KB5046613: Cumulative update for Windows 10, versions 21H2 and 22H2, November 2024. Exploited Task Scheduler flaw patched; game startup restored
Closes 31 vulnerabilities, including two exploited flaws, and restores startup for some games and apps. The update is no longer available from Microsoft release channels.
Does it affect you? Applies to: This update applies to Windows 10, version 22H2, and Windows 10, version 21H2 Enterprise LTSC 2021 and IoT Enterprise LTSC 2021. It produces OS builds 19045.5131 and 19044.5131, respectively.
Review notes Additional details from the official release notes (1) Read note
- What changes This update fixes the startup problem: Quick Assist, Microsoft Teams, Windows Narrator, and other affected apps can start without being run as an administrator.
The official sources are linked at the end of the page.
What changes
Fixes 2 changes
Some games fail to start
For: some gamers
-
Some games that failed to start or stopped responding after KB5045594 can start again.1
The update supports games affected by a third-party DRM component that is incompatible with KB5045594 while game developers address the DRM issue.
Some apps don’t start
- Quick Assist, Microsoft Teams, Windows Narrator, and other apps might start without being run as an administrator.2
Improvements 2 changes
Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)
-
The blocklist includes more drivers that are at risk of attacks using vulnerable drivers.3
Adds drivers at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks to
DriverSiPolicy.p7b.
Servicing stack
-
The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates reliably.4
Includes servicing stack update KB5046823, build 19044.5071.
Known issues
-
Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.
After the October 2024 security update, OpenSSH might fail to start, preventing SSH connections. This was reported on a limited number of enterprise, IoT, and education devices; Microsoft was investigating whether Home or Pro consumers were affected. KB5052077 addresses the issue.5
Resolution Fixed in KB5052077Install KB5052077 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-11-12
- Type
- Cumulative update
| Version | Build | Channel |
|---|---|---|
| 21H2 | 19044.5131 | General availability |
| 22H2 | 19045.5131 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-49039
Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
|
Important | 8.8 |
|
CVE-2024-43451
Exploited
NTLM Hash Disclosure Spoofing Vulnerability
|
Important | 6.5 |
The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 31 vulnerabilities →
Sources
Cited passages from Microsoft's official notes (5)
-
1.
Fixed: Some games do not start or stop responding after you install KB5045594. This occurs because some games use a third-party DRM component that is not compatible with that update.
support.microsoft.com -
2.
Fixed: Quick Assist, Microsoft Teams, Windows Narrator, and others might not start if you do not run them as an admin.
support.microsoft.com -
3.
Fixed: This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.
support.microsoft.com -
4.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
5.
Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Nov 8, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake