Skip to the content
The Update Bureau
Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
Patch Tuesday Zero-day

KB5036892

KB5036892: Cumulative update for Windows 10, versions 21H2 and 22H2, April 2024. Exploited proxy-driver spoofing flaw patched; Copilot limits remain

In short

Addresses 63 security vulnerabilities, including an actively exploited proxy-driver spoofing flaw. It also lists open Copilot and profile-picture issues.

Does it affect you? Applies to: Devices running Windows 10 version 22H2, or version 21H2 Enterprise, Education, IoT Enterprise, Enterprise multi-session, Enterprise LTSC 2021, or IoT Enterprise LTSC 2021.

Builds
19044.4291 · 19045.4291
Security
63 fixed · 1 exploited

What changes

Improvements 3 changes

Windows 10, version 22H2

For: Windows 10 version 22H2 devices

  • Version 22H2 includes all improvements from the supported Windows 10 version 21H2 editions.1

Windows operating system

For: Windows 10 version 21H2 devices

  • The update includes miscellaneous security improvements to internal operating system functionality.2
    For Windows 10 version 21H2 Enterprise, Education, IoT Enterprise, Enterprise multi-session, Enterprise LTSC 2021, and IoT Enterprise LTSC 2021.

Servicing stack

For: Windows 10 versions 21H2 and 22H2

  • The component that installs Windows updates receives quality improvements intended to make it more reliable.3
    The servicing stack update applies to OS builds 19044.4289 and 19045.4289.

Known issues

  1. Open Affects: Everyone

    After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Changing your user account profile picture might fail with error code 0x80070520. Microsoft says the issue has very limited or no impact for this Windows version.4

    Workaround status No workaround yet

    Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.

  2. Resolved Affects: Organizations and IT administrators Resolved by KB5040525

    After you install KB5034203 (dated 01/23/2024) or later updates, some Windows devices that use the [DHCP Option 235](https://learn.microsoft.com/tr…

    Some devices using DHCP Option 235 to find Microsoft Connected Cache nodes might download updates and apps from the public internet instead. This issue, which can increase internet-route traffic, is resolved by KB5040525.5

    Resolution Fixed in KB5040525

    Install KB5040525 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  3. Open Affects: Everyone

    Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Window…

    On devices with more than one monitor, using Copilot in Windows (in preview) might move desktop icons between monitors or cause other icon-alignment problems.6

    How to apply the workaround Workaround

    A new Copilot experience is gradually rolling out to devices with KB5039299 or later installed. It is expected to reach devices over the next few months and will address the issue.6

  4. Open Affects: Everyone

    Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen.

    Copilot in Windows (in preview) is not supported when the taskbar is positioned vertically on the left or right side of the screen.7

    How to apply the workaround Workaround

    A new Copilot experience is gradually rolling out to devices with KB5039299 or later installed. It is expected to reach devices over the next few months and will address the issue.7

  5. Resolved Affects: Everyone Resolved by KB5037768

    Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later.

    VPN connections might fail after installing the April 9, 2024 update or later updates. KB5037768 addresses this issue.8

    Resolution Fixed in KB5037768

    Install KB5037768 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-04-09
Type
Cumulative update
VersionBuildChannel
21H2 19044.4291 General availability
22H2 19045.4291 General availability

Security

63 vulnerabilities fixed
1 exploited 63 important
VulnerabilitySeverityCVSS
CVE-2024-26234 Exploited
Proxy Driver Spoofing Vulnerability
 Important 6.7

The table lists the 1 exploited, publicly disclosed or critical vulnerabilities. See all 63 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (8)
  1. 1. This build includes all the improvements from the supported Windows 10, version 21H2 editions. support.microsoft.com
  2. 2. This update makes miscellaneous security improvements to internal OS functionality. support.microsoft.com
  3. 3. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. support.microsoft.com
  4. 4. After installing this update, you might be unable to change your user account profile picture. support.microsoft.com
  5. 5. some Windows devices that use the DHCP Option 235 to discover Microsoft Connected Cache (MCC) nodes in their network might be unable to use those nodes. support.microsoft.com
  6. 6. Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Windows (in preview). support.microsoft.com
  7. 7. Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen. support.microsoft.com
  8. 8. Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 8 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake