Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday Zero-day

KB5040430

KB5040430: Cumulative update for Windows Server, version 2019, July 2024. Exploited MSHTML spoofing flaw patched; update no longer available

In short

Addresses 84 vulnerabilities, including an actively exploited MSHTML spoofing flaw. It is no longer available from Microsoft’s release channels as of March 31, 2026.

Does it affect you? Applies to: Devices running Windows Server 2019. The update is no longer available from Microsoft’s release channels as of March 31, 2026.

Build
17763.6054
Security
84 fixed · 4 critical · 1 exploited
Review notes Additional details from the official release notes (3) Read notes
  • In detail The page labels this a known issue: parts of Windows apps might display in English when English is not the display language, and tab or button font size might change.
  • What changes The page labels this a known issue: parts of Windows apps might display in English when English is not the display language, and tab or button font size might change.
  • What changes LAPS Post Authentication Actions occur at restart, not at the end of the grace period.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Improvements 5 changes

Windows Local Administrator Password Solution (LAPS)

  • LAPS post-authentication actions run at the end of the grace period instead of at restart.1
    Changes when LAPS Post Authentication Actions (PAA) occur.

Remote Authentication Dial-In User Service (RADIUS) protocol

  • The update addresses a RADIUS issue related to MD5 collisions.2
    For more information, see KB5040268.

BitLocker

  • BitLocker’s default Secure Boot validation profile includes additional PCR measurements.3
    Adds PCR 4 to PCR 7 and 11 in the default Secure Boot validation profile. See CVE-2024-38058 for more information.

File shortcut icons

  • IT administrators must configure a policy for remote paths in shortcut icons. Without it, icons on the Start menu, desktop, and taskbar might fail to render after this or a later update.4
    Configure the policy “Allow the use of remote paths in file shortcut icons” for remote paths in .LNK files.

Servicing stack

  • The servicing stack receives quality improvements to help devices reliably receive and install updates.5
    Includes servicing stack update KB5040563 (build 17763.6040).

Fix 1 change

Language for context menus and dialog buttons

  • Parts of Windows app interfaces might appear in English when English is not the display language. The font size for tab and button names might also change.6

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5044277

    After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization.

    On Windows Servers using the legacy Remote Procedure Call over HTTP protocol in Remote Desktop Gateway, connections might be interrupted intermittently, potentially every 30 minutes. Users must reconnect; administrators might see the TSGateway service become unresponsive with exception code 0xc0000005. KB5044277 resolves this issue.7

    Resolution Fixed in KB5044277

    Install KB5044277 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Everyone Resolved by KB5041578

    After installing the July 9, 2024, Windows security update, you might see a [BitLocker recovery](https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recov…

    After installing this update, a device might show a BitLocker recovery screen at startup, particularly if Device Encryption is enabled. You might need the recovery key to unlock the drive. KB5041578 resolves this issue.8

    Resolution Fixed in KB5041578

    Install KB5041578 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-07-09
Type
Cumulative update
VersionBuildChannel
2019 17763.6054 General availability

Security

84 vulnerabilities fixed
1 exploited 4 critical 78 important 2 moderate
VulnerabilitySeverityCVSS
CVE-2024-38112 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Important 7.5
CVE-2024-38074
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-38076
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-38077
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-38060
Windows Imaging Component Remote Code Execution Vulnerability
 Critical 8.8

The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 84 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (8)
  1. 1. [Windows Local Administrator Password Solution (LAPS)] Its Post Authentication Actions (PAA) do not occur at the end of the grace period. Instead, they occur at restart. support.microsoft.com
  2. 2. [Remote Authentication Dial-In User Service (RADIUS) protocol] This issue is related to MD5 collisions. support.microsoft.com
  3. 3. [BitLocker] This update adds PCR 4 to PCR 7 and 11 for the default Secure Boot validation profile. support.microsoft.com
  4. 4. This update changes how IT administrators should set up remote paths for file shortcut icons (.LNK files). The set up now requires that you configure the policy “Allow the use of remote paths in file shortcut icons”. support.microsoft.com
  5. 5. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  6. 6. [Language for context menus and dialog buttons (known issue)] In Windows apps, parts of the UI might display in English when English is not set as the display language. Also, the font size might change for the names of tabs and buttons. support.microsoft.com
  7. 7. After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization. support.microsoft.com
  8. 8. After installing the July 9, 2024, Windows security update, you might see a BitLocker recovery screen upon starting up your device. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 8 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake