Microsoft Windows Server 2022 Update Version OS Build 20348.4648

KB5073457 updates Windows Server 2022 to OS Build 20348.4648 with the latest security fixes, quality improvements, and non-security updates from the December 2025 preview release. It also includes security hardening for credential autofill and changes to WDS hands-free deployment behavior. Reference IDs: KB5074428, CVE-2025-59287.

• Security hardening restricts certain applications from autofilling credentials during remote support sessions or automated authentication workflows; credential dialogs no longer respond to virtual keyboard input from remote desktop or screen sharing tools.
• WSUS synchronization error details are temporarily removed to address the Remote Code Execution vulnerability CVE-2025-59287.

• Fixes a Citrix host issue where SearchIndexer could stop responding and prevent users from starting remote sessions.
• Updates WinSqlite3.dll to address detections by some security software.
• Addresses credential prompt failures in Azure Virtual Desktop and Windows 365 via later follow-up updates noted in the release.
• Addresses app hangs and errors when opening or saving files to cloud-based storage, including OneDrive and Dropbox, via later follow-up updates noted in the release.
• Addresses shutdown and hibernation failures on some Secure Launch-capable PCs with Virtual Secure Mode enabled via later follow-up updates noted in the release.

• Windows Deployment Services (WDS) stops supporting hands-free deployment functionality by default.

• WSUS does not display synchronization error details after installing KB5070884 or later updates.
• Some devices may fail to shut down or hibernate when Virtual Secure Mode is enabled.
• Apps may become unresponsive or show errors when opening or saving files to cloud-based storage such as OneDrive or Dropbox.
• Credential prompt failures may occur during Remote Desktop connections using the Windows App on some Windows builds, affecting Azure Virtual Desktop and Windows 365.

• Modem drivers agrsm64.sys, agrsm.sys, smserl64.sys, and smserial.sys are removed; modem hardware depending on them will no longer work.
• If security software still flags sqlite3.dll as vulnerable, update the application that uses it; WinSqlite3.dll is a separate Windows component.
• The servicing stack update KB5074428 is included for improved update reliability.
• Microsoft notes that Secure Boot certificates used by most Windows devices are set to expire starting in June 2026 and recommends reviewing the provided guidance.

Product Information

Vendor: Microsoft

Product: Windows Server 2022

Version: OS Build 20348.4648

Release date: Jan 13, 2026