Skip to the content
The Update Bureau
Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
Patch Tuesday Zero-day

KB5044273

KB5044273: Cumulative update for Windows 10, versions 21H2 and 22H2, October 2024. Exploited MMC and MSHTML flaws patched

In short

Addresses 57 vulnerabilities, including exploited flaws in Microsoft Management Console and the MSHTML Platform. It is no longer available; several reported AVD, app-launch and OpenSSH issues were later addressed by other updates.

Does it affect you? Applies to: Devices running Windows 10, version 22H2, and Windows 10, version 21H2 editions Enterprise LTSC 2021 and IoT Enterprise LTSC 2021. The update produces OS builds 19045.5011 and 19044.5011, respectively.

Builds
19044.5011 · 19045.5011
Security
57 fixed · 1 critical · 2 exploited

What changes

Improvements 3 changes

Windows 10, version 22H2

For: Devices running Windows 10, version 22H2

  • This build includes the improvements from supported Windows 10, version 21H2 editions.1

Miscellaneous security improvements to internal OS functionality

  • Windows 10, version 21H2 LTSC editions receive miscellaneous security improvements to internal operating system functionality.2
    Applies to Windows 10 Enterprise LTSC 2021 and Windows 10 IoT Enterprise LTSC 2021.

Servicing stack

For: Windows 10 devices

  • The component that installs Windows updates receives quality improvements.3
    The servicing stack update is KB5043130, builds 19044.4950 and 19045.4950.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5052077

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    Some customers might find that the OpenSSH service fails to start, preventing SSH connections. The issue affects a limited number of enterprise, IoT and education devices; Microsoft was investigating whether Home or Pro devices were affected. KB5052077 addresses the issue.4

    Resolution Fixed in KB5052077

    Install KB5052077 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Everyone Resolved by KB5046613

    After installing this update or later, you might observe that apps such as Quick Assist, Microsoft Teams, Windows Narrator, etc.

    Some apps, including Quick Assist, Microsoft Teams and Windows Narrator, might fail to start for non-admin users. KB5046613 addresses the issue.5

    Resolution Fixed in KB5046613

    Install KB5046613 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  3. Resolved Affects: Organizations and IT administrators Resolved by KB5045594

    After installing this update, or subsequent updates, a small subset of Azure Virtual Desktop customers using multi-session hosts (AVD) may experience the following issues: - An extended 10-to-30-minu…

    A small subset of Azure Virtual Desktop customers using multi-session hosts might see a 10-to-30-minute black screen after sign-in and single sign-on failures in Office apps. KB5045594 or later, together with one of the options in KB5048864, resolves the issue; both actions are required.6

    Resolution Fixed in KB5045594

    Install KB5045594 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  4. Resolved Affects: Organizations and IT administrators Resolved by KB5045594

    After installing this update, you might experience a black screen when you login to Azure Virtual Desktop (AVD).

    After this update, Azure Virtual Desktop users might see a black screen when signing in, be unable to sign out, or see the black screen persist after reconnecting. KB5045594 or later, together with one of the options in KB5048864, resolves the issue; both actions are required.7

    Resolution Fixed in KB5045594

    Install KB5045594 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Type
Cumulative update
VersionBuildChannel
21H2 19044.5011 General availability
22H2 19045.5011 General availability

Security

57 vulnerabilities fixed
2 exploited 1 critical 55 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-43572 Exploited
Microsoft Management Console Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-43573 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Moderate 6.5
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-6197
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str
 Important 8.8
CVE-2024-38202
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-20659
Windows Hyper-V Security Feature Bypass Vulnerability
 Important 7.1

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 57 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (7)
  1. 1. This build includes all the improvements from the supported Windows 10, version 21H2 editions. support.microsoft.com
  2. 2. [Miscellaneous security improvements to internal OS functionality] No additional issues were documented for this release. support.microsoft.com
  3. 3. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  4. 4. This issue is addressed in KB5052077. support.microsoft.com
  5. 5. This issue is addressed in KB5046613. support.microsoft.com
  6. 6. This issue is resolved by installing the Windows updates released October 22, 2024 (KB5045594) or later updates and by applying one of the options mentioned in the Resolution section in KB5048864. Note that you need to perform both actions to resolve the issue. support.microsoft.com
  7. 7. This issue is resolved by installing the Windows updates released October 22, 2024 (KB5045594) or later updates and by applying one of the options mentioned in the Resolution section in KB5048864. Note that you need to perform both actions to resolve the issue. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake