Skip to the content
The Update Bureau
Windows 10 1809 Windows 10 1809 Security update
Patch Tuesday Zero-day

KB5040430

KB5040430: Cumulative update for Windows 10, version 1809, July 2024. Exploited MSHTML spoofing flaw patched; update is expired

In short

Addresses the exploited MSHTML spoofing flaw CVE-2024-38112 and changes BitLocker and other Windows behavior. It is no longer available from Microsoft as of March 31, 2026.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809, build 17763.6054.

Build
17763.6054
Security
72 fixed · 1 critical · 1 exploited
Review notes Additional details from the official release notes (2) Read notes
  • In detail Microsoft identifies this as a known issue: parts of Windows app UI might appear in English when English is not the display language, and tab or button names might change font size.
  • What changes The update addresses a LAPS issue in which Post Authentication Actions did not occur at the end of the grace period and instead occurred at restart.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 5 changes

Windows Local Administrator Password Solution (LAPS)

  • LAPS post-authentication actions occur at restart instead of at the end of the grace period.1
    Changes when LAPS Post Authentication Actions (PAA) occur.

Remote Authentication Dial-In User Service (RADIUS) protocol

  • Addresses an issue related to MD5 collisions in the RADIUS protocol.2
    For more information about the issue, see KB5040268.

BitLocker

For: Devices using BitLocker

  • The default Secure Boot validation profile now includes PCR 4 alongside PCR 7 and 11.3
    Adds PCR 4 to PCR 7 and 11 in the default Secure Boot validation profile; see CVE-2024-38058 for more information.

File shortcut icons

  • IT administrators must configure a policy for remote paths in shortcut icons. Without it, icons on the Start menu, desktop, and taskbar will fail to render after this or a later update.4
    Configure the “Allow the use of remote paths in file shortcut icons” policy for remote paths in .LNK files.

Servicing stack

For: Devices installing Windows updates

  • The update includes quality improvements to the component that installs Windows updates, helping devices receive and install Microsoft updates.5
    Includes servicing stack update KB5040563, build 17763.6040.

Fix 1 change

Language for context menus and dialog buttons

  • Addresses cases where parts of Windows app menus and dialog buttons might appear in English despite a different display language, or where tab and button names might change font size.6

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5044277

    After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization.

    On Windows Servers using the legacy Remote Procedure Call over HTTP protocol in Remote Desktop Gateway, connections might be interrupted intermittently, potentially every 30 minutes. Logon sessions are lost and users must reconnect. IT administrators might see the TSGateway service become unresponsive with exception code 0xc0000005. KB5044277 resolves the issue.7

    Resolution Fixed in KB5044277

    Install KB5044277 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Everyone Resolved by KB5041578

    After installing the July 9, 2024, Windows security update, you might see a [BitLocker recovery](https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recov…

    After installing the July 9, 2024 security update, a BitLocker recovery screen might appear when you start the device. This is more likely if Device Encryption is enabled in Settings; you might need the recovery key from your Microsoft account. KB5041578 resolves the issue.8

    Resolution Fixed in KB5041578

    Install KB5041578 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-07-09
Type
Cumulative update
VersionBuildChannel
1809 17763.6054 General availability

Security

72 vulnerabilities fixed
1 exploited 1 critical 69 important 2 moderate
VulnerabilitySeverityCVSS
CVE-2024-38112 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Important 7.5
CVE-2024-38060
Windows Imaging Component Remote Code Execution Vulnerability
 Critical 8.8

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 72 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (8)
  1. 1. [Windows Local Administrator Password Solution (LAPS)] Its Post Authentication Actions (PAA) do not occur at the end of the grace period. Instead, they occur at restart. support.microsoft.com
  2. 2. [Remote Authentication Dial-In User Service (RADIUS) protocol] This issue is related to MD5 collisions. support.microsoft.com
  3. 3. [BitLocker] This update adds PCR 4 to PCR 7 and 11 for the default Secure Boot validation profile. support.microsoft.com
  4. 4. This update changes how IT administrators should set up remote paths for file shortcut icons (.LNK files). support.microsoft.com
  5. 5. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  6. 6. [Language for context menus and dialog buttons (known issue)] In Windows apps, parts of the UI might display in English when English is not set as the display language. Also, the font size might change for the names of tabs and buttons. support.microsoft.com
  7. 7. After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization. support.microsoft.com
  8. 8. After installing the July 9, 2024, Windows security update, you might see a BitLocker recovery screen upon starting up your device. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 8 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake