KB5036896: Cumulative update for Windows 10, version 1809, April 2024. Exploited proxy-driver spoofing flaw addressed; touch keyboard fixed

Addresses 60 vulnerabilities, including the exploited and publicly disclosed CVE-2024-26234 proxy-driver spoofing flaw, and fixes a touch keyboard opening problem. It is no longer available from Microsoft since March 31, 2026.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809, build 17763.5696.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fixes 5 changes

Touch keyboard

The touch keyboard opens when needed instead of sometimes failing to open.¹

Remote Desktop

For: Remote Desktop users with Remote Credential Guard

A network resource is accessible from a Remote Desktop session when Remote Credential Guard is on and the client runs Windows 11, version 22H2 or later.²

DNS servers

DNS registrations with Active Directory Domain Services no longer fail because of an LDAP timeout that persists until the DNS service is restarted.³
Addresses DNS server Event 4016 for a Lightweight Directory Access Protocol (LDAP) timeout during DNS registrations.

Smart card authentication

For: Users authenticating to remote systems with a smart card

The device no longer shuts down after 60 seconds when you use a smart card to authenticate on a remote system.⁴

Temporary group membership

Users whose temporary group memberships have expired no longer appear in LDAP searches after Active Directory removes them.⁵

Improvements 4 changes

Daylight saving time

3 items

Time changes for daylight saving time in Palestine are supported.⁶
Time changes for daylight saving time in Kazakhstan are supported.⁷
Time changes for daylight saving time in Samoa are supported.⁸

Servicing stack

The component that installs Windows updates receives quality improvements to help devices receive and install Microsoft updates reliably.⁹
Servicing stack update 17763.5695.

Known issues

Resolved Affects: Everyone Resolved by KB5037765

Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later.

Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. KB5037765 addresses this issue.¹⁰

Resolution Fixed in KB5037765

Install KB5037765 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Resolved Affects: Organizations and IT administrators Resolved by KB5037765

After installing the April 9, 2024 security update on domain controllers (DCs), you might notice a significant increase in [NTLM](https://learn.microsoft.com/windows-server/security/kerberos/ntlm-ove…

After installing the April 9, 2024 security update on domain controllers, NTLM authentication traffic might increase significantly. This is likely to affect organizations with a very small percentage of primary domain controllers and high NTLM traffic. KB5037765 addresses this issue.¹¹

Resolution Fixed in KB5037765

Install KB5037765 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-04-09
Type: Cumulative update

Version	Build	Channel
1809	17763.5696	General availability

Security

60 vulnerabilities fixed

1 exploited 60 important

Vulnerability	Severity	CVSS
CVE-2024-26234 Exploited Proxy Driver Spoofing Vulnerability	Important	6.7

The table lists the 1 exploited, publicly disclosed or critical vulnerabilities. See all 60 vulnerabilities →

Sources

Microsoft Support: KB5036896

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (11)

1. This update addresses an issue that affects the touch keyboard. Sometimes it does not open. support.microsoft.com
2. This occurs when you turn on the Remote Credential Guard feature and the client is Windows 11, version 22H2 or higher. support.microsoft.com
3. They receive Event 4016 for a timeout of the Lightweight Directory Access Protocol (LDAP). This occurs when they perform DNS registrations. support.microsoft.com
4. This update addresses an issue that causes your device to shut down after 60 seconds. This occurs when you use a smart card to authenticate on a remote system. support.microsoft.com
5. Users whose memberships have expired appear when you search for them in LDAP. This occurs even though Active Directory has removed them. support.microsoft.com
6. This update supports daylight saving time (DST) changes in Palestine. support.microsoft.com
7. This update supports DST changes in Kazakhstan. support.microsoft.com
8. This update supports DST changes in Samoa. support.microsoft.com
9. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
10. Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. This issue is addressed in KB5037765. support.microsoft.com
11. This issue is likely to affect organizations that have a very small percentage of primary domain controllers in their environment and high NTLM traffic. support.microsoft.com

Checked automatically: 7 of 8 checks passed, 11 quoted passages · compared with Microsoft's page on Nov 8, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake