KB5036893: Cumulative update for Windows 11, version 23H2, April 2024. Actively exploited proxy-driver spoofing flaw patched
Fixes 63 security vulnerabilities, including an actively exploited proxy-driver spoofing flaw. It also adds voice-access, Narrator, sharing, and Windows 365 features.
Does it affect you? Applies to: Devices running Windows 11, versions 22H2 and 23H2. The update applies to supported editions; Windows 365 features are for users and organizations using those services.
Review notes Additional details from the official release notes (2) Read notes
- What changes For Windows 11, version 23H2, this build includes all the improvements in version 22H2.
- What changes Say “what can I say,” then click the Voice shortcuts tab, or say “show voice shortcuts” to open the Voice shortcuts page.
The official sources are linked at the end of the page.
What changes
New features 17 changes
Voice access
-
Voice access now supports French (France and Canada), German, and Spanish (Spain and Mexico).1
When voice access is first turned on, Windows asks you to download a speech model. You can still use English (US) if a model does not match your display language.
-
Voice access features, including number and grid overlays, now work across multiple displays.2
Use the display's assigned letter, including its NATO phonetic equivalent, to switch displays while using the grid overlay. The mouse grid and drag-and-drop features also work across displays.
-
You can create custom voice commands in supported English dialects and assign them one or more actions.3
Open the Voice shortcuts tab by saying “what can I say” or “show voice shortcuts.”
Narrator
-
You can preview ten natural Narrator voices before downloading them. Previewing requires an internet connection; downloaded voices work offline.4
Open Narrator settings with
WIN+CTRL+Nand select Add next to Add natural voices. -
Narrator adds keyboard shortcuts to move forward and backward between images in Scan mode.5
Use G or Shift+G while in Scan mode (
Narrator key+space bar). - In Word, Narrator announces bookmarks, draft or resolved comments, and whether accessibility suggestions are available.6
-
You can use voice access to open apps, dictate text, interact with screen elements, and give Narrator commands.7
Search for “voice access” in Windows search to set it up.
Windows share
For: Windows share users
- You can share files with WhatsApp from the Windows share window, and install WhatsApp from there if it is not already installed.8
Nearby Share
For: Nearby Share users
Snap Layouts
Windows 365 Boot
-
Dedicated mode signs you in to your Windows 365 Cloud PC when you sign in on a company-owned device. You can personalize the sign-in experience, including choosing a lock-screen picture and storing your username.13
Sign-in uses passwordless authentication, such as Windows Hello for Business. Dedicated mode also provides a fast account switcher for switching profiles.
-
Organizations can add their branding to the sign-in screen shown in shared mode.14
Company branding can be added from Microsoft Intune.
- A new fail-fast mechanism helps identify network problems or incomplete app setup during Cloud PC sign-in.15
- You can manage sound, display, and other physical PC settings directly from your Cloud PC.16
Windows 365 Switch
For: Windows 365 Switch users
- Desktop indicators show whether you are using the Cloud PC or local PC when switching between them.17
Improvements 8 changes
Narrator
For: Narrator users
-
Narrator better detects text, including handwriting, in images and improves image descriptions.18
Image descriptions require an active internet connection and the image-description setting enabled. Select an image and press
Narrator key+CTRL+D.
Windows share
For: Windows share users
-
The apps shown in “Share using” depend on the account you use to sign in, including which Microsoft Teams contacts appear.19
A Microsoft account shows Microsoft Teams (free); a Microsoft Entra ID account shows Microsoft Teams (work or school) contacts.
Nearby Share
For: Nearby Share users
-
Nearby Share transfers are faster for people on the same network, whether it is public or private.20
Previously, users needed to be on the same private network.
Casting
For: People using external displays
-
Windows helps you discover when casting is available and find nearby displays or troubleshoot connections.21
Notifications can suggest Cast when you switch windows or use Snap Assist; the Cast flyout in quick settings provides additional help.
Windows 365 Switch
-
You can disconnect from a Cloud PC using your local PC, and tooltips explain the disconnect and sign-out options in the Cloud PC Start menu.22
From the local PC, go to Task view, right-click the Cloud PC button, and select Disconnect.
- While connecting to a Windows 365 Frontline Cloud PC, the screen can show connection status and a timeout indicator. If an error occurs, a new button copies the correlation ID.23
Windows 11, version 22H2
For: Windows 11, version 22H2 users
-
The update makes miscellaneous security improvements to internal Windows features.24
The update includes improvements from KB5035942; no additional issues are documented for this release.
Servicing stack
-
The component that installs Windows updates receives quality improvements to help devices reliably receive and install updates.25
The combined update includes the latest servicing stack update for the operating system.
Known issues
-
After installing this update or later updates, you might face issues while upgrading from Windows Pro to a valid Windows Enterprise subscription.Resulting from this operation, you might observe the f…
After this update or later updates, upgrading from Windows Pro to a valid Windows Enterprise subscription might fail with an access denied error (0x80070005) in the LicenseAcquisition scheduled task. KB5040527 addresses the issue.26
Resolution Fixed in KB5040527Install KB5040527 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
After installing this update, you might be unable to change your user account profile picture. Choosing a file in Settings might show error 0x80070520; KB5037853 addresses the issue.27
Resolution Fixed in KB5037853Install KB5037853 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later.
Windows devices might have VPN connection failures after installing the update dated April 9, 2024, or later. KB5037771 addresses the issue.28
Resolution Fixed in KB5037771Install KB5037771 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-04-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5035942, KB5035853, KB5034848, KB5034765
- Replaced by
- KB5037771
| Version | Build | Channel |
|---|---|---|
| 23H2 | 22631.3447 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-26234
Exploited
Proxy Driver Spoofing Vulnerability
|
Important | 6.7 |
The table lists the 1 exploited, publicly disclosed or critical vulnerabilities. See all 63 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
922 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Security and sign-in | 18 |
| Graphics and display | 16 |
| Secure Boot | 14 |
| Hyper-V and virtualization | 11 |
| Bluetooth | 8 |
| File Explorer and shell | 7 |
| Kernel | 7 |
| Remote Desktop | 7 |
| Networking | 6 |
| Emoji and input | 5 |
Verified in package: changed files confirm Nearby Share.
Sources
Cited passages from Microsoft's official notes (28)
-
1.
You can now use voice access with the following languages: French (France, Canada) German Spanish (Spain, Mexico)
support.microsoft.com -
2.
You can now use all voice access features on multiple displays.
support.microsoft.com -
3.
This update introduces voice shortcuts or custom commands.
support.microsoft.com -
4.
You can now listen to a preview of the ten natural voices before you download them.
support.microsoft.com -
5.
This update adds a new keyboard command to move between the images on a screen.
support.microsoft.com -
6.
In Microsoft Word, Narrator will announce the presence of bookmarks and draft or resolved comments.
support.microsoft.com -
7.
You can now use voice access to open applications, dictate text, and interact with elements on the screen.
support.microsoft.com -
8.
The Windows share window now supports sharing with WhatsApp in the “Share using” section.
support.microsoft.com -
9.
If you do and Wi-Fi and Bluetooth are off, Wi-Fi and Bluetooth will turn on to make Nearby Share work as you expect.
support.microsoft.com -
10.
You can now give your device a more friendly name to identify it when sharing.
support.microsoft.com -
11.
This update adds suggestions to Snap Layouts. They help you to instantly snap multiple app windows together.
support.microsoft.com -
12.
When you do, app icons will display various layout options.
support.microsoft.com -
13.
When you sign in on your company-owned device, doing that also signs you in to your Windows 365 Cloud PC.
support.microsoft.com -
14.
A company can customize what users see on the screen when they sign in to Windows 365 Boot.
support.microsoft.com -
15.
This update adds a fail fast mechanism for Windows 365 Boot. It helps while you are signing in to your Cloud PC.
support.microsoft.com -
16.
You can now manage the settings of your physical (local) PC from your Cloud PC.
support.microsoft.com -
17.
This update adds desktop indicators for Windows 365 Switch. You will see the term “Cloud PC” and “Local PC” on the desktop indicator
support.microsoft.com -
18.
This update improves Narrator’s detection of text in images, which includes handwriting.
support.microsoft.com -
19.
This update changes the apps that appear in the Windows share window. The account you use to sign in affects the apps that are in “Share using.”
support.microsoft.com -
20.
Now, users must be on the same public or private network.
support.microsoft.com -
21.
This update helps you to learn about the Cast feature and discover when it is available
support.microsoft.com -
22.
It is now easier for Windows 365 Switch to disconnect. You can use your local PC to disconnect from your Cloud PC.
support.microsoft.com -
23.
The time to connect to Windows 365 Frontline Cloud PC from Windows 365 Switch might be long.
support.microsoft.com -
24.
This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release.
support.microsoft.com -
25.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
26.
After installing this update or later updates, you might face issues while upgrading from Windows Pro to a valid Windows Enterprise subscription.
support.microsoft.com -
27.
After installing this update, you might be unable to change your user account profile picture.
support.microsoft.com -
28.
Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. This issue is addressed in KB5037771.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 28 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake