KB5058411 - Windows 11 Version 24H2 Security Update (OS Build 26100.4061)
May 13, 2025 security update for Windows 11 version 24H2, bringing OS build 26100.4061 with audio, Eye Controller, and SBAT fixes.
Summary
KB5058411 is the May 13, 2025 monthly security cumulative update for Windows 11 version 24H2, bringing the OS to build 26100.4061. Released on May 13, 2025, it addresses security issues across the operating system and includes several quality fixes first introduced in the April 25, 2025 preview update KB5055627. Source: Microsoft Support.
Highlights
- This update addresses security issues for the Windows operating system.
Improvements and fixes
This update carries forward improvements from KB5055627 (released April 25, 2025) and adds the following fixes:
- Audio: Resolves an issue where microphone audio could mute unexpectedly.
- Eye Controller: Fixes a bug that prevented the Eye Controller app from launching.
- Secure Boot Advanced Targeting (SBAT) and Linux EFI: Applies improvements to SBAT for detecting Linux systems.
- AI components updated: Image Search, Content Extraction, and Semantic Analysis are each updated to version 1.7.824.0. These AI component updates apply only to Windows Copilot+ PCs and will not install on standard Windows PCs or Windows Server.
- Servicing stack update included: Windows 11 servicing stack update KB5058523 (version 26100.4060) is bundled, improving the component responsible for installing Windows updates.
Known issues
Blurry CJK text in Chromium-based browsers (Noto fonts)
Symptom: Users may see blurry or unclear CJK (Chinese, Japanese, Korean) text when it is displayed at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. The March 2025 Preview Update introduced Noto fonts in collaboration with Google as CJK fallback fonts to improve text rendering when websites or apps do not specify appropriate fonts. The problem is caused by limited pixel density at 96 DPI, which can reduce the clarity and alignment of CJK characters. Increasing display scaling improves clarity by enhancing text rendering.
Workaround: Microsoft has shared its findings on the blurry text issue at 96 DPI, along with potential solutions, with Google for further discussion. Users can report issues related to Noto CJK fonts through the official Google Noto Fonts GitHub repository.
Microsoft Print to PDF printer missing or fails to install
Symptom: Applies to enterprise customers and IT admins. After installing KB5055627, the Microsoft Print to PDF printer may no longer appear under Settings > Bluetooth & devices > Printers & scanners. Attempting to enable the Printing-PrintToPDFServices-Feature may return error code 0x800f0922, which prevents installation of the Microsoft Print to PDF printer driver located in C:\Windows\System32\DriverStore\FileRepository. As a temporary workaround, you can try re-enabling the feature using one of these options:
- Option 1: Press Windows + R, type
optional features, and enable Microsoft Print to PDF in the Windows Features dialog. - Option 2: Open PowerShell as Administrator and run
Disable-WindowsOptionalFeature -Online -FeatureName Printing-PrintToPDFServices-Featuresfollowed byEnable-WindowsOptionalFeature -Online -FeatureName Printing-PrintToPDFServices-Features. Note that the final command may still return error code 0x800f0922.
Workaround: This issue is fully addressed in KB5060829.
How to get this update
Microsoft combines the latest servicing stack update (SSU) with the latest cumulative update (LCU) in a single package. No separate SSU installation is required before applying this update.
- Windows Update / Microsoft Update: The update downloads and installs automatically.
- Windows Update for Business: Deploys automatically in accordance with configured policies.
- Microsoft Update Catalog: Download the standalone package and install using DISM or the Windows Update Standalone Installer. Two MSU files are available; they can be installed together by placing both in the same folder and pointing DISM at that folder with
/Add-Package, or installed individually in order:windows11.0-kb5043080-x64first, thenwindows11.0-kb5058411-x64. - Windows Server Update Services (WSUS): Syncs automatically when Products is set to Windows 11 and Classification is set to Security Updates.
To remove the LCU after installation, use DISM /online /remove-package with the LCU package name. Running wusa.exe /uninstall against the combined package will not work because it contains the SSU, and the SSU cannot be removed after installation.
Frequently asked questions
Does this update include a servicing stack update, and do I need to install it separately?
No separate installation is needed. KB5058523 (servicing stack version 26100.4060) is bundled directly into the combined package. DISM handles the ordering automatically when you point it at the folder containing all downloaded MSU files, so the servicing stack component installs before the cumulative update.
Will the AI component updates in this package install on all Windows 11 devices?
No. The AI component updates for Image Search, Content Extraction, and Semantic Analysis (all version 1.7.824.0) are included in the package but will only install on Windows Copilot+ PCs. They will not install on standard Windows PCs or Windows Server machines, so no action is required to prevent them on non-Copilot+ hardware.
The Print to PDF printer disappeared after a recent update - is there a fix in KB5058411?
The Print to PDF issue was introduced by KB5055627. KB5058411 does not itself resolve this problem. The full resolution is delivered by KB5060829. As a temporary measure, you can attempt to re-enable the Printing-PrintToPDFServices-Feature via Windows Features or PowerShell, though error 0x800f0922 may still occur.
How do I apply this update to offline Windows installation media?
Download the MSU from the Microsoft Update Catalog and use DISM with the /Image:mountdir /Add-Package switch against a mounted image, or use Add-WindowsPackage with the -PreventPending flag in PowerShell. Microsoft also recommends using Dynamic Update packages from the same monthly release when updating installation media, or the most recently published version if a same-month package is unavailable.
