Skip to the content
The Update Bureau
Windows 11 23H2 Windows 11 23H2 Security update
Patch Tuesday Zero-day

KB5044285

KB5044285: Cumulative update for Windows 11, version 23H2, October 2024. Exploited MMC and MSHTML flaws patched; 22H2 restart failures fixed

In short

The update patches exploited MMC and MSHTML flaws and fixes repeated restarts, hangs, blue or green screens, and BitLocker recovery on Windows 11 version 22H2.

Does it affect you? Applies to: Devices running Windows 11 versions 22H2 and 23H2, with OS builds 22621.4317 and 22631.4317. The update is available for x64 and Arm64 devices.

Build
22631.4317
Security
64 fixed · 1 critical · 2 exploited
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • Known issues Microsoft lists the OpenSSH issue as applying to all users. It affected a limited number of devices, and Microsoft was investigating whether Home or Pro devices were affected.

The official sources are linked at the end of the page.

What changes

Improvements 3 changes

Windows security

  • Addresses security issues in Windows.1

Windows 11 version 23H2

  • This build includes the improvements listed for Windows 11 version 22H2.2

Servicing stack

  • The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.3
    Servicing stack update KB5046247, builds 22621.4312 and 22631.4312.

Fix 1 change

Multiple restarts

For: Windows 11 version 22H2 users

  • On Windows 11 version 22H2, your device might restart repeatedly or stop responding, show blue or green screens, open Automatic Repair, or trigger BitLocker recovery. This update fixes the issue.4

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5052094

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    After the October 2024 security update, OpenSSH might fail to start and block SSH connections on a limited number of devices. The issue affects some enterprise, IoT, and Education devices; Microsoft was investigating whether Home or Pro devices are affected. KB5052094 addresses the issue.5

    Resolution Fixed in KB5052094

    Install KB5052094 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5043145, KB5043076, KB5041587, KB5041585
+14 earlier KB5040527, KB5040442, KB5039302, KB5039212, KB5037853, KB5037771, KB5036980, KB5036893, KB5035942, KB5035853, KB5034848, KB5034765, KB5034204, KB5034123
Replaced by
KB5046633
VersionBuildChannel
23H2 22631.4317 General availability

Security

64 vulnerabilities fixed
2 exploited 1 critical 62 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-43572 Exploited
Microsoft Management Console Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-43573 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Moderate 6.5
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-6197
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str
 Important 8.8
CVE-2024-38202
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-20659
Windows Hyper-V Security Feature Bypass Vulnerability
 Important 7.1

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 64 vulnerabilities →

Updated components

781 files changed since the previous update for the same versions.

Top changed componentsFiles
Remote Desktop18
Graphics and display15
Hyper-V and virtualization13
Security and sign-in10
File Explorer and shell7
Kernel7
Storage and file systems7
Emoji and input6
Bluetooth4
Printing4
Networking3
Secure Boot2

Sources

Updated
Cited passages from Microsoft's official notes (5)
  1. 1. This update addresses security issues for your Windows operating system. support.microsoft.com
  2. 2. This build includes all the improvements in Windows 11, version 22H2. support.microsoft.com
  3. 3. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  4. 4. Fixed: Your device might restart multiple times or stop responding. Blue or green screens also appear. In some cases, the Automatic Repair tool opens by itself. In other cases, the issue triggers BitLocker recovery. support.microsoft.com
  5. 5. Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake