Cyber Security News

Windows 11 24H2/25H2 Update Breaks Mouse and Keyboard in Recovery Mode

Microsoft’s latest cumulative update for Windows 11, KB5066835, is causing significant disruptions for users, most notably by rendering USB keyboards and mice useless within the Windows Recovery Environment (WinRE).

The patch, released on October 14, 2025, affects Windows 11 versions 24H2 and 25H2, along with Windows Server 2025, creating a critical roadblock for system troubleshooting and repair.

The primary issue surfaces when users attempt to enter WinRE, a crucial mode for fixing boot failures, resetting a PC, or restoring from a backup.

While input devices function normally during a standard Windows session, they become completely unresponsive in the recovery environment.

This leaves users unable to navigate menus or execute commands, effectively locking them out of essential repair tools.

  • Users report keyboards and mice are fully functional in the operating system but stop responding entirely when booted to WinRE.
  • As a result, accessing options like “System Restore,” “Startup Repair,” or “Reset this PC” becomes impossible without working USB peripherals.

Microsoft officially acknowledged the bug on October 17, 2025, confirming widespread reports from users who found themselves stranded during troubleshooting attempts.

For IT administrators, this bug poses a serious risk, as it can turn minor server issues into major downtime events if recovery tools are inaccessible.

The problems with KB5066835 do not end with WinRE. Users across forums and social media have reported a cascade of other issues since installing the update.

Network diagnostics have revealed that localhost connections are failing, hindering local application development and testing.

  • File Explorer’s preview pane frequently hangs or displays blank windows, negatively impacting workflow efficiency.
  • Many users highlight sluggish system performance, with delayed app launches and unpredictable multitasking noted across various hardware profiles.

Furthermore, many users have experienced installation failures accompanied by cryptic error codes, forcing them to manually roll back the update.

Productivity has also taken a hit, with reports of File Explorer’s preview pane becoming unresponsive and general system sluggishness, including delayed app launches and erratic multitasking performance on devices ranging from consumer laptops to enterprise servers.

In response to the growing complaints, Microsoft has confirmed it is developing a fix, which is expected to be released in the coming days. In the meantime, the company advises users to avoid entering WinRE if possible.

For those who must perform a system recovery, the recommended workaround is to boot from separate installation media where peripherals are expected to work correctly.

As a last resort, affected users can uninstall KB5066835 through the “View update history” section in Settings. However, this action will remove the latest security patches, leaving the system vulnerable. Users are advised to monitor Microsoft’s official channels for the forthcoming fix.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Kaaviya

Kaaviya is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago