Microsoft releases emergency hotfix for Windows 10’s May update issues

Yesterday, Microsoft released an important out-of-band update for Windows 10, identified as update KB5061768. An out-of-band update is one that’s released outside the usual update schedule, which is typically done to address urgent security issues that can’t wait.

This critical repair update is only available for download via the Microsoft Update Catalog, and it’s intended for PCs running Windows 10 (versions 1903 and later) and Windows 10 LTSB, for both x86 and x64 systems. The download size varies between 415 MB and 711 MB.

Who needs the KB5061768 update?

Only Windows 10 users who are affected by the known BitLocker issue and/or blue screen crashes (which started with May’s big Windows 10 patch) should download and install update KB5061768.

To recap, affected Windows 10 PCs fail to start because they erroneously require your BitLocker recovery key to be entered. Furthermore, affected PCs that can log in encounter blue screen crashes.

According to Microsoft, only Windows 10 PCs with activated Intel Trusted Execution Technology (TXT) on 10th-generation Intel vPro processors or higher should be affected.

Microsoft writes the following about this update:

“Fixed: A known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th-generation or later Intel vPro processors. On these systems, installing the May 13, 2025, Windows security update (KB5058379) might cause the Local Security Authority Subsystem Service (LSASS) process to terminate unexpectedly, triggering an Automatic Repair prompting for the BitLocker recovery key to continue.”

How to apply the update if your PC is affected and can’t log in

If you can’t install update KB5061768 on your affected Windows 10 PC because it no longer starts properly, Microsoft advises that you switch off Intel VT for Direct I/O (VTD or VTX) and Intel Trusted Execution Technology (TXT) in the BIOS/UEFI.

After doing that, Windows 10 should start again and you can apply the patch after entering your BitLocker recovery key. After restarting your computer, you can re-enable Intel VT for Direct I/O (VTD or VTX) and TXT in the BIOS/UEFI.

Further reading: How to save your Windows 10 PC after end-of-support