The Update BureauKB5073723: Cumulative update for Windows 10, version 1809, January 2026. Exploited Desktop Window Manager flaw gets a security fix
An exploited Desktop Window Manager flaw is patched. Some apps can no longer autofill credentials during remote support or automated sign-in workflows.
Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809.
Review notes Additional details from the official release notes (2) Read notes
- In short The change blocks credential dialogs from responding to virtual keyboard input from remote desktop or screen-sharing tools or apps; it does not say all credential autofill is disabled.
- What changes The change blocks credential dialogs from responding to virtual keyboard input from remote desktop or screen-sharing tools or apps; it does not say all credential autofill is disabled.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Improvements 2 changes
Credentials autofill
-
Some apps can no longer autofill credentials during remote support or automated sign-in.1
Credential dialogs do not respond to virtual keyboard input from remote desktop or screen-sharing tools and apps.
Servicing stack
-
The component that installs Windows updates gets quality improvements.2
Includes servicing stack update KB5074222, build 17763.8260.
Fix 1 change
WinSqlite3.dll
For: Users whose security software flagged WinSqlite3.dll
-
Security software is less likely to flag the Windows
WinSqlite3.dllcomponent as vulnerable.3The Windows core componentWinSqlite3.dllis updated. This does not update application-specific copies ofsqlite3.dll.
Removal 1 change
Drivers
For: Devices that depend on these modem drivers
-
Some modem hardware will stop working because four modem drivers are removed.4
Removes
agrsm64.sys(x64),agrsm.sys(x86),smserl64.sys(x64), andsmserial.sys(x86).
Known issues
-
Some devices with Virtual Secure Mode enabled might fail to shut down or hibernate
Some Secure Launch-capable PCs with Virtual Secure Mode enabled might restart instead of shutting down or hibernating. KB5075904 addresses the issue.5
Resolution Fixed in KB5075904Install KB5075904 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Apps might become unresponsive when saving files to cloud-based storage
Some apps might freeze or show errors when opening or saving files in cloud storage. Outlook might also hang when PST files are stored on OneDrive.6
How to apply the workaround WorkaroundKB5078131 addresses this issue.6
-
Connection and authentication failures in Azure Virtual Desktop and Windows 365
Credential prompts for some Azure Virtual Desktop and Windows 365 connections failed. KB5077795 or a later update resolves the issue.7
Resolution Fixed in KB5077795Install KB5077795 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-01-13
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5074975, KB5071544, KB5068791, KB5066586
- Replaced by
- KB5077795
| Version | Build | Channel |
|---|---|---|
| 1809 | 17763.8276 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2026-20805
Exploited
Desktop Window Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Critical | 7.8 |
|
MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
|
Important | 6.4 |
The table lists the 4 exploited, publicly disclosed or critical vulnerabilities. See all 70 vulnerabilities →
Downloads (Microsoft Update Catalog)
Updated components
1,032 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 26 |
| Security and sign-in | 23 |
| Networking | 20 |
| Bluetooth | 16 |
| Hyper-V and virtualization | 13 |
| Kernel | 13 |
| File Explorer and shell | 12 |
| Search | 10 |
| Storage and file systems | 10 |
| Secure Boot | 8 |
| Remote Desktop | 6 |
| Audio | 5 |
Verified in package: changed files confirm Credentials autofill.
Sources
Cited passages from Microsoft's official notes (7)
-
1.
With this change, credential dialogs do not respond to virtual keyboard input from remote desktop or screen sharing tools or apps.
support.microsoft.com -
2.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
3.
Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable.
support.microsoft.com -
4.
This update removes the following modem drivers: agrsm64.sys (x64), agrsm.sys (x86), smserl64.sys (x64) and smserial.sys (x86).
support.microsoft.com -
5.
This issue is addressed in KB5075904.
support.microsoft.com -
6.
This issue is addressed in KB5078131.
support.microsoft.com -
7.
This issue is resolved in Windows updates released on and after January 17, 2026 (such as KB5077795).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Sep 25, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 3/5, clarity 3/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake