KB5037768: Cumulative update for Windows 10, versions 21H2 and 22H2, May 2024. Exploited MSHTML and DWM flaws patched; VPN failures addressed

Fixes 47 vulnerabilities, including two exploited flaws in MSHTML and the DWM Core Library, and addresses a VPN connection problem.

Does it affect you? Applies to: This update applies to Windows 10, version 22H2 (build 19045.4412) and version 21H2 (build 19044.4412). The page lists version 21H2 Enterprise, Education, IoT Enterprise, Enterprise multi-session, Enterprise LTSC 2021, and IoT Enterprise LTSC 2021 editions.

What changes

Fixes 3 changes

VPN

Addresses a known issue that might cause your VPN connection to fail after the April 9, 2024 update or later.¹

Domain controllers

Addresses an issue that might increase NTLM authentication traffic on domain controllers.²

Virtual Secure Mode

For: devices using these scenarios

Addresses an issue that might cause Virtual Secure Mode scenarios to fail, including VPN, Windows Hello, Credential Guard, and Key Guard.³

Improvements 2 changes

Windows 10, version 22H2

For: devices running version 22H2

This build includes the improvements from supported Windows 10, version 21H2 editions.⁴

Servicing stack

Improves the component that installs Windows updates, helping devices receive and install Microsoft updates reliably.⁵
Includes servicing stack update 19044.4351 and 19045.4351.

Known issues

Open Affects: Everyone

After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

After installing this update, you might be unable to change your user account profile picture. The issue might show error code 0x80070520. Microsoft says it has very limited or no impact for this Windows version.⁶

How to apply the workaround Workaround

Contact Windows support for help if you encounter this issue.⁶
Resolved Affects: Organizations and IT administrators Resolved by KB5040525

After you install KB5034203 (dated 01/23/2024) or later updates, some Windows devices that use the [DHCP Option 235](https://learn.microsoft.com/tr…

Some devices using DHCP Option 235 to find Microsoft Connected Cache nodes might be unable to use those nodes and instead download updates and apps from the public internet. This issue is resolved by KB5040525.⁷

Resolution Fixed in KB5040525

Install KB5040525 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Open Affects: Everyone

Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Window…

On devices with more than one monitor, desktop icons might move unexpectedly between monitors or have other alignment issues when you try to use Copilot in Windows (in preview). A new Copilot experience is gradually rolling out to devices with KB5039299 or later and is expected to address this issue.⁸

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Open Affects: Everyone

Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen.

Copilot in Windows (in preview) is not supported when the taskbar is vertical on the right or left side of the screen. A new Copilot experience is gradually rolling out to devices with KB5039299 or later and is expected to address this issue.⁹

Workaround status No workaround yet

Microsoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Resolved Affects: Everyone Resolved by KB5039299

Certain apps might display an "Open With" dialog box asking, "How do you want to open this file?".

Some apps might show an “Open With” dialog instead of running a task when you right-click the app icon in the taskbar or Start menu. This issue is resolved by KB5039299.¹⁰

Resolution Fixed in KB5039299

Install KB5039299 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-05-14
Type: Cumulative update

Version	Build	Channel
21H2	19044.4412	General availability
22H2	19045.4412	General availability

Security

47 vulnerabilities fixed

2 exploited 46 important 1 moderate

Vulnerability	Severity	CVSS
CVE-2024-30040 Exploited Windows MSHTML Platform Security Feature Bypass Vulnerability	Important	8.8
CVE-2024-30051 Exploited Windows DWM Core Library Elevation of Privilege Vulnerability	Important	7.8

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 47 vulnerabilities →

Sources

Microsoft Support: KB5037768

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (10)

1. This update addresses a known issue that might cause your VPN connection to fail. This occurs after you install the update dated April 9, 2024, or later. support.microsoft.com
2. This update addresses an issue that might affect domain controllers (DC). NTLM authentication traffic might increase. support.microsoft.com
3. This update addresses an issue that might affect Virtual Secure Mode (VSM) scenarios. They might fail. These scenarios include VPN, Windows Hello, Credential Guard, and Key Guard. support.microsoft.com
4. This build includes all the improvements from the supported Windows 10, version 21H2 editions. support.microsoft.com
5. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
6. If you encounter this issue on your device, please contact Windows support for help support.microsoft.com
7. This issue is addressed in KB5040525. support.microsoft.com
8. Windows devices using more than one (1) monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Windows (in preview). support.microsoft.com
9. Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen. support.microsoft.com
10. This issue is addressed in KB5039299. support.microsoft.com

Checked automatically: 7 of 8 checks passed, 10 quoted passages · compared with Microsoft's page on Nov 8, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake