Skip to the content
The Update Bureau
Windows 11 23H2 Windows 11 23H2 Security update
Patch Tuesday Zero-day

KB5036893

KB5036893: Cumulative update for Windows 11, version 23H2, April 2024. Actively exploited proxy-driver spoofing flaw patched

In short

Fixes 63 security vulnerabilities, including an actively exploited proxy-driver spoofing flaw. It also adds voice-access, Narrator, sharing, and Windows 365 features.

Does it affect you? Applies to: Devices running Windows 11, versions 22H2 and 23H2. The update applies to supported editions; Windows 365 features are for users and organizations using those services.

Build
22631.3447
Security
63 fixed · 1 exploited
Restart
Required
Review notes Additional details from the official release notes (2) Read notes
  • What changes For Windows 11, version 23H2, this build includes all the improvements in version 22H2.
  • What changes Say “what can I say,” then click the Voice shortcuts tab, or say “show voice shortcuts” to open the Voice shortcuts page.

The official sources are linked at the end of the page.

What changes

New features 17 changes

Voice access

3 items
  • Voice access now supports French (France and Canada), German, and Spanish (Spain and Mexico).1
    When voice access is first turned on, Windows asks you to download a speech model. You can still use English (US) if a model does not match your display language.
  • Voice access features, including number and grid overlays, now work across multiple displays.2
    Use the display's assigned letter, including its NATO phonetic equivalent, to switch displays while using the grid overlay. The mouse grid and drag-and-drop features also work across displays.
  • You can create custom voice commands in supported English dialects and assign them one or more actions.3
    Open the Voice shortcuts tab by saying “what can I say” or “show voice shortcuts.”

Narrator

4 items
  • You can preview ten natural Narrator voices before downloading them. Previewing requires an internet connection; downloaded voices work offline.4
    Open Narrator settings with WIN+CTRL+N and select Add next to Add natural voices.
  • Narrator adds keyboard shortcuts to move forward and backward between images in Scan mode.5
    Use G or Shift+G while in Scan mode (Narrator key+space bar).
  • In Word, Narrator announces bookmarks, draft or resolved comments, and whether accessibility suggestions are available.6
  • You can use voice access to open apps, dictate text, interact with screen elements, and give Narrator commands.7
    Search for “voice access” in Windows search to set it up.

Windows share

For: Windows share users

  • You can share files with WhatsApp from the Windows share window, and install WhatsApp from there if it is not already installed.8

Nearby Share

Verified in package 2 items

For: Nearby Share users

  • Turning on Nearby Share through quick settings or Settings also turns on Wi-Fi and Bluetooth if they are off. Turning off either one turns Nearby Share off.9
  • You can give your device a friendlier name for sharing.10
    Change the name in Settings > System > Nearby sharing.

Snap Layouts

2 items
  • Snap Layouts suggests ways to arrange multiple app windows together.11
  • Hovering over an app's minimize or maximize button opens layout choices with app icons.12
    The layout box can also be opened with WIN+Z.

Windows 365 Boot

4 items
  • Dedicated mode signs you in to your Windows 365 Cloud PC when you sign in on a company-owned device. You can personalize the sign-in experience, including choosing a lock-screen picture and storing your username.13
    Sign-in uses passwordless authentication, such as Windows Hello for Business. Dedicated mode also provides a fast account switcher for switching profiles.
  • Organizations can add their branding to the sign-in screen shown in shared mode.14
    Company branding can be added from Microsoft Intune.
  • A new fail-fast mechanism helps identify network problems or incomplete app setup during Cloud PC sign-in.15
  • You can manage sound, display, and other physical PC settings directly from your Cloud PC.16

Windows 365 Switch

For: Windows 365 Switch users

  • Desktop indicators show whether you are using the Cloud PC or local PC when switching between them.17

Improvements 8 changes

Narrator

For: Narrator users

  • Narrator better detects text, including handwriting, in images and improves image descriptions.18
    Image descriptions require an active internet connection and the image-description setting enabled. Select an image and press Narrator key+CTRL+D.

Windows share

For: Windows share users

  • The apps shown in “Share using” depend on the account you use to sign in, including which Microsoft Teams contacts appear.19
    A Microsoft account shows Microsoft Teams (free); a Microsoft Entra ID account shows Microsoft Teams (work or school) contacts.

Nearby Share

For: Nearby Share users

  • Nearby Share transfers are faster for people on the same network, whether it is public or private.20
    Previously, users needed to be on the same private network.

Casting

For: People using external displays

  • Windows helps you discover when casting is available and find nearby displays or troubleshoot connections.21
    Notifications can suggest Cast when you switch windows or use Snap Assist; the Cast flyout in quick settings provides additional help.

Windows 365 Switch

2 items
  • You can disconnect from a Cloud PC using your local PC, and tooltips explain the disconnect and sign-out options in the Cloud PC Start menu.22
    From the local PC, go to Task view, right-click the Cloud PC button, and select Disconnect.
  • While connecting to a Windows 365 Frontline Cloud PC, the screen can show connection status and a timeout indicator. If an error occurs, a new button copies the correlation ID.23

Windows 11, version 22H2

For: Windows 11, version 22H2 users

  • The update makes miscellaneous security improvements to internal Windows features.24
    The update includes improvements from KB5035942; no additional issues are documented for this release.

Servicing stack

  • The component that installs Windows updates receives quality improvements to help devices reliably receive and install updates.25
    The combined update includes the latest servicing stack update for the operating system.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5040527

    After installing this update or later updates, you might face issues while upgrading from Windows Pro to a valid Windows Enterprise subscription.Resulting from this operation, you might observe the f…

    After this update or later updates, upgrading from Windows Pro to a valid Windows Enterprise subscription might fail with an access denied error (0x80070005) in the LicenseAcquisition scheduled task. KB5040527 addresses the issue.26

    Resolution Fixed in KB5040527

    Install KB5040527 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Everyone Resolved by KB5037853

    After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    After installing this update, you might be unable to change your user account profile picture. Choosing a file in Settings might show error 0x80070520; KB5037853 addresses the issue.27

    Resolution Fixed in KB5037853

    Install KB5037853 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  3. Resolved Affects: Everyone Resolved by KB5037771

    Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later.

    Windows devices might have VPN connection failures after installing the update dated April 9, 2024, or later. KB5037771 addresses the issue.28

    Resolution Fixed in KB5037771

    Install KB5037771 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-04-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5035942, KB5035853, KB5034848, KB5034765
+2 earlier KB5034204, KB5034123
Replaced by
KB5037771
VersionBuildChannel
23H2 22631.3447 General availability

Security

63 vulnerabilities fixed
1 exploited 63 important
VulnerabilitySeverityCVSS
CVE-2024-26234 Exploited
Proxy Driver Spoofing Vulnerability
Important 6.7

The table lists the 1 exploited, publicly disclosed or critical vulnerabilities. See all 63 vulnerabilities →

Updated components

922 files changed since the previous update for the same versions.

Top changed componentsFiles
Security and sign-in18
Graphics and display16
Secure Boot14
Hyper-V and virtualization11
Bluetooth8
File Explorer and shell7
Kernel7
Remote Desktop7
Networking6
Emoji and input5

Verified in package: changed files confirm Nearby Share.

Sources

Updated
Cited passages from Microsoft's official notes (28)
  1. 1. You can now use voice access with the following languages: French (France, Canada) German Spanish (Spain, Mexico) support.microsoft.com
  2. 2. You can now use all voice access features on multiple displays. support.microsoft.com
  3. 3. This update introduces voice shortcuts or custom commands. support.microsoft.com
  4. 4. You can now listen to a preview of the ten natural voices before you download them. support.microsoft.com
  5. 5. This update adds a new keyboard command to move between the images on a screen. support.microsoft.com
  6. 6. In Microsoft Word, Narrator will announce the presence of bookmarks and draft or resolved comments. support.microsoft.com
  7. 7. You can now use voice access to open applications, dictate text, and interact with elements on the screen. support.microsoft.com
  8. 8. The Windows share window now supports sharing with WhatsApp in the “Share using” section. support.microsoft.com
  9. 9. If you do and Wi-Fi and Bluetooth are off, Wi-Fi and Bluetooth will turn on to make Nearby Share work as you expect. support.microsoft.com
  10. 10. You can now give your device a more friendly name to identify it when sharing. support.microsoft.com
  11. 11. This update adds suggestions to Snap Layouts. They help you to instantly snap multiple app windows together. support.microsoft.com
  12. 12. When you do, app icons will display various layout options. support.microsoft.com
  13. 13. When you sign in on your company-owned device, doing that also signs you in to your Windows 365 Cloud PC. support.microsoft.com
  14. 14. A company can customize what users see on the screen when they sign in to Windows 365 Boot. support.microsoft.com
  15. 15. This update adds a fail fast mechanism for Windows 365 Boot. It helps while you are signing in to your Cloud PC. support.microsoft.com
  16. 16. You can now manage the settings of your physical (local) PC from your Cloud PC. support.microsoft.com
  17. 17. This update adds desktop indicators for Windows 365 Switch. You will see the term “Cloud PC” and “Local PC” on the desktop indicator support.microsoft.com
  18. 18. This update improves Narrator’s detection of text in images, which includes handwriting. support.microsoft.com
  19. 19. This update changes the apps that appear in the Windows share window. The account you use to sign in affects the apps that are in “Share using.” support.microsoft.com
  20. 20. Now, users must be on the same public or private network. support.microsoft.com
  21. 21. This update helps you to learn about the Cast feature and discover when it is available support.microsoft.com
  22. 22. It is now easier for Windows 365 Switch to disconnect. You can use your local PC to disconnect from your Cloud PC. support.microsoft.com
  23. 23. The time to connect to Windows 365 Frontline Cloud PC from Windows 365 Switch might be long. support.microsoft.com
  24. 24. This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. support.microsoft.com
  25. 25. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  26. 26. After installing this update or later updates, you might face issues while upgrading from Windows Pro to a valid Windows Enterprise subscription. support.microsoft.com
  27. 27. After installing this update, you might be unable to change your user account profile picture. support.microsoft.com
  28. 28. Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. This issue is addressed in KB5037771. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 28 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake