KB5036896: Cumulative update for Windows Server, version 2019, April 2024. Exploited proxy-driver flaw closed; touch keyboard issue fixed

The update addresses 76 Important vulnerabilities, including exploited and publicly disclosed CVE-2024-26234, and fixes an issue that can keep the touch keyboard from opening.

Does it affect you? Applies to: Devices running Windows Server 2019.

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 5 changes

Touch keyboard

The touch keyboard opens when it previously might not open.¹

Remote Desktop

For: Devices using Remote Credential Guard with a Windows 11, version 22H2 or higher client

A network resource can be accessed from a Remote Desktop session when Remote Credential Guard is enabled.²
Applies when the client is running Windows 11, version 22H2 or higher.

DNS servers

For: Devices running DNS servers

DNS name registrations with Active Directory Domain Services no longer fail because of an LDAP timeout during DNS registration.³
Addresses Event 4016 on DNS servers; the issue previously remained until the DNS service was restarted.

Smart card authentication

For: Devices using smart cards to authenticate on remote systems

The device no longer shuts down after 60 seconds when a smart card is used to authenticate on a remote system.⁴

Temporary group membership

For: Devices using temporary group membership

Users with expired group memberships no longer appear in LDAP searches after Active Directory removes them.⁵

Improvements 4 changes

Daylight saving time

3 items

Daylight saving time changes in Palestine are supported.⁶
Daylight saving time changes in Kazakhstan are supported.⁷
Daylight saving time changes in Samoa are supported.⁸

Servicing stack

The component that installs Windows updates gets quality improvements to help devices receive and install updates.⁹
Includes servicing stack update 17763.5695.

Known issues

Resolved Affects: Everyone Resolved by KB5037765

Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later.

Windows devices might have VPN connection failures after installing the update dated April 9, 2024, or later. KB5037765 resolves this issue.¹⁰

Resolution Fixed in KB5037765

Install KB5037765 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Resolved Affects: Organizations and IT administrators Resolved by KB5037765

After installing the April 9, 2024 security update on domain controllers (DCs), you might notice a significant increase in [NTLM](https://learn.microsoft.com/windows-server/security/kerberos/ntlm-ove…

Organizations with a very small percentage of primary domain controllers and high NTLM traffic might see a significant increase in NTLM authentication traffic after installing the April 9, 2024 security update. KB5037765 resolves this issue.¹¹

Resolution Fixed in KB5037765

Install KB5037765 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-04-09
Type: Cumulative update

Version	Build	Channel
2019	17763.5696	General availability

Security

76 vulnerabilities fixed

1 exploited 76 important

Vulnerability	Severity	CVSS
CVE-2024-26234 Exploited Proxy Driver Spoofing Vulnerability	Important	6.7

The table lists the 1 exploited, publicly disclosed or critical vulnerabilities. See all 76 vulnerabilities →

Sources

Microsoft Support: KB5036896

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (11)

1. This update addresses an issue that affects the touch keyboard. Sometimes it does not open. support.microsoft.com
2. This update addresses an issue that affects a network resource. You cannot access it from a Remote Desktop session. This occurs when you turn on the Remote Credential Guard feature and the client is Windows 11, version 22H2 or higher. support.microsoft.com
3. This update addresses an issue that affects DNS servers. They receive Event 4016 for a timeout of the Lightweight Directory Access Protocol (LDAP). support.microsoft.com
4. This update addresses an issue that causes your device to shut down after 60 seconds. This occurs when you use a smart card to authenticate on a remote system. support.microsoft.com
5. This update addresses an issue that affects temporary group membership. Users whose memberships have expired appear when you search for them in LDAP. This occurs even though Active Directory has removed them. support.microsoft.com
6. This update supports daylight saving time (DST) changes in Palestine. support.microsoft.com
7. This update supports DST changes in Kazakhstan. support.microsoft.com
8. This update supports DST changes in Samoa. support.microsoft.com
9. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. support.microsoft.com
10. Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. support.microsoft.com
11. This issue is likely to affect organizations that have a very small percentage of primary domain controllers in their environment and high NTLM traffic. support.microsoft.com

Checked automatically: 7 of 8 checks passed, 11 quoted passages · compared with Microsoft's page on Nov 8, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake