Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday Zero-day

KB5043050

KB5043050: Cumulative update for Windows Server, version 2019, September 2024. Exploited MSHTML, Installer and Mark-of-the-Web flaws addressed

In short

Addresses 39 vulnerabilities, including three exploited flaws and two critical remote-code-execution vulnerabilities. It also addresses printing, BitLocker decryption and other issues on Windows Server 2019.

Does it affect you? Applies to: Devices running Windows Server 2019.

Build
17763.6293
Security
39 fixed · 2 critical · 3 exploited

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 4 changes

AppContainer

For: Users printing from restricted settings

  • Addresses printer problems when you use printers in restricted settings such as AppContainer.1

BitLocker

For: Users moving BitLocker data drives between Windows versions

  • Addresses a problem that might prevent you from decrypting a BitLocker data drive moved from a newer Windows version to an older one.2

Windows Server 2019 (known issue)

For: Some Windows Server 2019 devices

  • Addresses slowdowns, unresponsiveness and high CPU usage on some devices, most often involving Cryptographic Services. Antivirus scans of %systemroot%\system32\catroot2 are reported as a trigger by a few companies.3

Dual boot of Windows and Linux (known issue)

For: Devices set up to dual-boot Windows and Linux

  • Addresses the dual-boot startup issue in which Linux might fail to start, showing a “Verifying shim SBAT data failed: Security Policy Violation” error.4

Improvements 2 changes

Windows Installer

For: Application owners and users of repaired applications

  • When Windows Installer repairs an application, User Account Control now prompts for credentials. Application owners need to update automation scripts and add the Shield icon to indicate that full administrator access is required.5
    To turn off the prompt, set HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableLUAInRepair to 1.

Servicing stack

  • Includes quality improvements to the component that installs Windows updates.6
    Includes servicing stack update KB5043126, build 17763.6289.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5044277

    After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization.

    After Windows updates released on or after July 9, 2024, Remote Desktop connections might be interrupted across an organization when Remote Desktop Gateway uses the legacy Remote Procedure Call over HTTP protocol. The issue can recur about every 30 minutes, causing users to reconnect. KB5044277 resolves it.7

    Resolution Fixed in KB5044277

    Install KB5044277 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-09-10
Type
Cumulative update
VersionBuildChannel
2019 17763.6293 General availability

Security

39 vulnerabilities fixed
3 exploited 2 critical 34 important 1 moderate 2 not rated
VulnerabilitySeverityCVSS
CVE-2024-43461 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Important 8.8
CVE-2024-38014 Exploited
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38217 Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
 Important 5.4
CVE-2024-38063
Windows TCP/IP Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-38119
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
 Critical 7.5

The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 39 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (7)
  1. 1. [AppContainer] Printers do not work as you expect when you use them in a restricted setting, like AppContainer. support.microsoft.com
  2. 2. [BitLocker] You might not be able to decrypt a BitLocker data drive. This occurs when you move that drive from a newer version of Windows to an older version. support.microsoft.com
  3. 3. [Windows Server 2019 (known issue)] Some devices slow down, stop responding, and have high CPU usage. This is most likely to occur with Cryptographic Services. support.microsoft.com
  4. 4. [Dual boot of Windows and Linux (known issue)] Linux might fail to start up when you turn on dual-boot setup for Windows and Linux on your device. support.microsoft.com
  5. 5. When it repairs an application, the User Account Control (UAC) does not prompt for your credentials. After you install this update, the UAC will prompt for them. support.microsoft.com
  6. 6. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  7. 7. This issue is addressed in KB5044277. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Nov 14, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake