Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday Zero-day

KB5037765

KB5037765: Cumulative update for Windows Server, version 2019, May 2024. Exploited DWM and MSHTML flaws patched; IE mode and VPN fixes

In short

Fixes 49 security vulnerabilities, including two that attackers are exploiting, and addresses problems with IE mode, VPN connections, and Windows Server features.

Does it affect you? Applies to: Devices running Windows Server 2019.

Build
17763.5820
Security
49 fixed · 2 exploited

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 5 changes

IE mode

  • IE mode no longer stops responding when you press the left arrow key in an empty text box with caret browsing on.1

VPN

  • Addresses a known issue that might cause VPN connections to fail after installing the update dated April 9, 2024, or later.2

Active Directory

For: devices making Active Directory bind requests from outside a domain

  • Bind requests to IPv6 addresses work when the requestor is not joined to a domain.3

Domain controllers

  • Addresses an issue that might increase NTLM authentication traffic on domain controllers.4

Virtual Secure Mode

For: devices using these Virtual Secure Mode scenarios

  • Addresses failures in Virtual Secure Mode scenarios, including VPN, Windows Hello, Credential Guard, and Key Guard.5

Improvements 3 changes

DNS Server

  • NSEC3 validation in a recursive resolver now has a default limit of 1,000 computations. DNS Server administrators can change the limit.6
    The MaxComputationForNsec3Validation DWORD setting has a default of 1000, a maximum of 9600, and a minimum of 1.

Windows Kernel Vulnerable Driver Blocklist

  • The vulnerable-driver blocklist adds drivers that are at risk of being used in BYOVD attacks.7
    The quarterly update changes DriverSiPolicy.p7b.

Servicing stack

  • Improves the component that installs Windows updates, helping devices receive and install Microsoft updates.8
    Includes servicing stack update 17763.5695.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5039705

    Windows devices attempting to install this update, might face issues during the installation process.

    Installation might fail with error 0x800f0982, especially on devices without the English (United States) language pack. Error 0x80004005 has also been reported, including on devices with that language pack. KB5039705 addresses this issue.9

    Resolution Fixed in KB5039705

    Install KB5039705 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-05-14
Type
Cumulative update
VersionBuildChannel
2019 17763.5820 General availability

Security

49 vulnerabilities fixed
2 exploited 48 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-30040 Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
 Important 8.8
CVE-2024-30051 Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 49 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (9)
  1. 1. This update addresses an issue in that affects IE mode. It stops responding. This occurs if you press the left arrow key when an empty text box has focus and caret browsing is on. support.microsoft.com
  2. 2. This update addresses a known issue that might cause your VPN connection to fail. This occurs after you install the update dated April 9, 2024, or later. support.microsoft.com
  3. 3. This update addresses an issue that affects Active Directory. Bind requests to IPv6 addresses fail. This occurs when the requestor is not joined to a domain. support.microsoft.com
  4. 4. This update addresses a known issue that might affect domain controllers (DC). NTLM authentication traffic might increase. support.microsoft.com
  5. 5. This update addresses an issue that might affect Virtual Secure Mode (VSM) scenarios. They might fail. These scenarios include VPN, Windows Hello, Credential Guard, and Key Guard. support.microsoft.com
  6. 6. DNS Server Administrators can change the default number of computations. To do this, use the registry setting below. support.microsoft.com
  7. 7. This update includes quarterly changes to the Windows Kernel Vulnerable Driver Blocklist file, DriverSiPolicy.p7b. It adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. support.microsoft.com
  8. 8. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  9. 9. The installation might fail with an error code 0x800f0982. This issue is more likely to affect devices that do not have the English (United States) language pack. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 9 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake