KB5044284: Cumulative update for Windows 11, version 24H2, October 2024. Exploited MMC and MSHTML flaws patched; gateway disconnects fixed

Fixes 64 vulnerabilities, including two actively exploited flaws, and stops Remote Desktop Gateway Service from disconnecting clients in a specified configuration.

Does it affect you? Applies to: Devices running Windows 11, version 24H2, with x64 or Arm64 processors.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fix 1 change

Remote Desktop Gateway Service

Clients no longer disconnect when the Remote Desktop Gateway Service stops responding during connections.¹
Fixes the service stopping when it uses remote procedure calls (RPC) over HTTP.

Improvement 1 change

Servicing stack

The component that installs Windows updates gets quality improvements.²
Includes servicing stack update KB5046306, build 26100.2032.

Known issues

Resolved Affects: Everyone Resolved by KB5052093

Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

Some customers reported that the OpenSSH service failed to start after the October 2024 security update, preventing SSH connections. KB5052093 resolves this issue.³

Resolution Fixed in KB5052093

Install KB5052093 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Open Affects: Everyone

We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows.

Players on Arm devices might be unable to download or play Roblox through the Microsoft Store.⁴

How to apply the workaround Workaround

Download Roblox directly from Roblox.com.⁴
Resolved Affects: Organizations and IT administrators Resolved by KB5044384

After a fresh install or an In-place upgrade to Windows 11, version 24H2, you might face issues with connecting via [DirectAccess](https://learn.mi…

After a fresh install or in-place upgrade to version 24H2, some enterprise devices might get stuck connecting through DirectAccess. KB5044384 resolves this issue.⁵

How to apply the workaround Workaround

Until a fix became available, Microsoft recommended that enterprises needing DirectAccess evaluate Always On VPN.⁵

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-10-08
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5043178, KB5043080, KB5041865, KB5041571

+4 earlier
KB5040529, KB5040435, KB5039304, KB5039239
Replaced by: KB5050009

Version	Build	Channel
24H2	26100.2033	General availability

Security

64 vulnerabilities fixed

2 exploited 1 critical 62 important 1 moderate

Vulnerability	Severity	CVSS
CVE-2024-43572 Exploited Microsoft Management Console Remote Code Execution Vulnerability	Important	7.8
CVE-2024-43573 Exploited Windows MSHTML Platform Spoofing Vulnerability	Moderate	6.5
CVE-2024-43582 Remote Desktop Protocol Server Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-6197 Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str	Important	8.8
CVE-2024-20659 Windows Hyper-V Security Feature Bypass Vulnerability	Important	7.1

The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 64 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 24H2

836.6 MB

windows11.0-kb5044284-x64.msu Main update · KB5044284 SHA-1: d7eb7cea…76ccf3 windows11.0-kb5043080-x64.msu Prerequisite · KB5043080 SHA-1: 95344967…9c83e8

Arm64 24H2

0.9 GB

windows11.0-kb5044284-arm64.msu Main update · KB5044284 SHA-1: c2971fdb…14d8c4 windows11.0-kb5043080-arm64.msu Prerequisite · KB5043080 SHA-1: df540a05…0f090b

Sources

Microsoft Support: KB5044284

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (5)

1. [Remote Desktop Gateway Service] Fixed: The service stops responding. This occurs when a service uses remote procedure calls (RPC) over HTTP. Because of this, the clients that are using the service disconnect. support.microsoft.com
2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
3. This issue is addressed in KB5052093. support.microsoft.com
4. We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows. Players on Arm devices can play Roblox by downloading the title directly from www.Roblox.com. support.microsoft.com
5. Enterprise customers that require DirectAccess are recommended to evaluate Always On VPN (AOVPN) until a fix becomes available. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake