Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday Zero-day

KB5044277

KB5044277: Cumulative update for Windows Server, version 2019, October 2024. Exploited MMC and MSHTML flaws patched; Remote Desktop fixed

In short

Fixes security issues, including flaws attackers are exploiting, and addresses sporadic Remote Desktop disconnections on some servers.

Does it affect you? Applies to: Devices running Windows Server 2019, build 17763.6414.

Build
17763.6414
Security
79 fixed · 1 critical · 2 exploited
Review notes Additional details from the official release notes (1) Read note
  • In detail The update also addresses CVE-2024-43582, a Critical Remote Desktop Protocol Server remote code execution vulnerability.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fixes 2 changes

FrameShutdownDelay

  • The browser honors the FrameShutdownDelay value in the registry.1
    Fixes the browser ignoring the value under HKLM\SOFTWARE\Microsoft\Internet Explorer\Main.

Remote Desktop

  • Fixes an issue that could sporadically disrupt Remote Desktop connections on Windows Servers using a legacy protocol in the Remote Desktop Gateway.2
    The issue could end signed-in sessions, requiring users to reconnect. IT administrators could see the TSGateway service stop responding with exception code 0xc0000005.

Improvement 1 change

Servicing stack

  • The included servicing stack update improves the component that installs Windows updates.3
    Includes servicing stack update KB5043126, build 17763.6289.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5053596

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    The OpenSSH service might fail to start after the October 2024 security update, preventing SSH connections. KB5053596 addresses the issue.4

    Resolution Fixed in KB5053596

    Install KB5053596 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Type
Cumulative update
VersionBuildChannel
2019 17763.6414 General availability

Security

79 vulnerabilities fixed
2 exploited 1 critical 77 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-43572 Exploited
Microsoft Management Console Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-43573 Exploited
Windows MSHTML Platform Spoofing Vulnerability
 Moderate 6.5
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-6197
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str
 Important 8.8
CVE-2024-38202
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-20659
Windows Hyper-V Security Feature Bypass Vulnerability
 Important 7.1

The table lists the 6 exploited, publicly disclosed or critical vulnerabilities. See all 79 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. [FrameShutdownDelay] Fixed: The browser ignores its value in the “HKLM\SOFTWARE\Microsoft\Internet Explorer\Main” registry key. support.microsoft.com
  2. 2. [Remote Desktop (known issue)] Fixed: Windows Servers might disrupt Remote Desktop connections across your company. This issue might occur if you use a legacy protocol in the Remote Desktop Gateway. support.microsoft.com
  3. 3. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  4. 4. This issue is addressed in KB5053596. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake