Skip to the content
The Update Bureau
Windows 10 22H2 Windows 10 22H2 Optional preview
Preview

KB5040525

KB5040525: Cumulative update for Windows 10, version 22H2, July 2024. Fixes TCP hangs, printing failures, and Windows Backup errors

In short

Fixes several Windows 10 22H2 problems, including TCP hangs during file transfers, printing failures, and Windows Backup failures on devices with an EFI system partition. It also has a known profile-picture issue.

Does it affect you? Applies to: Devices running Windows 10, version 22H2. The update is available through Windows Update as an optional update and as a standalone package in the Microsoft Update Catalog.

Build
19045.4717
Restart
Required

What changes

Fixes 10 changes

FrameShutdownDelay

  • The browser now respects the configured FrameShutdownDelay value.1
    Fixes the browser ignoring the value in HKLM\SOFTWARE\Microsoft\Internet Explorer\Main.

Wi-Fi Protected Access 3 (WPA3)

  • HTML previews render in the Group Policy editor.2

Group Policy Preferences Item Level Targeting (ILT) and Local Users and Groups

  • Administrators can select target-domain groups and Local Users and Groups accounts in deployments with multiple forests and one-way trusts.3
    Addresses the issue affecting Enhanced Security Admin Environment (ESAE), Hardened Forests (HF), and Privileged Access Management (PAM) deployments.

Transmission Control Protocol (TCP)

  • File transfers and other routine tasks are less likely to leave the system unresponsive.4
    Fixes an extended send loop in the TCP send code.

Print Support App

Verified in package
  • The Print Support App no longer stops responding when used with a USB device, so printing and its user interface can work.5

Universal Print clients

For: Organizations using Universal Print

  • Universal Print clients can communicate with the service when Web Proxy Auto Discovery is turned on.6
    Addresses client communication failures when Web Proxy Auto Discovery (WPAD) is enabled.

Windows Defender Application Control (WDAC)

3 items
  • Applying more than 32 WDAC policies no longer causes a stop error.7
  • Provisioning a device no longer causes the described WDAC memory leak that might exhaust system memory over time.8
  • Some apps no longer fail when WDAC Application ID policies are applied.9

Windows Backup

  • Windows Backup no longer sometimes fails on devices with an EFI system partition.10
    Addresses backup failures when a device has an Extensible Firmware Interface (EFI) system partition (ESP).

Improvements 2 changes

Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)

Verified in package
  • The vulnerable-driver blocklist includes more drivers at risk of being used in BYOVD attacks.11
    Adds drivers to DriverSiPolicy.p7b.

DHCP Option 235

For: Devices that use DHCP Option 235

  • Some devices might not be able to use Microsoft Connected Cache nodes they find and might download updates and apps from the public internet instead.12
    The noted issue affects devices that use DHCP Option 235 to find Microsoft Connected Cache (MCC) nodes.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5045594

    After installing this update, or subsequent updates, a small subset of Azure Virtual Desktop customers using multi-session hosts (AVD) may experience the following issues: - An extended 10-to-30-minu…

    A small subset of Azure Virtual Desktop customers using multi-session hosts might encounter a 10-to-30-minute black screen after sign-in or single sign-on failures in Office apps. KB5045594 or a later update, together with one of the resolution options in KB5048864, resolves the issue; both actions are required.13

    Resolution Fixed in KB5045594

    Install KB5045594 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Organizations and IT administrators Resolved by KB5045594

    After installing this update, you might experience a black screen when you login to Azure Virtual Desktop (AVD).

    After installing this update, some Azure Virtual Desktop users might see a black screen at sign-in and be unable to log out. KB5045594 or a later update, together with one of the resolution options in KB5048864, resolves the issue; both actions are required.14

    Resolution Fixed in KB5045594

    Install KB5045594 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  3. Open Affects: Everyone

    After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    After installing this update, changing a user account profile picture might fail with error 0x80070520. Microsoft says the issue has very limited or no impact for this Windows version.15

    How to apply the workaround Workaround

    Contact Windows support if you encounter the issue.15

  4. Resolved Affects: Everyone Resolved by KB5041580

    After installing the July 9, 2024, Windows security update, you might see a [BitLocker recovery](https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recov…

    After the July 9, 2024 Windows security update, some devices—more likely those with Device Encryption enabled—might show a BitLocker recovery screen at startup. KB5041580 addresses this issue.16

    Resolution Fixed in KB5041580

    Install KB5041580 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-07-23
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5039299, KB5037849, KB5036979, KB5035941
+2 earlier KB5034843, KB5034203
Replaced by
KB5041582
VersionBuildChannel
22H2 19045.4717 General availability

Security

No vulnerabilities are listed for this update.

Updated components

2,441 files changed since the previous update for the same versions.

Top changed componentsFiles
Remote Desktop53
Graphics and display37
Audio33
File Explorer and shell27
Secure Boot24
Settings23
Security and sign-in17
Hyper-V and virtualization13
Emoji and input12
Windows Update12
Kernel11
Printing10

Verified in package: changed files confirm Print Support App, Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b).

Sources

Updated
Cited passages from Microsoft's official notes (16)
  1. 1. [FrameShutdownDelay] The browser ignores its value in the “HKLM\SOFTWARE\Microsoft\Internet Explorer\Main” registry key. support.microsoft.com
  2. 2. [Wi-Fi Protected Access 3 (WPA3)] In the Group Policy editor, HTML preview rendering fails. support.microsoft.com
  3. 3. [Group Policy Preferences Item Level Targeting (ILT) and Local Users and Groups] You cannot choose a group from the target domain for ILT. support.microsoft.com
  4. 4. [Transmission Control Protocol (TCP)] The TCP send code often causes a system to stop responding during routine tasks, such as file transfers. support.microsoft.com
  5. 5. [Print Support App] When you use the app with a USB device, the app stops responding and does not print. support.microsoft.com
  6. 6. [Universal Print clients] They fail to communicate with the Universal Print service. This affects printing functions. support.microsoft.com
  7. 7. This update prevents a stop error that occurs when you apply more than 32 policies. support.microsoft.com
  8. 8. A memory leak occurs that might exhaust system memory as time goes by. This issue occurs when you provision a device. support.microsoft.com
  9. 9. When you apply WDAC Application ID policies, some apps might fail. support.microsoft.com
  10. 10. [Windows Backup] Backup sometimes fails. This occurs when a device has an Extensible Firmware Interface (EFI) system partition (ESP). support.microsoft.com
  11. 11. [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. support.microsoft.com
  12. 12. [DHCP Option 235 (known issue)] Some Windows devices use this option to find Microsoft Connected Cache (MCC) nodes in their network. But you might not be able to use these nodes when you find them. support.microsoft.com
  13. 13. This issue is resolved by installing the Windows updates released October 22, 2024 (KB5045594) or later updates and by applying one of the options mentioned in the Resolution section in KB5048864. Note that you need to perform both actions to resolve the issue. support.microsoft.com
  14. 14. This issue is resolved by installing the Windows updates released October 22, 2024 (KB5045594) or later updates and by applying one of the options mentioned in the Resolution section in KB5048864. support.microsoft.com
  15. 15. After further investigation, we concluded this issue has very limited or no impact for this Windows version.If you encounter this issue on your device, please contact Windows support for help support.microsoft.com
  16. 16. This issue is addressed in KB5041580. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 16 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake