How to fix KB5060842 fails to install in Windows 11?

KB5060842 is the security update of 10 June 2025 for Windows 11 version 24H2. Some PCs could not install it, and PCs with Easy Anti-Cheat were never offered it. Today you do not need it by name: restart and install the newest update Windows offers.

Facts checked on 15 October 2026. Steps written for Windows 11 (24H2, 25H2 and 26H2).

What Windows update KB5060842 is

KB5060842 is the monthly security update that Microsoft released on 10 June 2025 for Windows 11 version 24H2. It moves the PC to OS build 26100.4349. Microsoft's page names one highlight only: it addresses security issues. It also carries the fixes of the May 2025 preview update KB5058499.

Like every 24H2 update since 2024, it is a combined package: the cumulative update plus a servicing stack update, KB5059502, which is the part of Windows that installs updates. One visible change came with it: Windows 11 24H2 now keeps System Restore points for up to 60 days, and older points are not available.

Why KB5060842 fails to install or does not show up

Microsoft confirmed no install failure for KB5060842. What it did confirm is a game problem: the update made Windows restart when games with Easy Anti-Cheat opened, so Microsoft did not offer it to those PCs. The other causes are the usual ones for a cumulative update, ordered here by how likely they are.

KB5060842 issues that Microsoft confirmed

Besides the Easy Anti-Cheat problem, Microsoft lists three known issues on the KB5060842 page. None of them stops the install itself, and the one with a fix is solved by a later update.

How to check whether KB5060842 is installed and where it failed

Before you repair anything, check what the PC really has. Update history can still show an old failure after a later update installed well, and the build number settles it.

1. Press Win + R, type winver and press Enter. Read the OS build.
2. A build of 26100.4349 or higher means KB5060842 or a newer update is installed. Nothing is missing.
3. Open Settings > Windows Update > Update history and note the date and code of the failed attempt.
4. Press Win + R, type %windir%\Logs\CBS and press Enter. Copy CBS.log to the Desktop and open the copy in Notepad.
5. Press Ctrl + F, search for rollback or error and read the lines at the time of the failure. They name the step that failed.

How to fix KB5060842 failing to install

Fix 1 solves most cases, because the update you need today is not KB5060842 any more. Fix 2 explains the Easy Anti-Cheat case, where nothing is broken. Fix 3 installs the package by hand. Fix 4 to Fix 6 repair Windows Update and the system files. Fix 7 reinstalls Windows over itself and keeps your files.

Fix 1. Restart and install the newest cumulative update instead

10 to 30 minutesNo riskEveryone, first. Above all if KB5060842 still shows as failed in Update history.

Windows Update no longer needs KB5060842 by name. The current cumulative update for 24H2, KB5127648, includes its content and every fix since, and it comes with a newer servicing stack.

1. Save your work and select Start > Power > Restart. Use Restart, not Shut down.
2. Open Settings > Windows Update and select Check for updates.
3. Install everything offered. If KB5060842 is still listed with Retry, check for updates once more: the newer update usually replaces it.
4. Restart when Windows asks.
5. Press Win + R, type winver and press Enter, and read the OS build.

Fix 2. Check whether Easy Anti-Cheat made Windows skip KB5060842

5 minutesNo riskKB5060842 never shows up in Windows Update, and a game that uses Easy Anti-Cheat is installed.

Microsoft found that KB5060842 could make Windows restart when such games opened, so it did not offer the update to devices with Easy Anti-Cheat. Those PCs got the out-of-band KB5063060 (build 26100.4351), which includes KB5060842 and the fix.

1. Open Settings > Windows Update > Update history.
2. Under Quality Updates, look for KB5063060 or any later cumulative update.
3. If one is listed as successfully installed, KB5060842 is already inside it. Stop here.
4. If neither is there, go back to Settings > Windows Update and select Check for updates.
5. Install what is offered, restart, and confirm with winver that the build is 26100.4351 or higher.

Replacement

KB5063060, out-of-band, 11 June 2025, OS build 26100.4351

Offered to

Devices with Easy Anti-Cheat, and devices that had not installed KB5060842 yet

Channel

Windows Update and Microsoft Update only. Microsoft lists it as not included in the Update Catalog or WSUS.

Fix 3. Install the update by hand from the Microsoft Update Catalog

20 to 40 minutesLow riskWindows Update keeps failing at the same point, or the PC cannot reach Windows Update.

The catalog gives the full package and installs it outside the Windows Update client. Microsoft's KB5060842 page says the update has two MSU files that go in order: a checkpoint update, KB5043080, and then KB5060842.

1. Find the KB number. Open Settings > Windows Update. A failed or pending update is listed with its KB number; earlier ones are under Update history.
2. Check the processor type. Open Settings > System > About and look at System type: an x64-based PC needs the x64 file, an ARM-based PC (for example Snapdragon) needs the arm64 file.
3. Search the catalog. Open the Microsoft Update Catalog at catalog.update.microsoft.com in your browser, type the KB number (for example KB5124010) in the search box and press Enter.
4. Pick the right row. Find the row whose title names your Windows version and your processor type (x64-based or arm64-based) and select Download on that row.
5. Download every file listed. A window lists one or more .msu links. Download all of them into one empty folder, for example C:\packages. On Windows 11 24H2 and later the list can include earlier checkpoint updates that the new one needs.
6. Install a single file. If there is only one file, double-click it and confirm the installation in the Windows Update Standalone Installer.
7. Install several files with DISM. If there are several files, open an elevated Terminal or Command Prompt and run DISM with the newest file. DISM finds the other files in the same folder and installs them in the right order.

   DISM /Online /Add-Package /PackagePath:C:\packages\<newest-file>.msu

8. Restart. Restart the PC when the installation finishes, then run winver again: the OS build should have changed.

These steps were written for Windows 11 24H2 and later; Windows 10 22H2. The full page with the other versions and what each result means: Install an update from the Microsoft Update Catalog

If you do want KB5060842 itself, download both MSU files into one folder, for example C:\Packages, and run this in Command Prompt as administrator. DISM finds the prerequisite file in the same folder.

DISM /Online /Add-Package /PackagePath:C:\Packages\windows11.0-kb5060842-x64_07871bda98c444c14691e0a90560306703b739cf.msu

• To install the files one by one instead, run windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu first and the KB5060842 file second.
• Search the catalog for the newest KB, not for KB5060842. An update from June 2025 only adds a step, and the newest one replaces it anyway.

Fix 4. Check that the Windows Update services run

5 minutesNo riskDownloads never start, stay at 0 %, or Windows Update says it cannot check for updates.

Windows Update needs three services: Windows Update, Background Intelligent Transfer Service and Cryptographic Services. If one is disabled by a tuning tool or a policy, every update fails, KB5060842 included.

1. Press Win + R, type services.msc and press Enter.
2. Find Windows Update. If its status is Running, right-click it and select Restart.
3. If it is not running, double-click it, set Startup type to Manual or Automatic, select Start, then Apply and OK.
4. Do the same for Background Intelligent Transfer Service and Cryptographic Services.
5. Open Settings > Windows Update and select Check for updates.

Fix 5. Reset the Windows Update components

10 minutesLow riskThe update fails at once at the same percentage, or downloads fail again and again.

A damaged download in the SoftwareDistribution folder is used again at every retry. Renaming the folder, and the catroot2 folder with it, makes Windows download the update from scratch. It does not repair the system itself.

1. Open Command Prompt as administrator. Type cmd in the search box, right-click Command Prompt and select Run as administrator. Select Yes when Windows asks for permission.
2. Stop the update services. Type the commands below and press Enter after each one. If Windows says that other services depend on Cryptographic Services, it stops them too. A message that a service is not started is fine.

   net stop wuauserv
   net stop bits
   net stop cryptsvc

3. Delete the download queue files. This clears the list of downloads that the Background Intelligent Transfer Service keeps. If Windows says it cannot find the files, continue.

   del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"

4. Rename the update cache folders. Renaming keeps a copy in case you need it; Windows creates new, empty folders when the services start again. If you get Access is denied, a service is still running: repeat the previous step.

   ren %systemroot%\SoftwareDistribution SoftwareDistribution.old
   ren %systemroot%\System32\catroot2 catroot2.old

5. Start the services again. Type the commands below and press Enter after each one. The requested service has already been started is fine: Windows started it on its own.

   net start cryptsvc
   net start bits
   net start wuauserv

6. Restart and check for updates. Restart the PC. Then select Start > Settings > Windows Update > Check for updates. The first check can take longer than usual because everything is downloaded again.

These steps were written for Windows 11 and Windows 10 (the steps are the same). The full page with the other versions and what each result means: Reset Windows Update components

Fix 6. Repair the system files with DISM and SFC

15 to 40 minutesNo riskCBS.log names missing or damaged files, or the earlier fixes did not help.

A cumulative update replaces thousands of system files and fails when the component store it builds on is damaged. DISM downloads clean copies of damaged components, and SFC then repairs the files in use.

1. Open an elevated command window. Right-click Start and select Terminal (Admin), or type cmd in the search box, right-click Command Prompt and select Run as administrator. Select Yes when Windows asks for permission.

   

2. Run DISM first. Type the command below and press Enter. DISM downloads clean copies of damaged components from Windows Update, so it can take several minutes. Wait until it says The operation completed successfully.

   DISM.exe /Online /Cleanup-Image /RestoreHealth

   

3. Run System File Checker. In the same window, type the command below and press Enter. Do not close the window until the verification reaches 100%.

   sfc /scannow

   

4. Read the result and restart. Compare the last message with the table below this guide, then restart the PC so that repaired files are loaded.

   

These steps were written for Windows 11 24H2 and 25H2. The full page with the other versions and what each result means: Run DISM and SFC to repair Windows system files

Fix 7. Reinstall Windows over itself with Fix problems using Windows Update

1 to 2 hoursLow riskNothing above worked, or DISM could not repair the damage.

The reinstall puts a clean copy of your current Windows version over the old one, with the newest update included, and keeps apps, files and settings. It replaces the damaged files that the smaller repairs could not fix.

1. Open Recovery in Settings. Open Settings > System > Recovery. Next to Fix problems using Windows Update, select Reinstall now. This keeps your apps, files and settings.

   

2. Start the reinstall. Choose whether the PC may restart on its own 15 minutes after the installation, then select OK.
3. Wait and restart. Windows Update downloads and installs a repair copy of your current Windows version. Keep the PC plugged in and online, and restart it when asked.

These steps were written for Windows 11 22H2 and later. The full page with the other versions and what each result means: Reinstall Windows without losing files

• Keep the PC plugged in and online for the whole reinstall.
• Back up the files you cannot lose first: Back up your files (Windows Backup, File History, Time Machine).
• The old guide suggested the Media Creation Tool for this. The built in Fix problems using Windows Update button does the same job without a USB drive.

How to uninstall KB5060842

If the update did install and something broke, first check the known issues table above. The game restarts and the Print to PDF problem are fixed by later updates, which is better than removing a security update. If you still want it gone, these are your options.

1. Open Windows Update. Select Start > Settings > Windows Update.
2. Open the update history. Under More options, select Update history. Note the KB number and the date of the update you suspect.
3. Open the list of removable updates. Scroll down to Related settings and select Uninstall updates.
4. Uninstall the update. Find the update in the list and select Uninstall next to it. If the update is not in the list, Windows does not allow it to be removed this way.

These steps were written for Windows 11 25H2 and 26H2. The full page with the other versions and what each result means: How to uninstall a Windows update

If KB5060842 still fails

When the repair reinstall did not help, the cause is usually outside the normal update files. Pick your case.

• What to send to support: the exact code, the KB number, the OS build from winver, the date of the failed attempt and CBS.log.
• Whether the PC gets updates from Windows Update or from a company server, and which fixes you already ran.

How to keep Windows updates from failing again

Windows 10 left support on 14 October 2025 and never received KB5060842. A PC that cannot run Windows 11 gets monthly fixes only through Extended Security Updates.

Frequently asked questions

Can I still download KB5060842?

Yes. Microsoft keeps the files in the Microsoft Update Catalog, and its KB5060842 page still describes how to install them with DISM. The update has two MSU files, the checkpoint KB5043080 and KB5060842, installed in that order or together from one folder. But there is no reason to install it in October 2026. Every newer cumulative update for Windows 11 24H2 includes its content. Download the newest update instead, as in Fix 3.

What are the known KB5060842 issues?

Microsoft confirmed four. Windows could restart unexpectedly when games with Easy Anti-Cheat opened, fixed by KB5063060 a day later. Chinese, Japanese and Korean text can look blurry in Chromium browsers at 100 % scaling, with no fix. Company PCs with deferral policies got the update late, because its metadata says 20 June 2025. And Microsoft Print to PDF could go missing with error 0x800f0922, fixed in KB5060829.

Why is KB5060842 not showing in Windows Update?

Most often because a game with Easy Anti-Cheat is installed. Microsoft did not offer KB5060842 to those devices and sent the out-of-band KB5063060 instead, which contains KB5060842. Other reasons: the PC already has a newer update, it is not on Windows 11 24H2, or a company policy delays updates. Check winver: a build of 26100.4349 or higher means nothing is missing.

Did KB5060842 cause blue screens in Fortnite and other games?

Microsoft confirmed an incompatibility with Easy Anti-Cheat, the anti-cheat service that some multiplayer games install. Windows might restart unexpectedly when such a game opened. Microsoft says most users likely did not see it, because KB5060842 was not offered to PCs with Easy Anti-Cheat. The fix is KB5063060, released on 11 June 2025, and every later update includes it.

What is the difference between KB5060842 and KB5063060?

KB5060842 is the regular June 2025 security update, build 26100.4349. KB5063060 is an out-of-band update released one day later, build 26100.4351. It is cumulative, contains all of KB5060842, and adds the fix for the Easy Anti-Cheat restarts. It came only through Windows Update, to PCs with Easy Anti-Cheat and to PCs that had not installed KB5060842 yet. Either one leaves the PC equally protected.

Do I need KB5060842 if a newer update installed?

No. Cumulative updates contain all earlier fixes. If winver shows a build above 26100.4349, everything in KB5060842 is already on your PC. A failed KB5060842 entry in Update history is only a record of the attempt. It does not mean anything is missing, and you can ignore it once a newer update shows as successfully installed.

Is KB5060842 for Windows 10 or Windows 11 23H2?

No. KB5060842 applies to Windows 11 version 24H2 only, OS build 26100.4349. Windows 11 22H2 and 23H2 got KB5060999 on the same day, and Windows 10 got its own June 2025 update. Windows 11 25H2 came out later, so a 25H2 PC never needs KB5060842. If Windows Update offers another number, follow that one.

What does KB5060842 change?

Mainly security fixes, which Microsoft lists in its June 2025 Security Update Guide. It also includes the fixes from the May 2025 preview update KB5058499. Two changes are named on Microsoft's page: Windows 11 24H2 now keeps System Restore points for up to 60 days, and Windows Hello for Business sign in with self-signed certificates under the Key Trust model works again. Copilot+ PCs also get new AI component versions.

Why can't I uninstall KB5060842?

Because it is a combined package with the servicing stack update KB5059502. Microsoft says running wusa.exe /uninstall on the combined package does not work, and the servicing stack cannot be removed at all. Remove the cumulative part with DISM /Online /Remove-Package and the package name from DISM /online /get-packages. If newer updates are on top, remove the newest one instead.