KB5040442: Cumulative update for Windows 11, version 23H2, July 2024. Exploited Hyper-V and MSHTML flaws patched

Fixes 81 vulnerabilities, including one critical flaw and exploited flaws in Hyper-V and MSHTML. It also addresses taskbar and startup problems and changes the Secure Boot validation profile.

Does it affect you? Applies to: Devices running Windows 11, versions 22H2 and 23H2. The end-of-service notice specifically concerns the Home and Pro editions of version 22H2.

Review notes Additional details from the official release notes (2) Read notes

In short Some devices using virtual tools or features may fail to start. If you have not installed the June preview update, Microsoft advises installing this security update instead.
What changes Some devices using virtual tools or features may fail to start. If you have not installed the June preview update, Microsoft advises installing this security update instead.

The official sources are linked at the end of the page.

What changes

Fixes 4 changes

Taskbar

The taskbar issue after KB5039302 is addressed for devices running Windows N or with Media Features turned off.¹
The affected taskbar might not be viewable or interactive.

Remote Desktop MultiPoint Server

Verified in package

For: Devices using Remote Desktop MultiPoint Server

A race condition that can make the service stop responding is addressed.²

Remote Authentication Dial-In User Service (RADIUS) protocol

Addresses an issue related to MD5 collisions in the RADIUS protocol.³
For more information, see KB5040268.

Repeated restarts

Some devices using virtual tools or virtual features can fail to start. If you have not installed the June preview update, Microsoft advises installing this security update instead.⁴

Improvements 3 changes

BitLocker

Verified in package

The default Secure Boot validation profile now includes an additional platform measurement.⁵
Adds PCR 4 to PCR 7 and 11 in the default Secure Boot validation profile. See CVE-2024-38058 for more information.

File shortcut icons

Without the required policy, icons on the Start menu, Windows desktop, and taskbar will fail to render after this update or later updates.⁶
IT administrators must configure the policy “Allow the use of remote paths in file shortcut icons” to set up remote paths for .LNK file icons.

Servicing stack

The servicing stack receives quality improvements to help devices reliably receive and install Microsoft updates.⁷
Includes servicing stack update KB5039338.

Known issues

Resolved Affects: Everyone Resolved by KB5041585

After installing the July 9, 2024, Windows security update, you might see a [BitLocker recovery](https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recov…

After this security update, a BitLocker recovery screen might appear at startup, particularly if Device Encryption is enabled. This issue is resolved by KB5041585.⁸

Resolution Fixed in KB5041585

Install KB5041585 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Resolved Affects: Organizations and IT administrators Resolved by KB5040527

After installing this update or later updates, you might face issues while upgrading from Windows Pro to a valid Windows Enterprise subscription.Resulting from this operation, you might observe the f…

Enterprise users might have trouble upgrading from Windows Pro to a valid Windows Enterprise subscription. This issue is resolved by KB5040527.⁹

Resolution Fixed in KB5040527

Install KB5040527 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Resolved Affects: Organizations and IT administrators Resolved by KB5040527

After installing this update, you might face issues using Windows Update Agent API (WUA) from your script (PowerShell, VBScript, etc.) while sea…

Enterprise users might get empty results or error code 0x8002802B when scripts use the Windows Update Agent API to search for updates. This issue is resolved by KB5040527.¹⁰

Resolution Fixed in KB5040527

Install KB5040527 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-07-09
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5039302, KB5039212, KB5037853, KB5037771

+8 earlier
KB5036980, KB5036893, KB5035942, KB5035853, KB5034848, KB5034765, KB5034204, KB5034123
Replaced by: KB5041585

Version	Build	Channel
23H2	22631.3880	General availability

Security

81 vulnerabilities fixed

2 exploited 1 critical 78 important 2 moderate

Vulnerability	Severity	CVSS
CVE-2024-38080 Exploited Windows Hyper-V Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38112 Exploited Windows MSHTML Platform Spoofing Vulnerability	Important	7.5
CVE-2024-38060 Windows Imaging Component Remote Code Execution Vulnerability	Critical	8.8
CVE-2024-37985 Windows Kernel Information Disclosure Vulnerability	Important	5.9

The table lists the 4 exploited, publicly disclosed or critical vulnerabilities. See all 81 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 23H2

728.7 MB

windows11.0-kb5040442-x64.msu Main update · KB5040442 SHA-1: c1ba0e46…0edcd0

Arm64 23H2

858.0 MB

windows11.0-kb5040442-arm64.msu Main update · KB5040442 SHA-1: b79a19e6…b3ed0c

Updated components

1,096 files changed since the previous update for the same versions.

Top changed components	Files
Hyper-V and virtualization	16
File Explorer and shell	14
Secure Boot	14
Graphics and display	12
Settings	10
Bluetooth	8
Networking	8
Audio	6
Kernel	5
Emoji and input	2
Remote Desktop	2
Security and sign-in	2

Verified in package: changed files confirm Remote Desktop MultiPoint Server, BitLocker.

Sources

Microsoft Support: KB5040442

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (10)

1. You might not be able to view or interact with the taskbar after you install KB5039302. This issue occurs on devices that run the Windows N edition. support.microsoft.com
2. [Remote Desktop MultiPoint Server] A race condition causes the service to stop responding. support.microsoft.com
3. [Remote Authentication Dial-In User Service (RADIUS) protocol] This issue is related to MD5 collisions. support.microsoft.com
4. [Repeated restarts (known issue)] Some devices that use virtual tools or virtual features fail to start. If you have not yet installed the June preview update, we advise that you install this security update instead. support.microsoft.com
5. [BitLocker] This update adds PCR 4 to PCR 7 and 11 for the default Secure Boot validation profile. support.microsoft.com
6. If you don’t configure this policy, icons on the Start menu, Windows desktop and taskbar will fail to render after you install this update or subsequent updates. support.microsoft.com
7. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
8. After installing the July 9, 2024, Windows security update, you might see a BitLocker recovery screen upon starting up your device. support.microsoft.com
9. After installing this update or later updates, you might face issues while upgrading from Windows Pro to a valid Windows Enterprise subscription. support.microsoft.com
10. After installing this update, you might face issues using Windows Update Agent API (WUA) from your script (PowerShell, VBScript, etc.) while searching for Windows updates. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 10 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake