neowin[.]net/news/microsoft-outs-kb5070773-emergency-windows-11-update-to-fix-unusable-usb-keyboard-mouse-bug/

catalog.update.microsoft[.]com/Search.aspx?q=KB5070773

Microsoft has released KB5070773 to fix the USB Recovery Environment issue -- just less than 4GB.

neowin[.]net/news/microsoft-warns-usb-mouse-keyboard-users-as-windows-11-kb5066835-breaks-key-os-feature/

learn.microsoft[.]com/en-us/windows/release-health/status-windows-11-25H2#3696msgdesc

The October updates breaks the Recovery Environment in Win11 24H2, & I assume 25H2 since they're basically identical, as USB mice & keyboards are not recognized, making it unusable. If Windows breaks that leaves a reinstall or restoring an image backup as your only options. Microsoft's working on a fix for the RE, which resides on the hidden Recovery partition. More Recovery Environment info:

learn.microsoft[.]com/en-us/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference?view=windows-11

bleepingcomputer[.]com/news/microsoft/microsoft-october-2025-patch-tuesday-fixes-6-zero-days-172-flaws/

bleepingcomputer[.]com/news/microsoft/windows-11-kb5066835-and-kb5066793-updates-released/

bleepingcomputer[.]com/news/microsoft/final-windows-10-patch-tuesday-update-rolls-out-as-support-ends/

After Updating Win10 the notice on the update page of Settings that Windows is enrolled in the ESU program disappears and you get a new warning that Win10 is EOL. Microsoft also adds a Big banner & Taskbar notification that comes just short of forcing you to upgrade to Win11 if the device meets the hardware requirements. The update to turn Win11 24H2 into 25H2 was not included on any of our hardware, and if you run it after October's updates there's a .NET update available for 25H2. October's update breaks localhost (127.0.0.1) HTTP/2 connections, which Microsoft has semi-fixed with Known Issue Rollback.

bleepingcomputer[.]com/news/microsoft/windows-11-updates-break-localhost-127001-http-2-connections/

bleepingcomputer[.]com/news/microsoft/microsoft-fixes-windows-bug-breaking-localhost-http-connections/

... includes security updates for 172 flaws, including six zero-day vulnerabilities.

This Patch Tuesday also addresses eight "Critical" vulnerabilities, five of which are remote code execution vulnerabilities and three are elevation of privilege vulnerabilities.

The number of bugs in each vulnerability category is listed below:

80 Elevation of Privilege Vulnerabilities
11 Security Feature Bypass Vulnerabilities
31 Remote Code Execution Vulnerabilities
28 Information Disclosure Vulnerabilities
11 Denial of Service Vulnerabilities
10 Spoofing Vulnerabilities