KB5061977 (OS Build 26100.4066) Out-of-Band Update for Windows 11 24H2
Out-of-band quality update for Windows 11 version 24H2 (OS Build 26100.4066), released May 27, 2025, fixing a Hyper-V confidential VM stability issue.
Summary
This is a non-security, out-of-band quality update for Windows 11 version 24H2, released on May 27, 2025, bringing the OS to build 26100.4066. It targets a single Hyper-V stability bug affecting confidential virtual machines. A bundled servicing stack update (KB5058523, version 26100.4060) is included. See the full details on Microsoft Support.
Improvements and fixes
- Hyper-V confidential VM stability: Resolves an issue in the direct send path for a guest physical address (GPA) that could cause confidential virtual machines running on Hyper-V with Windows Server 2025 to intermittently stop responding or restart unexpectedly. The problem required manual intervention to recover and primarily affected Azure confidential VMs. This fix improves service availability for those workloads.
Known issues
Microsoft Print to PDF stops working
Symptom: After installing KB5055627, the Microsoft Print to PDF printer may disappear from Settings > Bluetooth & devices > Printers & scanners. Attempting to re-enable the Printing-PrintToPDFServices-Feature may return error code 0x800f0922, blocking reinstallation of the printer driver located in C:\Windows\System32\DriverStore\FileRepository. This affects enterprise customers and IT admins.
Workaround: Microsoft has resolved this issue in KB5060829. As an interim step before applying that update, you can try re-enabling the feature manually. Option 1: press Windows + R, type optional features, and enable Microsoft Print to PDF in the Windows Features dialog. Option 2: open PowerShell as Administrator, run Disable-WindowsOptionalFeature -Online -FeatureName Printing-PrintToPDFServices-Features, then run Enable-WindowsOptionalFeature -Online -FeatureName Printing-PrintToPDFServices-Features. Note that the enable command may still return error code 0x800f0922.
How to get this update
Microsoft bundles the latest servicing stack update (SSU) with the latest cumulative update (LCU), so no separate SSU download is required before installing KB5061977.
Windows Update / Windows Update for Business: The update is available through the standard Windows Update channel for eligible Windows 11 24H2 devices.
Microsoft Update Catalog: Download the standalone package(s) directly. This KB contains more than one MSU file that must be installed in a specific order. Two installation methods are supported:
- Method 1 - Install all MSU files together: Download all MSU files for KB5061977 and place them in a single folder (for example,
C:\Packages). Use DISM with/Add-Package /PackagePathpointing to the target MSU; DISM will discover and install any prerequisite MSU files from the same folder automatically. - Method 2 - Install each MSU file individually in order: First install
windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu, then installwindows11.0-kb5061977-x64_72be6406594d4df1d8d066263c13388c758dc69f.msu.
WSUS: The update is also available through Windows Server Update Services.
Removal note: To remove only the LCU after installing the combined SSU+LCU package, use DISM /online /remove-package with the LCU package name. Running wusa.exe /uninstall on the combined package will not work because the SSU is embedded and cannot be removed after installation.
AI component note: This cumulative update includes AI component updates; however, those components apply only to Windows Copilot+ PCs and will not install on standard Windows PCs or Windows Server.
Frequently asked questions
Does this update apply to Windows Server environments?
KB5061977 is listed as applying to Windows 11 version 24H2. The Hyper-V fix it addresses involves confidential VMs running on Hyper-V with Windows Server 2025, but the update package itself targets Windows 11 24H2 client builds. Sysadmins managing Azure confidential VM host infrastructure should review the associated Windows Server guidance separately.
Is a standalone servicing stack update required before installing this update?
No separate download is needed. Microsoft packages the servicing stack update (KB5058523, version 26100.4060) together with the LCU in a single combined package. When deploying via the Microsoft Update Catalog using DISM, the tool automatically handles prerequisite MSU installation from the same folder.
Can this update be uninstalled if problems arise?
You can remove the LCU portion by using DISM /online /remove-package and specifying the LCU package name, which you can find by running DISM /online /get-packages. The embedded SSU (KB5058523) cannot be removed after installation. Using wusa.exe /uninstall on the combined package is not supported and will not work.
How do I deploy this update to offline or installation media?
For offline images, mount the image and run DISM with /Image:mountdir /Add-Package /PackagePath pointing to the MSU file. For Windows installation media, follow the Update Windows installation media with Dynamic Update guidance. Microsoft notes that any additional Dynamic Update packages downloaded should match the same monthly release as this KB.
