KB5068864 is the cumulative update for Windows Server 2016 and Windows Server 2016 Server Core installation. It was released on 11 November, 2025 under the ‘Patch Tuesday’ release cycle.
Salient points
- KB5068864 supersedes October 2025 cumulative update KB5066836.
- KB5068864 corresponds to build 14393.8594.
- 63 Security vulnerabilities were disclosed by Microsoft in November 2025 security bulletin. 5 of these security vulnerabilities have CRITICAL severity. However, only one CRITICAL security vulnerability affects Windows Server 2016. Brief details of each vulnerability are shared in the vulnerabilities section.
- No zero-day vulnerability has been reported for Windows Server 2016 in October 2025.
- The Servicing Stack Update corresponding to KB5068864 is KB5070247. For automated deployments of security updates (Windows Update and Windows Update for Business), the installation is included in the main cumulative update installation process. For manual patching, you will need to download and install the SSU KB5070247 before installing KB5068864.
Important Reminders
- Support for cumulative updates for Windows Server 2016 will end on 12 January 2027.
- Secure booth certificates for Windows Server 2016 will expire in June 2026, Both UEFI Secure Boot DB and KEK need to be updated with the corresponding new 2023 certificate versions.
Servicing Stack Update KB5070247
KB5070247 is the Servicing Stack Update (SSU) for Windows Server 2016. For automated deployments of KB5068864, KB5070247 is automatically offered for installation as part of the installation of the main cumulative update.
For manual installations of KB5068864, you would need to download and install KB5070247 before installing KB5068864.
You can download the SSU KB5070247 from the Microsoft Update Catalog page:
Installing the Servicing Stack Update would not cause the server to reboot or restart. So, you could directly proceed with the installation of the main cumulative update for Windows Server 2016.
Zero-day Security vulnerabilities
No zero-day vulnerability has been reported for Windows Server 2016 or Windows Server 2016 Server Core installation in November 2025.
Critical vulnerabilities
The November security bulletin for Windows Server 2016 reports 25 security vulnerabilities. There is a single CRITICAL vulnerability affecting Windows Server 2016 are shared below.
| Vulnerability | CVSS | Description |
|---|---|---|
| CVE-2025-60724 | 9.8 | Remote Code Execution in GDI+. |
Download KB5068864
You may download the offline installer file for KB5068864 from the catalog site link shared below:
Upon installation of KB5068864, the server would restart.
Changelog – KB5068864
The following changes or improvements are part of KB5068864 for Windows Server 2016:
- [Internal Windows OS] This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release.
Simplifying technology, one step at a time.