KB5041054: Cumulative update for Windows Server, version 2022, June 2024. RSA signing errors addressed; profile-picture changes may fail

Addresses an error affecting some RSA signing calls. Changing a user account profile picture might still fail on some devices.

Does it affect you? Applies to: Devices running Windows Server 2022, x64.

What changes

Fix 1 change

BCryptSignHash API

For: Devices running Windows Server 2022

The update addresses a problem that could make apps fail while signing RSA data.¹
The BCryptSignHash API could return STATUS_INVALID_PARAMETER when callers used NULL padding input parameters for RSA signatures. This was more likely when Customer-Managed Keys (CMK) were in use, such as on an Azure Synapse dedicated SQL pool.

Improvement 1 change

Servicing stack

For: Devices running Windows Server 2022

The servicing stack, which installs Windows updates, receives quality improvements.²
Includes servicing stack update KB5039343, build 20348.2522.

Known issues

Open Affects: Everyone

After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

Changing a user account profile picture might fail with error 0x80070520. Microsoft says this issue has very limited or no impact on this Windows version.³

How to apply the workaround Workaround

Contact Windows support for help if the problem occurs.³
Resolved Affects: Organizations and IT administrators Resolved by KB5041160

Devices might experience problems with Microsoft 365 Defender.

The service that detects and responds to network threats might have problems, interrupting network activity reports. KB5041160 resolves this issue.⁴

Resolution Fixed in KB5041160

Install KB5041160 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-06-20
Classification: Updates
Type: Cumulative update
Restart: Required
Replaces: KB5039227, KB5037782, KB5036909, KB5037422

+3 earlier
KB5035857, KB5034770, KB5034129
Replaced by: KB5040437

Version	Build	Channel
2022	20348.2529	General availability

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

x64 2022

367.4 MB

windows10.0-kb5041054-x64.msu Main update · KB5041054 SHA-1: 0a6d6b4a…974f3b

Updated components

31 files changed since the previous update for the same versions.

Top changed components	Files
Kernel	4
Hyper-V and virtualization	2
File Explorer and shell	1
Secure Boot	1
Security and sign-in	1

Sources

Microsoft Support: KB5041054

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (4)

1. This update addresses a known issue that affects the BCryptSignHash API. Because of this issue, the API returns “STATUS_INVALID_PARAMETER.” support.microsoft.com
2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
3. After further investigation, we concluded this issue has very limited or no impact for this Windows version. support.microsoft.com
4. The Network Detection and Response (NDR) service might encounter issues, resulting in an interruption of network data reporting. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake