June 10, 2025 Hotpatch KB5060525 (OS Build 20348.3745) for Windows Server 2022
A June 10, 2025 security hotpatch for Windows Server 2022 Datacenter: Azure Edition, bringing OS build 20348.3745 with miscellaneous internal security improvements.
Summary
This is a security hotpatch for Windows Server 2022 Datacenter: Azure Edition, released on June 10, 2025, bringing the OS to build 20348.3745. It delivers miscellaneous security improvements to internal OS functionality. No additional issues are documented in this release. Full details are available from Microsoft Support.
Improvements and fixes
- This update addresses miscellaneous security improvements to internal OS functionality. Microsoft documents no additional issues fixed or changed beyond this general security hardening work.
Known issues
Microsoft lists no known issues for this update at the time of writing.
How to get this update
Microsoft now bundles the latest servicing stack update (SSU) with the hotpatch package. If you are using Windows Update or Windows Server Update Services (WSUS), the SSU installs automatically alongside this update. The associated SSU is KB5058531, version 20348.3691. Devices that already have earlier updates installed will only download and install the new content contained in this package.
This update is available through the following channels:
- Windows Update and Microsoft Update - downloads and installs automatically.
- Windows Update Catalog - available for manual download.
- Windows Server Update Services (WSUS) - syncs automatically when Products and Classifications are configured as follows: Product set to "Server 2022 Hotpatch Category" and Classification set to "Security Updates".
For a full file list, download the file information for cumulative update KB5060525. For SSU file details, download the file information for KB5058531 (version 20348.3691).
Frequently asked questions
What is a hotpatch update and how does it differ from a regular cumulative update?
A hotpatch is a security update that patches in-memory code on running processes without requiring a system restart in most cases. It targets Windows Server 2022 Datacenter: Azure Edition specifically. Regular cumulative updates replace files on disk and typically require a reboot to take effect. Hotpatches help reduce downtime in production server environments.
Do I need to install the servicing stack update separately before applying KB5060525?
No. Microsoft now combines the latest SSU with the hotpatch package. If you deploy through Windows Update or WSUS, the SSU (KB5058531, version 20348.3691) installs automatically as part of the same operation. You do not need to stage it separately before applying this hotpatch.
Which WSUS product and classification settings are required to receive this update?
In your WSUS configuration, set the Product to "Server 2022 Hotpatch Category" and the Classification to "Security Updates". Without both settings in place, WSUS will not sync or offer KB5060525 to eligible servers in your environment.
Does this update apply to all editions of Windows Server 2022?
No. According to Microsoft, KB5060525 applies only to Windows Server 2022 Datacenter: Azure Edition. Other editions of Windows Server 2022, such as Standard or the non-Azure Datacenter edition, are not in scope for this hotpatch release.