The Update BureauKB5043080: Cumulative update for Windows 11, version 24H2, September 2024. Closes exploited MSHTML flaw; addresses Remote Desktop hangs
In short
Closes an exploited Windows MSHTML spoofing flaw and addresses Task Manager color problems and Remote Desktop Services hangs. Roblox downloads through the Microsoft Store remain unavailable on Arm devices.
Does it affect you? Applies to: Windows 11, version 24H2, which targets Copilot+ PCs and devices that previously used Windows Insider 24H2 builds.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Fixes 2 changes
Improvements 2 changes
Windows Installer
For: Application owners and automation script maintainers
-
When Windows Installer repairs an application, User Account Control (UAC) now prompts for credentials. Automation scripts must be updated, and application owners must add the Shield icon.3
Set
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableLUAInRepairto1to turn off the UAC prompt.
Servicing stack
-
The component that installs Windows updates receives quality improvements to help devices receive and install updates.4
Includes servicing stack update KB5043113, version 26100.1738.
Known issues
-
We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows.
Players on Arm devices cannot download or play Roblox through the Microsoft Store on Windows.5
How to apply the workaround WorkaroundDownload Roblox directly from Roblox.com.5
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-09-10
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5041865, KB5041571, KB5040529, KB5040435
- Replaced by
- KB5043178
| Version | Build | Channel |
|---|---|---|
| 24H2 | 26100.1742 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-43461
Exploited
Windows MSHTML Platform Spoofing Vulnerability
|
Important | 8.8 |
|
CVE-2024-38014
Exploited
Windows Installer Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
CVE-2024-38217
Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
|
Important | 5.4 |
|
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
|
Critical | 7.5 |
|
Microsoft Management Console Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows TCP/IP Remote Code Execution Vulnerability
|
Important | 8.1 |
|
Windows TCP/IP Remote Code Execution Vulnerability
|
Important | 8.1 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 8.1 |
|
Windows OLE Remote Code Execution Vulnerability
|
Important | 8.0 |
|
Windows Security Zone Mapping Security Feature Bypass Vulnerability
|
Important | 7.8 |
|
PowerShell Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Setup and Deployment Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Kerberos Elevation of Privilege Vulnerability
|
Important | 7.2 |
|
Win32k Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Storage Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
Windows Networking Denial of Service Vulnerability
|
Important | 6.5 |
|
Windows Hyper-V Denial of Service Vulnerability
|
Important | 6.5 |
|
Windows Authentication Information Disclosure Vulnerability
|
Important | 5.5 |
Downloads (Microsoft Update Catalog)
x64
24H2
509.0 MB
Arm64
24H2
582.4 MB
Sources
Updated
Cited passages from Microsoft's official notes (5)
-
1.
[Task Manager] Graphs on the Performance page in Task Manager do not show the correct colors when you use dark mode.
support.microsoft.com -
2.
[Remote Desktop Services] It stops responding.
support.microsoft.com -
3.
After you install this update, the UAC will prompt for them. Because of this, you must update your automation scripts.
support.microsoft.com -
4.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
5.
We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake