Skip to the content
The Update Bureau
Windows 10 1809 Windows 10 1809 Security update
Patch Tuesday Zero-day

KB5037765

KB5037765: Cumulative update for Windows 10, version 1809, May 2024. Exploited MSHTML and DWM flaws; IE mode and VPN fixes

In short

It fixes 45 security vulnerabilities, including exploited flaws in MSHTML and DWM, and addresses IE mode and VPN failures. Installation might fail on some devices; KB5039705 resolves that issue.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809.

Build
17763.5820
Security
45 fixed · 2 exploited

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fixes 5 changes

IE mode

  • IE mode stops responding in a particular text-entry situation.1
    Addresses a freeze that occurs when you press the left arrow key while an empty text box has focus and caret browsing is on.

VPN

  • Addresses a problem that might cause your VPN connection to fail after the April 9, 2024 update or a later update.2

Active Directory

For: Devices making Active Directory bind requests

  • Addresses failed binds to IPv6 addresses when the requestor is not joined to a domain.3

Domain controllers

For: Domain controllers

  • Addresses an issue that might increase NTLM authentication traffic.4

Virtual Secure Mode

  • Addresses failures in Virtual Secure Mode scenarios, including VPN, Windows Hello, Credential Guard, and Key Guard.5

Improvements 3 changes

DNS Server

  • DNS validation uses a default limit of 1,000 computations, which DNS Server administrators can change.6
    Changes the limit for NSEC3 validation in a recursive resolver to 1,000 computations by default. Administrators can set the MaxComputationForNsec3Validation registry setting from 1 to 9,600.

Windows Kernel Vulnerable Driver Blocklist

  • The vulnerable driver blocklist gains drivers that could be used in BYOVD attacks.7
    Includes quarterly changes to DriverSiPolicy.p7b.

Servicing stack

  • Includes quality improvements to the component that installs Windows updates.8
    Includes the Windows 10 servicing stack update, build 17763.5695.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5039705

    Windows devices attempting to install this update, might face issues during the installation process.

    Installing this update might fail with error 0x800f0982, more often on devices without the English (United States) language pack. Microsoft also reports error 0x80004005, including on some devices that have that language pack. KB5039705 addresses the issue.9

    Resolution Fixed in KB5039705

    Install KB5039705 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-05-14
Type
Cumulative update
VersionBuildChannel
1809 17763.5820 General availability

Security

45 vulnerabilities fixed
2 exploited 44 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-30040 Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
 Important 8.8
CVE-2024-30051 Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 45 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (9)
  1. 1. This update addresses an issue in that affects IE mode. It stops responding. This occurs if you press the left arrow key when an empty text box has focus and caret browsing is on. support.microsoft.com
  2. 2. This update addresses a known issue that might cause your VPN connection to fail. This occurs after you install the update dated April 9, 2024, or later. support.microsoft.com
  3. 3. This update addresses an issue that affects Active Directory. Bind requests to IPv6 addresses fail. This occurs when the requestor is not joined to a domain. support.microsoft.com
  4. 4. This update addresses a known issue that might affect domain controllers (DC). NTLM authentication traffic might increase. support.microsoft.com
  5. 5. This update addresses an issue that might affect Virtual Secure Mode (VSM) scenarios. They might fail. These scenarios include VPN, Windows Hello, Credential Guard, and Key Guard. support.microsoft.com
  6. 6. Its limit is now 1,000 computations. One computation is equal to the validation of one label with one iteration. support.microsoft.com
  7. 7. This update includes quarterly changes to the Windows Kernel Vulnerable Driver Blocklist file, DriverSiPolicy.p7b. It adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. support.microsoft.com
  8. 8. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  9. 9. The installation might fail with an error code 0x800f0982. This issue is more likely to affect devices that do not have the English (United States) language pack. We have also received reports that devices are failing to install this update with the error code 0x80004005. This error can occur even if the English (United States) language pack is installed support.microsoft.com
Checked automatically: 7 of 8 checks passed, 9 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake