KB5062170: Windows 11 Out-of-Band Update for OS Builds 22621.5415 and 22631.5415 (May 31, 2025)

Summary

KB5062170 is a non-security out-of-band (OOB) update for Windows 11 versions 22H2 and 23H2, producing OS builds 22621.5415 and 22631.5415. Released on May 31, 2025, it resolves a boot recovery failure triggered by the May 2025 security update and rolls in all fixes from the May 2025 non-security preview update. See Microsoft Support for the official page.

Improvements and fixes

• Fixes an issue where some devices encountered recovery error code 0xc0000098 during installation of the May 2025 Windows security update (KB5058405) on Windows 11 versions 22H2 and 23H2. Devices that successfully installed KB5058405 do not need this update.
• Incorporates all quality improvements and fixes included in the May 2025 Windows non-security preview update (KB5058502), in addition to the resolution for the 0xc0000098 error.
• Because this is a cumulative update, no previously released updates need to be installed first - it supersedes all prior updates for the affected versions.
• Adds no new security fixes beyond those already delivered in the May 2025 Windows security update (KB5058405).
• Requires a device restart to complete installation.
• Microsoft recommends that IT environments running virtual desktop infrastructure - including Azure Virtual Machines, Azure Virtual Desktop, and on-premises virtual machines hosted on Citrix or Hyper-V - apply this OOB update instead of KB5058405 if that security update has not yet been deployed.

Known issues

Blurry CJK text in Chromium-based browsers at 96 DPI

Symptom: Some users see blurry or unclear Chinese, Japanese, and Korean (CJK) text when their display is set to 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. The March 2025 Preview Update introduced Noto fonts in collaboration with Google as CJK fallback fonts to improve text rendering when websites or apps do not specify appropriate fonts. The blurriness occurs because limited pixel density at 96 DPI reduces the clarity and alignment of CJK characters. Increasing display scaling improves clarity by enhancing text rendering.

Workaround: Microsoft has shared its findings on the blurry text issue at 96 DPI, along with potential solutions, with Google for further discussion. Users can report issues related to Noto CJK fonts through the official Google Noto Fonts GitHub repository for additional support.

How to get this update

Microsoft combines the latest servicing stack update (SSU) for the operating system with the latest cumulative update (LCU) in a single package. The SSU for this release is KB5058546, producing servicing stack versions 22621.5412 and 22631.5412.

This update is available through the following channels:

• Windows Update - available automatically for eligible devices.
• Windows Update for Business - available for managed environments.
• Microsoft Update Catalog - download the standalone package directly from the Catalog for manual or scripted deployment.
• Windows Server Update Services (WSUS) - available for on-premises WSUS infrastructure.

If you need to remove only the LCU after installing the combined SSU and LCU package, use the DISM /online /remove-package command with the LCU package name as the argument. You can retrieve the package name with DISM /online /get-packages. Using wusa.exe /uninstall on the combined package will not work because the SSU component cannot be removed after installation.

Frequently asked questions

Do I need to install KB5062170 if KB5058405 already applied successfully?

No. Microsoft states that it is not necessary to install KB5062170 on systems that successfully applied the May 2025 security update (KB5058405). This OOB update is targeted at devices that encountered the 0xc0000098 recovery error during that installation, or at environments where KB5058405 has not yet been deployed.

Does this update introduce new security fixes?

No. KB5062170 does not contain any new security fixes beyond those already included in the May 2025 Windows security update (KB5058405). It is a non-security cumulative update that bundles the May 2025 non-security preview fixes (KB5058502) together with the resolution for the boot recovery failure.

Should virtual desktop infrastructure environments use this update instead of KB5058405?

Yes, according to Microsoft. If KB5058405 has not yet been deployed and the environment includes Azure Virtual Machines, Azure Virtual Desktop, or on-premises virtual machines hosted on Citrix or Hyper-V, Microsoft recommends applying KB5062170 instead of the original May 2025 security update.

Do I need to install previous updates before applying KB5062170?

No. Because KB5062170 is cumulative, it supersedes all prior updates for Windows 11 versions 22H2 and 23H2. There is no need to install earlier updates first. The servicing stack update (KB5058546) is bundled in the same package, so no separate SSU pre-installation step is required.