Skip to the content
The Update Bureau
Windows 11 24H2 Windows 11 24H2 Security update
Patch Tuesday

KB5040435

KB5040435: Cumulative update for Windows 11, version 24H2, July 2024. BitLocker validation changes; shortcut icons need a policy

In short

This security update changes BitLocker’s default Secure Boot validation profile and requires a policy for remote shortcut icons. Roblox still cannot be downloaded or played through the Microsoft Store on Arm devices.

Does it affect you? Applies to: This update is for Windows 11, version 24H2, targeting Copilot+ PCs and devices previously using Windows Insider 24H2 builds. Packages are available for x64 and Arm64.

Build
26100.1150
Security
1 fixed
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • What to do WSUS automatically syncs the update when the specified products and classifications are configured. The page does not say that WSUS automatically installs it.

The official sources are linked at the end of the page.

What changes

Improvements 3 changes

BitLocker

  • The default Secure Boot validation profile now includes an additional measurement, PCR 4, alongside PCR 7 and 11.1
    Adds PCR 4 to PCR 7 and 11 in the default Secure Boot validation profile; see CVE-2024-38058.

File shortcut icons

  • Remote shortcut icons on the Start menu, Windows desktop, and taskbar will fail to render after installing this update unless the required policy is configured.2
    Configure the “Allow the use of remote paths in file shortcut icons” policy for remote paths in .LNK files.

Servicing stack

  • The included servicing stack update improves the component that installs Windows updates.3
    Includes servicing stack update KB5039333, version 26100.998.

Fix 1 change

Remote Authentication Dial-In User Service (RADIUS) protocol

  • The RADIUS authentication issue related to MD5 collisions is addressed.4
    The update addresses the issue described in KB5040268.

Known issues

  1. Open Affects: Everyone

    We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows.

    Players on Arm devices are unable to download or play Roblox through the Microsoft Store on Windows.5

    How to apply the workaround Workaround

    Players on Arm devices can download Roblox directly from Roblox.com.5

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-07-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5039304, KB5039239
Replaced by
KB5040529
VersionBuildChannel
24H2 26100.1150 General availability

Security

1 vulnerability fixed
1 not rated
VulnerabilitySeverityCVSS
CVE-2024-38058
BitLocker Security Feature Bypass Vulnerability
 Not rated —

Sources

Updated
Cited passages from Microsoft's official notes (5)
  1. 1. [BitLocker] This update adds PCR 4 to PCR 7 and 11 for the default Secure Boot validation profile. support.microsoft.com
  2. 2. If you don’t configure this policy, icons on the Start menu, Windows desktop and taskbar will fail to render after you install this update or subsequent updates. support.microsoft.com
  3. 3. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  4. 4. [Remote Authentication Dial-In User Service (RADIUS) protocol] This issue is related to MD5 collisions. support.microsoft.com
  5. 5. We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake