The Update BureauKB5035849: Cumulative update for Windows 10, version 1809, March 2024. DC memory leak risk flagged; touch keyboard issue fixed
Fixes a touch-keyboard opening problem and changes certificate-mapping support for some Active Directory domains. LSASS might leak memory on domain controllers after installation; KB5037425 addresses the issue.
Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809 (OS Build 17763.5576).
Review notes Additional details from the official release notes (3) Read notes
- What changes Active Directory domains hosting MDM providers can allow a KDC to read user SIDs from the SAN; the providers can then populate those values.
- What changes This change concerns Active Directory domains that host mobile device management (MDM) providers.
- Known issues Extreme memory leaks may crash LSASS and cause domain controllers to reboot unexpectedly.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Improvements 2 changes
Active Directory domains
-
Active Directory domains hosting MDM providers can transition from Compatibility mode to strong certificate mapping Enforcement mode.1
The providers can allow an Active Directory Key Distribution Center (KDC) to read user security identifiers (SID) from the Subject Alternative Name (SAN), then populate those values.
Servicing stack
-
The component that installs Windows updates gets quality improvements.2
Includes servicing stack update 17763.5568.
Fix 1 change
Touch keyboard
- The touch keyboard opens when it sometimes would not open.3
Known issues
-
Following installation of this update, Local Security Authority Subsystem Service (LSASS) may experience a memory leak on domain controllers (DCs).
After installing this update, LSASS might leak memory on domain controllers. KB5037425 addresses the issue.4
Resolution Fixed in KB5037425Install KB5037425 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-03-12
- Type
- Cumulative update
| Version | Build | Channel |
|---|---|---|
| 1809 | 17763.5576 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Windows Hyper-V Remote Code Execution Vulnerability
|
Critical | 8.1 |
|
Windows Hyper-V Denial of Service Vulnerability
|
Critical | 5.5 |
The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 34 vulnerabilities →
Sources
Cited passages from Microsoft's official notes (4)
-
1.
The update affects Active Directory domains that host mobile device management (MDM) providers. They can transition from “Compatibility mode” to the strong certificate mapping “Enforcement mode.”
support.microsoft.com -
2.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
3.
This update addresses an issue that affects the touch keyboard. Sometimes it does not open.
support.microsoft.com -
4.
This out-of-band update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS). It might leak memory on DCs.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Nov 8, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 3/5, clarity 3/5, completeness 3/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake