3 Minutes
Microsoft has rolled out an out-of-band (OOB) emergency update for Windows 11 and Windows Server after users discovered that USB keyboards and mice stopped working inside the Windows Recovery Environment (WinRE). The quick fix targets machines running Windows 11 24H2 and 25H2 as well as Windows Server 2025.
A fast response to a disruptive WinRE bug
On Oct. 14, 2025, a WinRE-related component shipped with Microsoft’s Patch Tuesday set off an unintended side effect: USB input devices ceased responding while in the recovery environment. That meant users could boot into WinRE but could no longer navigate recovery options because keyboards and mice were unusable — even though those devices continued working normally inside the full Windows OS.
To remedy the problem, Microsoft released KB5070762, a Safe OS dynamic out-of-band update (also called a Dynamic Update package). This update follows the emergency KB5070773 release that directly addressed the initial USB input issue. Microsoft describes KB5070762 as an update that improves the Windows Recovery Environment on Windows 11 (24H2 and 25H2) and Windows Server 2025.

What a Safe OS Dynamic Update actually does
Dynamic Update packages are designed to be applied to existing Windows images before deployment. They include fixes for Setup.exe binaries, SafeOS components used by WinRE, and other setup-time improvements. They also help preserve Language Packs (LP) and Features on Demand (FOD) during upgrades — for example, VBScript is still distributed as an FOD in Windows 11 24H2.
Why this matters
Imagine you need to recover a system but can't navigate the recovery menus because your USB keyboard is unresponsive. That’s the exact scenario Microsoft sought to prevent with this emergency release. By patching SafeOS and WinRE, the company restored normal USB support within the recovery environment so administrators and end users can perform troubleshooting and repairs reliably.
How to get the update
Microsoft says the update should download and install automatically on affected systems. If you prefer to install it manually, you can locate KB5070762 on the Microsoft Update Catalog website and download the appropriate package for your build and architecture.
- Check Windows Update for automatic delivery.
- Or search "KB5070762" on the Microsoft Update Catalog to download manually.
- Apply Dynamic Update packages to images prior to deployment if you manage OS provisioning or imaging.
For enterprise IT teams, applying the Safe OS dynamic update to images before rolling them out ensures that WinRE behavior is fixed across newly imaged devices. For individual users, installing the update or letting Windows Update do the work will restore USB functionality in recovery scenarios.
Microsoft’s quick OOB response highlights how critical WinRE stability is for both troubleshooting and disaster recovery. If you encountered USB input failures in WinRE after October’s security update, install KB5070762 as soon as possible.
Source: neowin
Leave a Comment