Skip to the content
The Update Bureau
Windows Server 2022 Windows Server 2022 Security update
Patch Tuesday Zero-day

KB5044281

KB5044281: Cumulative update for Windows Server, version 2022, October 2024. Exploited MMC and MSHTML flaws patched; server issues fixed

In short

Fixes 67 vulnerabilities, including two exploited flaws and a critical Remote Desktop Protocol server flaw. It also improves large-scale SDN performance and fixes several server and app problems.

Does it affect you? Applies to: Devices running Windows Server 2022. The update package listed is for x64.

Build
20348.2762
Security
67 fixed · 1 critical · 2 exploited
Restart
Required

What changes

Fixes 7 changes

MSIX applications

  • MSIX apps installed from an HTTPS address open correctly when their download is complete.1
    Fixes incomplete HTTPS downloads that damage the app package and prevent it from opening.

Task Manager

  • Task Manager no longer stops responding when you select the Performance tab.2

Direct Composition batched presentations

  • Brief flashes of triangles or boxes no longer appear on the screen in affected browsers and apps.3
    The issue could affect browsers such as Microsoft Edge and other apps.

Input Method Editor (IME)

  • Closing a window with a focused combo box no longer causes the described memory leak.4

AppLocker

  • AppLocker applies the correct rule collection enforcement mode when rules merge with an empty collection.5
    Fixes the enforcement mode not being overwritten when it is set to “Not Configured.”

Remote Desktop

Verified in package
  • The described issue that sporadically disconnects Remote Desktop sessions on some Windows Servers is fixed.6
    The issue could occur when a Remote Desktop Gateway uses a legacy protocol such as Remote Procedure Call over HTTP. The TSGateway service could stop responding with exception code 0xc0000005.

Containers

Verified in package
  • The described Kubernetes container networking problem is fixed; affected containers could not reach external networks or communicate between pods.7
    The issue could affect Calico networking on development or production instances, with the host firewall blocking network traffic.

Improvement 1 change

Servicing stack

  • The component that installs Windows updates receives quality improvements to help devices receive and install updates reliably.8
    The combined servicing stack update is KB5044414, build 20348.2750.

New feature 1 change

Software Defined Networking (SDN)

Verified in package
  • The SDN API performs better in large-scale deployments. Load balancer connectivity issues might occur after installation.9
    If connectivity issues occur, an SDN administrator can move the SDNAPI microservice to another node using Move-ServiceFabricPrimaryReplica.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5053603

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    After installing the October 2024 security update, some customers report that the OpenSSH service fails to start, preventing SSH connections. The issue affects a limited number of enterprise, IoT, and education devices; Microsoft was investigating whether Home or Pro customers were affected. KB5053603 addresses the issue.10

    Resolution Fixed in KB5053603

    Install KB5053603 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5042881, KB5041160, KB5040437, KB5041054
+7 earlier KB5039227, KB5037782, KB5036909, KB5037422, KB5035857, KB5034770, KB5034129
Replaced by
KB5046616
VersionBuildChannel
2022 20348.2762 General availability

Security

67 vulnerabilities fixed
2 exploited 1 critical 65 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-43572 Exploited
Microsoft Management Console Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-43573 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Moderate 6.5
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-6197
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str
 Important 8.8
CVE-2024-38202
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-20659
Windows Hyper-V Security Feature Bypass Vulnerability
 Important 7.1

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 67 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 2022
381.1 MB
windows10.0-kb5044281-x64.msu Main update · KB5044281 SHA-1: 7bc7e22d…83c345

Updated components

636 files changed since the previous update for the same versions.

Top changed componentsFiles
Remote Desktop13
Networking12
Graphics and display9
Hyper-V and virtualization9
Security and sign-in7
Search5
Secure Boot5
Storage and file systems5
Kernel4
Printing4
Audio3
Emoji and input3

Verified in package: changed files confirm Remote Desktop, Containers, Software Defined Networking (SDN).

Sources

Updated
Cited passages from Microsoft's official notes (10)
  1. 1. [MSIX applications] Fixed: When you install them from an HTTPS URI, they fail to open. This issue occurs when the download of the app is not complete. support.microsoft.com
  2. 2. [Task Manager] Fixed: It stops responding when you select the “Performance” tab. support.microsoft.com
  3. 3. [Direct Composition batched presentations] Fixed: A brief flash of triangles or boxes show on the screen. This issue affects browsers, like Microsoft Edge, and other apps. support.microsoft.com
  4. 4. [Input Method Editor (IME)] Fixed: When a combo box has input focus, a memory leak might occur when you close that window. support.microsoft.com
  5. 5. [AppLocker] Fixed: The rule collection enforcement mode is not overwritten when rules merge with a collection that has no rules. support.microsoft.com
  6. 6. [Remote Desktop (known issue)] Fixed: Windows Servers might disrupt Remote Desktop connections across your company. support.microsoft.com
  7. 7. [Containers (known issue)] Fixed: Container networking on Kubernetes might not work as you expect. Containers fail to reach external networks or communicate between pods. support.microsoft.com
  8. 8. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  9. 9. [Software Defined Networking (SDN)]New! The SDN API now performs better for large-scale deployments. Watch for load balancer connectivity issues after you install this update. support.microsoft.com
  10. 10. This issue is addressed in KB5053603. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 10 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake