KB5043050: Cumulative update for Windows 10, version 1809, September 2024. Exploited Installer, Mark of the Web and MSHTML flaws closed

Fixes 30 vulnerabilities, including three exploited Windows flaws and two critical remote-code-execution vulnerabilities. It also addresses AppContainer printing and BitLocker decryption problems.

Does it affect you? Applies to: This update is for Windows 10 Enterprise LTSC 2019, version 1809, build 17763.6293. The page also mentions a Windows Server 2019 performance issue and a Windows/Linux dual-boot startup issue.

Review notes Additional details from the official release notes (2) Read notes

What changes The page reports that some Windows Server 2019 devices may slow down, stop responding, and use high CPU; it does not present this as a fix.
What changes The page warns that Linux might fail to start on devices set up to dual-boot Windows and Linux; it does not present this as a fix.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 3 changes

Windows Installer

For: Application owners and administrators

Windows Installer repairs now prompt for your credentials through User Account Control. Automation scripts might need updating, and application owners need to add the Shield icon to indicate that full administrator access is required.¹
To turn off the prompt, set HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableLUAInRepair to 1.

Windows Server 2019

The page notes reports of some devices slowing down, becoming unresponsive, and using high CPU.²
The issue most likely occurs with Cryptographic Services. Some companies report it when antivirus software scans %systemroot%\system32\catroot2 for Windows updates.

Dual boot of Windows and Linux

For: People using Windows and Linux dual boot

The page notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.³
The reported error is “Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation.” The page refers to CVE-2022-2601 and CVE-2023-40547.

Fixes 2 changes

AppContainer

Addresses printer problems when printers are used in restricted settings such as AppContainer.⁴

BitLocker

Addresses a problem that might prevent you from decrypting a BitLocker data drive moved from a newer Windows version to an older one.⁵

Known issues

Resolved Affects: Organizations and IT administrators Resolved by KB5044277

After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization.

After Windows updates released on or after July 9, 2024, Windows Servers might intermittently lose Remote Desktop connections across an organization. Users might need to reconnect, and administrators might see the TSGateway service become unresponsive with exception code 0xc0000005. KB5044277 resolves this issue.⁶

Resolution Fixed in KB5044277

Install KB5044277 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-09-10
Type: Cumulative update

Version	Build	Channel
1809	17763.6293	General availability

Security

30 vulnerabilities fixed

3 exploited 2 critical 25 important 1 moderate 2 not rated

Vulnerability	Severity	CVSS
CVE-2024-43461 Exploited Windows MSHTML Platform Spoofing Vulnerability	Important	8.8
CVE-2024-38014 Exploited Windows Installer Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38217 Exploited Windows Mark of the Web Security Feature Bypass Vulnerability	Important	5.4
CVE-2024-38063 Windows TCP/IP Remote Code Execution Vulnerability	Critical	9.8
CVE-2024-38119 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability	Critical	7.5
CVE-2024-21416 Windows TCP/IP Remote Code Execution Vulnerability	Important	8.1
CVE-2024-38045 Windows TCP/IP Remote Code Execution Vulnerability	Important	8.1
CVE-2024-38240 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Important	8.1
CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability	Important	7.8
CVE-2024-38046 PowerShell Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38237 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38238 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38241 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38242 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38243 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38244 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38245 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38247 Windows Graphics Component Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38249 Windows Graphics Component Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38250 Windows Graphics Component Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38252 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-38257 Microsoft AllJoyn API Information Disclosure Vulnerability	Important	7.5
CVE-2024-38239 Windows Kerberos Elevation of Privilege Vulnerability	Important	7.2
CVE-2024-38234 Windows Networking Denial of Service Vulnerability	Important	6.5
CVE-2024-38235 Windows Hyper-V Denial of Service Vulnerability	Important	6.5
CVE-2024-38254 Windows Authentication Information Disclosure Vulnerability	Important	5.5
CVE-2024-38256 Windows Kernel-Mode Driver Information Disclosure Vulnerability	Important	5.5
CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability	Moderate	6.5
CVE-2022-2601 Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass	Not rated	—
CVE-2023-40547 Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass	Not rated	—

Sources

Microsoft Support: KB5043050

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (6)

1. [Windows Installer] When it repairs an application, the User Account Control (UAC) does not prompt for your credentials. After you install this update, the UAC will prompt for them. support.microsoft.com
2. [Windows Server 2019 (known issue)] Some devices slow down, stop responding, and have high CPU usage. This is most likely to occur with Cryptographic Services. support.microsoft.com
3. [Dual boot of Windows and Linux (known issue)] Linux might fail to start up when you turn on dual-boot setup for Windows and Linux on your device. support.microsoft.com
4. [AppContainer] Printers do not work as you expect when you use them in a restricted setting, like AppContainer. support.microsoft.com
5. [BitLocker] You might not be able to decrypt a BitLocker data drive. This occurs when you move that drive from a newer version of Windows to an older version. support.microsoft.com
6. This issue is addressed in KB5044277. support.microsoft.com

Checked automatically: 7 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Nov 8, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: not passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake