Skip to the content
The Update Bureau
Windows 11 23H2 Windows 11 23H2 Security update
Patch Tuesday Zero-day

KB5046633

KB5046633: Cumulative update for Windows 11, version 23H2, November 2024. Exploited Task Scheduler and NTLM flaws patched

In short

Fixes 34 vulnerabilities, including the actively exploited Task Scheduler flaw CVE-2024-49039 and NTLM hash disclosure flaw CVE-2024-43451, plus critical VMSwitch flaw CVE-2024-43625.

Does it affect you? Applies to: This update applies to devices running Windows 11, versions 22H2 and 23H2.

Build
22631.4460
Security
34 fixed · 1 critical · 2 exploited
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • Known issues The issue affects a limited number of enterprise, IoT, and education devices; Microsoft was investigating whether Home or Pro consumers are affected.

The official sources are linked at the end of the page.

What changes

Improvements 3 changes

Windows 11, version 23H2

  • This build includes all the improvements in Windows 11, version 22H2.1

Windows 11, version 22H2

  • Internal Windows functionality receives miscellaneous security improvements.2

Servicing stack

  • The component that installs Windows updates receives quality improvements to help devices receive and install updates.3
    Includes servicing stack update KB5044620.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5052094

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    After the October 2024 security update, the OpenSSH service might fail to start, preventing SSH connections. The issue affected a limited number of enterprise, IoT, and education devices and was addressed by KB5052094.4

    Resolution Fixed in KB5052094

    Install KB5052094 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-11-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5044380, KB5044285, KB5043145, KB5043076
+16 earlier KB5041587, KB5041585, KB5040527, KB5040442, KB5039302, KB5039212, KB5037853, KB5037771, KB5036980, KB5036893, KB5035942, KB5035853, KB5034848, KB5034765, KB5034204, KB5034123
Replaced by
KB5048685
VersionBuildChannel
23H2 22631.4460 General availability

Security

34 vulnerabilities fixed
2 exploited 1 critical 33 important
VulnerabilitySeverityCVSS
CVE-2024-49039 Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43451 Exploited
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2024-43625
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
 Critical 8.1

The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 34 vulnerabilities →

Updated components

564 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display17
Remote Desktop16
Hyper-V and virtualization14
File Explorer and shell10
Networking4
Secure Boot4
Kernel3
Windows Update2
Settings1

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. This build includes all the improvements in Windows 11, version 22H2. support.microsoft.com
  2. 2. This update makes miscellaneous security improvements to internal OS functionality. support.microsoft.com
  3. 3. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  4. 4. Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake