Skip to the content
The Update Bureau
Windows 10 1809 Windows 10 1809 Security update
Patch Tuesday Zero-day

KB5046615

KB5046615: Cumulative update for Windows 10, version 1809, November 2024. Exploited Task Scheduler and NTLM flaws addressed; vmswitch fixed

In short

The update addresses 28 security vulnerabilities, including two that attackers are exploiting, and fixes a vmswitch stop error in a specific virtual-machine setup.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809 (build 17763.6532).

Build
17763.6532
Security
28 fixed · 2 exploited

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 2 changes

Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)

  • The list of drivers identified as at risk for attacks using vulnerable drivers is expanded.1
    Adds drivers to the Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b) as drivers at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.

Servicing stack

  • The component that installs Windows updates receives quality improvements.2
    Includes servicing stack update KB5043126 (build 17763.6289).

Fix 1 change

vmswitch

For: Devices using this virtual-machine configuration

  • A stop error is fixed in a virtual-machine setup using two virtual switches, when one switch uses SR-IOV and the VM uses LBFO teaming.3
    The stop error occurs with Load Balancing and Failover (LBFO) teaming and two virtual switches on a VM, one of which uses single root Input/Output virtualization (SR-IOV).

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5053596

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    After the October 2024 security update, some customers report that the OpenSSH service fails to start, preventing SSH connections. The issue affects a limited number of enterprise, IoT, and education devices; Microsoft is investigating whether Windows Home or Pro customers are affected. KB5053596 addresses the issue.4

    Resolution Fixed in KB5053596

    Install KB5053596 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-11-12
Type
Cumulative update
VersionBuildChannel
1809 17763.6532 General availability

Security

28 vulnerabilities fixed
2 exploited 28 important
VulnerabilitySeverityCVSS
CVE-2024-49039 Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43451 Exploited
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2024-43620
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43621
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43622
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43624
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43627
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43628
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43635
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43516
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43528
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43626
Windows Telephony Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43629
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43641
Windows Registry Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43644
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49046
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43452
Windows Registry Elevation of Privilege Vulnerability
 Important 7.5
CVE-2024-43511
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43634
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43637
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43638
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43643
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43645
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
 Important 6.7
CVE-2024-43646
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7
CVE-2024-38203
Windows Package Library Manager Information Disclosure Vulnerability
 Important 6.2

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] Fixed: This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. [vmswitch] Fixed: A vmswitch triggers a stop error. This occurs when you use Load Balancing and Failover (LBFO) teaming with two virtual switches on a virtual machine (VM). In this case, one virtual switch uses single root Input/Output virtualization (SR-IOV). support.microsoft.com
  4. 4. Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Nov 14, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 3/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake