deletes the old ones? Otherwise we'd have to keep remembering to occasionally do a system restore point.

The note doesn't say that. It just says that anything older that 60 days will be disposed of. Typical of MS to think through the issue. /S

Perhaps they will have a "policy" (as in standard) that the last restore point is not removed no matter how old. Or maybe they'll just leave everyone who doesn't create regular System Restore points hanging - whoops, time to reinstall or invest even more days trying to fix what went wrong.

I agree that using a 60 day old Restore Point is not advisable. OTOH, it can sometimes be an option of last resort before reinstalling Windows. Seems rather arrogant of MS to remove them if the user is willing to reserve disk space to store older points.
 

My Computer

System One

  • OS
    Windows 11 Pro 24H2
    Computer type
    Laptop
    Manufacturer/Model
    HP
    CPU
    Intel Ultra 7 155H
    Memory
    16gb
    Graphics Card(s)
    Intel Arc integrated
    Hard Drives
    SSD
nah that is normal broken windows update does that sometimes had similar issue with this update where from 80 to 100% it took 45 mins.. i guess it redownloaded whole iso to repair
When I had slowness like that, checked the SSD health and sure enough, the SMART reported bad blocks! I saw something like that with a faulty PNY CS900 SSD.
Also, if you have a Samsung 870 Evo, it's faulty, 99.9 percent!

TMK, it doesn't take nearly that long, if it's the usual bugs, especially like what 22H2 and 23H2 had.

In the normal broken Windows update cases, it would be running the restorehealth option, reboot, uninstall the LCU, reboot then reinstall the LCU.
I had to do that multiple times with 23H2.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2
    Computer type
    PC/Desktop
    CPU
    Ryzen 9 5900X
    Motherboard
    ASRock B550 PG Velocita (UEFI-BIOS P3.40)
    Memory
    64 GB G.Skill RipJaws V F4-3200C16D-64GVK
    Graphics Card(s)
    Sparkle Titan Arc A770 16 GB
    Monitor(s) Displays
    Alienware AW3423DWF OLED ultrawide
    Hard Drives
    Western Digital Black SN850 1 TB NVMe SSD
    PSU
    eVGA Supernova 750 G3
    Case
    Corsair 275R
    Internet Speed
    VTel FTTH 1 Gb down and 1 Gb up
  • Computer type
    PC/Desktop
    CPU
    Ryzen 7 5800X3D
    Motherboard
    Asus ROG Strix B550-F Gaming (UEFI-BIOS version 3607)
    Memory
    32 GB (2x16 GB G.Skill TridentZ Neo)
    Graphics card(s)
    Sapphire Nitro+ Radeon RX 6750 XT
    Hard Drives
    Samsung 970 Pro 512 GB NVMe SSD
    PSU
    eVGA Supernova 650 GQ
    Case
    Fractal Focus G
i checked my ssd and still is ok
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    -
    CPU
    4770k
    Motherboard
    Asus Maximus Formula VI
    Memory
    16 gb Kingston
    Graphics Card(s)
    2070 super
So is it possible to somehow automate setting a restore point once a month for example? In case you forget to manually set one every 60 days.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion 14-ce3514sa
    CPU
    Core i5
    Memory
    16gb
    Hard Drives
    Samsung 970 evo plus 2TB
    Cooling
    Could be better
    Internet Speed
    200mbps Starlink
    Browser
    Firefox
    Other Info
    Originally installed with a 500gb H10 Optane ssd
This CU installed OK on both my systems, System 2 checked OK with DISM online and SFC but DISM on System 1 took 30 minutes to complete and found corruption with SFC that was repaired.
sfc/scannow fine on mine but that was just this one update. I now have KB5063060 showing. But think I'll leave it until it insists on updating.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion 14-ce3514sa
    CPU
    Core i5
    Memory
    16gb
    Hard Drives
    Samsung 970 evo plus 2TB
    Cooling
    Could be better
    Internet Speed
    200mbps Starlink
    Browser
    Firefox
    Other Info
    Originally installed with a 500gb H10 Optane ssd
So is it possible to somehow automate setting a restore point once a month for example? In case you forget to manually set one every 60 days.
Yes.
 

My Computers

System One System Two

  • OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer Aspire 3 A315-23
    CPU
    AMD Athlon Silver 3050U
    Memory
    8GB
    Graphics Card(s)
    Radeon Graphics
    Monitor(s) Displays
    laptop screen
    Screen Resolution
    1366x768 native resolution, up to 2560x1440 with Radeon Virtual Super Resolution
    Hard Drives
    1TB Samsung EVO 870 SSD
    Internet Speed
    150 Mbps
    Browser
    Edge, Firefox
    Antivirus
    Defender
    Other Info
    fully 'Windows 11 ready' laptop. Windows 10 C: partition migrated from my old unsupported 'main machine' then upgraded to 11. A test migration ran Insider builds for 2 months. When 11 was released on 5th October 2021 it was re-imaged back to 10 and was offered the upgrade in Windows Update on 20th October. Windows Update offered the 22H2 Feature Update on 20th September 2022. It got the 23H2 Feature Update on 4th November 2023 through Windows Update, and 24H2 on 3rd October 2024 through Windows Update by setting the Target Release Version for 24H2.

    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB NVMe ssd, supported device running Windows 11 Pro.

    My SYSTEM FOUR is a 2-in-1 convertible Lenovo Yoga 11e 20DA, Celeron N2930, 8GB RAM, 256GB ssd. Unsupported device: currently running Win10 Pro, plus Win11 Pro RTM and Insider Dev, Beta, and RP 24H2 as native boot vhdx.

    My SYSTEM FIVE is a Dell Latitude 3190 2-in-1, Pentium Silver N5030, 8GB RAM, 512GB NVMe ssd, supported device running Windows 11 Pro, plus Insider Beta, Dev, and Canary builds (and a few others) as a native boot .vhdx.

    My SYSTEM SIX is a Dell Latitude 5550, Core Ultra 7 165H, 64GB RAM, 1TB NVMe SSD, supported device, Windows 11 Pro 24H2, Hyper-V host machine.
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell Latitude E4310
    CPU
    Intel® Core™ i5-520M
    Motherboard
    0T6M8G
    Memory
    8GB
    Graphics card(s)
    (integrated graphics) Intel HD Graphics
    Screen Resolution
    1366x768
    Hard Drives
    500GB Crucial MX500 SSD
    Browser
    Firefox, Edge
    Antivirus
    Defender
    Other Info
    unsupported machine: Legacy bios, MBR, TPM 1.2, upgraded from W10 to W11 using W10/W11 hybrid install media workaround. In-place upgrade to 22H2 using ISO and a workaround. Feature Update to 23H2 by manually installing the Enablement Package. In-place upgrade to 24H2 using hybrid 23H2/24H2 install media. Also running Insider Beta, Dev, and Canary builds as a native boot .vhdx.

    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB NVMe ssd, supported device running Windows 11 Pro.

    My SYSTEM FOUR is a 2-in-1 convertible Lenovo Yoga 11e 20DA, Celeron N2930, 8GB RAM, 256GB ssd. Unsupported device: currently running Win10 Pro, plus Win11 Pro RTM and Insider Dev, Beta, and RP 24H2 as native boot vhdx.

    My SYSTEM FIVE is a Dell Latitude 3190 2-in-1, Pentium Silver N5030, 8GB RAM, 512GB NVMe ssd, supported device running Windows 11 Pro, plus Insider Beta, Dev, and Canary builds (and a few others) as a native boot .vhdx.

    My SYSTEM SIX is a Dell Latitude 5550, Core Ultra 7 165H, 64GB RAM, 1TB NVMe SSD, supported device, Windows 11 Pro 24H2, Hyper-V host machine.
So is it possible to somehow automate setting a restore point once a month for example? In case you forget to manually set one every 60 days.

Yes.

@Hazel123 - Just note that if you follow the pointer that @Bree posted, you need to read through until the end and "Schedule a Task" to run a command periodically create the Restore Point.
 

My Computer

System One

  • OS
    Windows 11 Pro 24H2
    Computer type
    Laptop
    Manufacturer/Model
    HP
    CPU
    Intel Ultra 7 155H
    Memory
    16gb
    Graphics Card(s)
    Intel Arc integrated
    Hard Drives
    SSD

Latest Support Threads

Back
Top Bottom