Skip to the content
The Update Bureau

Windows Server 2019

Windows Server 2019

Every published release for Windows Server 2019, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5136490 Nov 13, 2026
Build
17763.9488
Released
Nov 13, 2018
All editions
updates until Jan 9, 2029
Known issues
5 open

Build history

  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10

    KB5062557

    SPNEGO remote-code flaw patched; DHCP renewal failures fixed

    Patches critical vulnerabilities, including a remote-code execution flaw in SPNEGO, and fixes DHCP service interruptions that affected client IP renewal.

    Check the newer update, KB5063877
    Secure Boot certificates have started expiring and might affect secure startup from June 2026. Review Microsoft's guidance and update certificates in advance.

    Key changes 94 CVEs · 4 changes

    • Improved Microsoft RPC Netlogon protocol: Some Netlogon requests have tighter access checks, which improves security.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Network Security and Containers: Character rendering works correctly for GB18030-2022 compliance.

    Read update Source: Microsoft

    Build
    17763.7558
    Security
    94 fixed · 5 critical
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5060531

    Exploited Internet Shortcut flaw patched; DHCP service issue noted

    Closes an actively exploited Internet Shortcut Files flaw and fixes a GDI rendering problem. The DHCP Server service might intermittently stop responding; KB5062557 resolves that issue.

    Check the newer update, KB5062557

    Key changes 39 CVEs · 3 changes

    • Improved Servicing stack: The servicing stack receives quality improvements to help install Windows updates reliably.
    • Fix GDI and GDI+: Some characters no longer appear too wide, and the sample paragraph is no longer broken.
    • Fix Windows Hello: The update addresses a sign-in problem for users with self-signed certificates.

    Read update Source: Microsoft

    Build
    17763.7434
    Security
    39 fixed · 3 critical · 1 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5061978

    Confidential VM hangs and unexpected restarts fixed

    The update fixes intermittent stops and unexpected restarts for confidential virtual machines on Hyper-V with Windows Server 2022, primarily Azure confidential VMs. It is available only from the Update Catalog.

    Check the newer update, KB5060531

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Hyper-V Platform: The intermittent stops and unexpected restarts affecting confidential virtual machines on Hyper-V with Windows Server 2022 are fixed. A...

    Read update Source: Microsoft

    Build
    17763.7322
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5058392

    Exploited Scripting Engine and Windows driver flaws patched

    The update fixes 42 vulnerabilities, including five exploited flaws, and addresses a blue-screen error tied to certain GDI updates and fonts. A Citrix Session Recording Agent issue can still block installation of the January 2025 security update.

    Check the newer update, KB5061978
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 42 CVEs · 4 changes

    • Improved OS Security: Windows blocks more vulnerable drivers that have been used in attacks.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux system detection through SBAT gets improvements.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

    Read update Source: Microsoft

    Build
    17763.7314
    Security
    42 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5059091

    Hyper-V-isolated Windows containers start reliably across update levels

    Fixes startup failures for some Windows containers running in Hyper-V isolation when their update level differs from the hosting utility virtual machine. It also includes a servicing stack update.

    Check the newer update, KB5058392
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Windows containers: Windows containers running in Hyper-V isolation can start when their update level differs from the hosting utility virtual machine.

    Read update Source: Microsoft

    Build
    17763.7249
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5058922

    Enabled logon auditing display issue addressed

    The update addresses a mismatch where local audit policy could show enabled logon auditing as “No auditing.” It also includes servicing stack improvements and documents a Citrix installation issue.

    Check the newer update, KB5059091
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Active Directory Group Policy: Addresses a mismatch where local audit policies could show “No auditing” for logon events even when auditing was enabled and working.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.7240
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5055519

    Exploited log file driver flaw patched; Hello sign-in tightened

    The update addresses 75 vulnerabilities, including the exploited CVE-2025-29824, and requires a color camera for Windows Hello facial recognition. It has not been available since March 31, 2026.

    As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 75 CVEs · 5 changes

    • Improved Daylight Saving Time (DST): Daylight saving time support is updated for Chile’s Aysen region to follow the government’s 2025 change order.
    • Improved OS Security: A new %systemdrive%\inetpub folder is created for protection purposes. Do not delete it, whether or not IIS is enabled.
    • Improved Kerberos Authentication: Kerberos adds protections for a certificate authority that is in the Windows root store but not the NTAuth store. Domain controllers mi...

    Read update Source: Microsoft

    Build
    17763.7136
    Security
    75 fixed · 7 critical · 1 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5053596

    Exploited file-system flaws patched; SSH startup fixed

    The update fixes 33 vulnerabilities, including five exploited flaws in Windows file systems and the Microsoft Management Console, and restores OpenSSH service startup. It is no longer available from Microsoft’s release channels.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 33 CVEs · 5 changes

    • New GB18030-2022: Support is added for the GB18030-2022 amendment.
    • Improved Daylight saving time (DST): The time change rules for Paraguay are updated.
    • Improved Temporary files: System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.

    Read update Source: Microsoft

    Build
    17763.7009
    Security
    33 fixed · 5 critical · 5 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5052000

    Fixes 34 vulnerabilities (1 critical, 2 exploited)

    Windows Storage and WinSock elevation-of-privilege flaws are under active attack. The update also fixes USB camera, audio, and Microsoft Edge issues.

    This update is no longer available as of March 31, 2026. Windows Server 2019 updates end January 9, 2029.
    Known issues: 2 open Organizations and IT administrators
    • Citrix
    • Open Secure Shell service

    Key changes 34 CVEs · 7 changes

    • New GB18030-2022: Adds support for the GB18030-2022 amendment.
    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): Adds drivers at risk from Bring Your Own Vulnerable Driver attacks to the blocklist.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.

    Read update Source: Microsoft

    Build
    17763.6893
    Security
    34 fixed · 1 critical · 2 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10

    KB5050008

    Critical OLE and Remote Desktop flaws patched; driver blocklist expanded

    Fixes 118 vulnerabilities, including 8 Critical flaws across several Windows components. It also adds vulnerable drivers to the blocklist to help guard against BYOVD attacks.

    Check the newer update, KB5058922

    Key changes 118 CVEs · 2 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The list of drivers considered at risk of BYOVD attacks grows.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Critical CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    17763.6775
    Security
    118 fixed · 8 critical
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5048661

    Exploited log-file driver flaw patched; motherboard activation fixed

    Fixes a Windows activation problem after motherboard replacement and addresses security issues, including an actively exploited privilege-escalation flaw in the Common Log File System Driver.

    As of March 31, 2026, this update is no longer available through Microsoft release channels; Microsoft recommends updating devices to the latest Windows version.

    Key changes 55 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates reliably.
    • Fix Motherboard replacement: Windows activates after you replace a motherboard.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    17763.6659
    Security
    55 fixed · 13 critical · 1 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5046615

    Exploited Task Scheduler flaw patched; VM switch crash fixed

    Fixes a VM switch stop error and addresses exploited security flaws, including one in Task Scheduler. It also expands the vulnerable-driver blocklist.

    As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 31 CVEs · 3 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.
    • Fix vmswitch: A stop error no longer occurs in the described virtual machine setup when using two virtual switches.
    • Fix Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable-driver blocklist includes additional drivers that could be used in BYOVD attacks.

    Read update Source: Microsoft

    Build
    17763.6532
    Security
    31 fixed · 1 critical · 2 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5044277

    Exploited MMC and MSHTML flaws patched; Remote Desktop fixed

    Fixes security issues, including flaws attackers are exploiting, and addresses sporadic Remote Desktop disconnections on some servers.

    As of March 31, 2026, this update is no longer available through Microsoft release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 79 CVEs · 3 changes

    • Improved Servicing stack: The included servicing stack update improves the component that installs Windows updates.
    • Fix FrameShutdownDelay: The browser honors the FrameShutdownDelay value in the registry.
    • Fix Remote Desktop: Fixes an issue that could sporadically disrupt Remote Desktop connections on Windows Servers using a legacy protocol in the Remote Desk...

    Read update Source: Microsoft

    Build
    17763.6414
    Security
    79 fixed · 1 critical · 2 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5043050

    Exploited MSHTML, Installer and Mark-of-the-Web flaws addressed

    Addresses 39 vulnerabilities, including three exploited flaws and two critical remote-code-execution vulnerabilities. It also addresses printing, BitLocker decryption and other issues on Windows Server 2019.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 39 CVEs · 6 changes

    • Improved Windows Installer: When Windows Installer repairs an application, User Account Control now prompts for credentials. Application owners need to update auto...
    • Improved Servicing stack: Includes quality improvements to the component that installs Windows updates.
    • Fix AppContainer: Addresses printer problems when you use printers in restricted settings such as AppContainer.

    Read update Source: Microsoft

    Build
    17763.6293
    Security
    39 fixed · 2 critical · 3 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5041578

    Exploited kernel flaws addressed; Linux dual-boot issue reported

    Addresses 43 vulnerabilities, including four being exploited and one publicly disclosed. It also reports that some Windows-and-Linux dual-boot devices might fail to start Linux.

    As of March 31, 2026, this update is no longer available through the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.
    Known issues: 1 open
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 43 CVEs · 9 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist includes more drivers at risk of Bring Your Own Vulnerable Driver attacks.
    • Improved BitLocker: Some devices might show a BitLocker recovery screen at startup after the July 9, 2024 update, especially when device encryption is on.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): The update blocks vulnerable Linux EFI bootloaders on systems running Windows. Older Linux ISO images might not boot after the update.

    Read update Source: Microsoft

    Build
    17763.6189
    Security
    43 fixed · 2 critical · 4 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5040430

    Exploited MSHTML spoofing flaw patched; update no longer available

    Addresses 84 vulnerabilities, including an actively exploited MSHTML spoofing flaw. It is no longer available from Microsoft’s release channels as of March 31, 2026.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 84 CVEs · 6 changes

    • Improved Windows Local Administrator Password Solution (LAPS): LAPS post-authentication actions run at the end of the grace period instead of at restart.
    • Improved Remote Authentication Dial-In User Service (RADIUS) protocol: The update addresses a RADIUS issue related to MD5 collisions.
    • Improved BitLocker: BitLocker’s default Secure Boot validation profile includes additional PCR measurements.

    Read update Source: Microsoft

    Build
    17763.6054
    Security
    84 fixed · 4 critical · 1 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5039217

    Exploited Mark of the Web bypass addressed; LSASS fixes

    The update addresses an exploited Mark of the Web security bypass, fixes two LSASS problems, and changes how Windows tags files from untrusted locations.

    As of March 31, 2026, this update is no longer available through the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 32 CVEs · 5 changes

    • Improved curl.exe: Windows’ curl.exe is updated to version 8.7.1.
    • Improved File Explorer: Files and folders from untrusted locations get a Mark of the Web tag. This updates the LastWriteTime timestamp and might affect scenari...
    • Improved Servicing stack: The servicing stack, which installs Windows updates, receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.5936
    Security
    32 fixed · 1 critical · 1 exploited
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5039705

    English language pack issue affecting May 14 update installation

    Addresses an English (United States) language-pack issue that might make KB5037765 fail to install (0x800f0982 without the pack; 0x80004005 on some devices with it). It is no longer available as of March 31, 2026.

    Since March 31, 2026, this update has no longer been available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.
    • Fix English (United States) language pack: Addresses an issue that might make KB5037765 fail to install on devices without the English (United States) language pack. The issue mi...

    Read update Source: Microsoft

    Build
    17763.5830
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5037765

    Exploited DWM and MSHTML flaws patched; IE mode and VPN fixes

    Fixes 49 security vulnerabilities, including two that attackers are exploiting, and addresses problems with IE mode, VPN connections, and Windows Server features.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 49 CVEs · 8 changes

    • Improved DNS Server: NSEC3 validation in a recursive resolver now has a default limit of 1,000 computations. DNS Server administrators can change the limit.
    • Improved Windows Kernel Vulnerable Driver Blocklist: The vulnerable-driver blocklist adds drivers that are at risk of being used in BYOVD attacks.
    • Improved Servicing stack: Improves the component that installs Windows updates, helping devices receive and install Microsoft updates.

    Read update Source: Microsoft

    Build
    17763.5820
    Security
    49 vulnerabilities fixed · 2 actively exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5036896

    Exploited proxy-driver flaw closed; touch keyboard issue fixed

    The update addresses 76 Important vulnerabilities, including exploited and publicly disclosed CVE-2024-26234, and fixes an issue that can keep the touch keyboard from opening.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 76 CVEs · 9 changes

    • Improved Daylight saving time: Daylight saving time changes in Palestine are supported.
    • Improved Daylight saving time: Daylight saving time changes in Kazakhstan are supported.
    • Improved Daylight saving time: Daylight saving time changes in Samoa are supported.

    Read update Source: Microsoft

    Build
    17763.5696
    Security
    76 vulnerabilities fixed · 1 actively exploited
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5037425

    LSASS memory leak on domain controllers addressed

    The update addresses an LSASS memory leak that could make domain controllers stop responding and restart unexpectedly.

    Check the newer update, KB5050008

    Key changes 2 changes

    • Improved Servicing stack: Includes quality improvements to the component that installs Windows updates.
    • Fix Local Security Authority Subsystem Service (LSASS): Addresses an LSASS memory leak on domain controllers that could cause excessive memory use, stop responding, and restart unexpectedly.

    Read update Source: Microsoft

    Build
    17763.5579
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10

    KB5035849

    Touch keyboard fix; LSASS leak can reboot domain controllers

    The update addresses a touch keyboard problem and includes 35 security fixes, including two critical Hyper-V flaws. A separate LSASS memory leak on domain controllers is addressed by KB5037425.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 35 CVEs · 3 changes

    • Improved Active Directory: Domains hosting mobile device management providers can transition from Compatibility mode to Enforcement mode for stronger certificate...
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Touch keyboard: Addresses a problem that sometimes prevents the touch keyboard from opening.

    Read update Source: Microsoft

    Build
    17763.5576
    Security
    35 fixed · 2 critical
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5034768

    Exploited Windows flaws closed; LAPS and LSASS issues addressed

    Closes 39 vulnerabilities, including critical CVE-2024-21357 (Windows PGM remote code execution) and exploited CVE-2024-21338 (Windows Kernel), CVE-2024-21412 (Internet Shortcut Files), and CVE-2024-21351 (SmartScreen). It also addresses several sign-in and system issues.

    The update is no longer available from the Microsoft Update Catalog or other release channels as of March 31, 2026. The page recommends updating devices to the latest version of Windows.

    Key changes 39 CVEs · 9 changes

    • Improved Device metadata: Downloads of device metadata over HTTPS from Windows Metadata and Internet Services are more secure.
    • Improved Windows nesting limit: The nesting limit can now be set as low as 35 instead of 50. Do not change it unless a kernel stack overflow and recursion in DestroyWi...
    • Improved UEFI Secure Boot: UEFI Secure Boot systems can opt to add a renewed signing certificate.

    Read update Source: Microsoft

    Build
    17763.5458
    Security
    39 fixed · 1 critical · 3 exploited
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10

    KB5034127

    IE mode and touchscreens work more reliably

    Fixes several Windows Server 2019 problems, including IE mode becoming unresponsive and touchscreens malfunctioning with multiple monitors. It also addresses 33 security vulnerabilities, including two critical flaws.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 33 CVEs · 13 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Internet Explorer mode: IE mode no longer stops responding when you press the left arrow key in an empty text box while caret browsing is on.
    • Fix Touchscreens: Touchscreens work properly when you use more than one monitor.

    Read update Source: Microsoft

    Build
    17763.5329
    Security
    33 fixed · 2 critical