Microsoft has released an out-of-band update, KB5062170, for both Windows 11 23H2 and 22H2, which resolves an issue related to the recovery error code 0xc0000098 while installing the May 2025 Windows security update.

The update is cumulative and does not include any new security fixes beyond those provided in the May 2025 Windows security update. It is advisable to implement this update on systems that have not yet installed the May 2025 Windows security update, including devices operating within a virtual desktop infrastructure. The update introduces enhancements to the servicing stack, the component responsible for installing Windows updates. This update guarantees a strong and dependable servicing stack for devices to obtain and implement Microsoft updates. The update necessitates a device restart and is not relevant for systems that have successfully implemented the May 2025 Windows security update.

May 31, 2025—KB5062170 (OS Builds 22621.5415 and 22631.5415 Out-of-band

Improvements

This article lists the fixed issues and quality improvements included in this out-of-band update.

Windows 11, version 23H2

Important: Use EKB  KB5027397 to update to Windows 11, version 23H2.

This non-security update includes quality improvements. When you install this KB:

• This update addresses an issue where some customers encountered a recovery error with error code 0xc0000098 while installing the May 2025 Windows security update ( KB5058405) on Windows 11, version 22H2 and 23H2 devices. This update will not install on systems that successfully applied   KB5058405.
  
  ​​​​​​​This out-of-band (OOB) update includes all improvements and fixes from the May 2025 Windows non-security preview update (KB5058502), along with a resolution for this specific issue. Because it is cumulative, you don’t need to install any previous updates—it supersedes all prior updates for affected versions. This update doesn’t contain any new security fixes beyond those included in the May 2025 Windows security update. Installing this OOB update will require a device restart.

  Note: If you have not yet deployed the May 2025 Windows security update ( KB5058405) and your IT environment includes devices running in a virtual desktop infrastructure—such as Azure Virtual Machines, Azure Virtual Desktop, and on-premises virtual machines hosted on Citrix or Hyper-V— it’s recommended to apply this out-of-band update instead.

​​​​​​​​​​​​​​​​​​​​​If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

Windows 11, version 22H2

This non-security update includes quality improvements. When you install this KB:

• This update addresses an issue where some customers encountered a recovery error with error code 0xc0000098 while installing the May 2025 Windows security update ( KB5058405) on Windows 11, version 22H2 and 23H2 devices. This update will not install on systems that successfully applied  KB5058405.
  
  This out-of-band (OOB) update includes all improvements and fixes from the May 2025 Windows non-security preview update (KB5058502), along with a resolution for this specific issue. Because it is cumulative, you don’t need to install any previous updates—it supersedes all prior updates for affected versions. This update doesn’t contain any new security fixes beyond those included in the May 2025 Windows security update. Installing this OOB update will require a device restart.

  Note: If you have not yet deployed the May 2025 Windows security update ( KB5058405) and your IT environment includes devices running in a virtual desktop infrastructure—such as Azure Virtual Machines, Azure Virtual Desktop, and on-premises virtual machines hosted on Citrix or Hyper-V— it’s recommended to apply this out-of-band update instead.

​​​​​​​​​​​​​​​​​​​​​If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

Windows 11 servicing stack update (KB5058546) - 22621.5412 and 22631.5412

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see  Simplifying on-premises deployment of servicing stack updates.

May 31, 2025—KB5062170 (OS Builds 22621.5415 and 22631.5415 Out-of-band - Microsoft Support