The Update BureauKB5046615: Cumulative update for Windows Server, version 2019, November 2024. Exploited Task Scheduler flaw patched; VM switch crash fixed
Fixes a VM switch stop error and addresses exploited security flaws, including one in Task Scheduler. It also expands the vulnerable-driver blocklist.
Does it affect you? Applies to: Devices running Windows Server 2019, including build 17763.6532.
Microsoft publishes separate notes for this KB for Windows 10.
What changes
Fixes 2 changes
vmswitch
For: VMs using LBFO teaming with two virtual switches, one using SR-IOV
-
A stop error no longer occurs in the described virtual machine setup when using two virtual switches.1
Fixes a stop error when Load Balancing and Failover (LBFO) teaming is used with two virtual switches on a VM, one of which uses SR-IOV.
Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)
-
The vulnerable-driver blocklist includes additional drivers that could be used in BYOVD attacks.2
Adds drivers at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks to
DriverSiPolicy.p7b.
Improvement 1 change
Servicing stack
-
The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.3
Includes servicing stack update KB5043126, build 17763.6289.
Known issues
-
Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.
After the October 2024 security update, the OpenSSH service might fail to start, preventing SSH connections. The issue affects a limited number of enterprise, IoT, and education devices; Microsoft was investigating whether Home or Pro devices were affected. KB5053596 resolves the issue.4
Resolution Fixed in KB5053596Install KB5053596 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-11-12
- Type
- Cumulative update
| Version | Build | Channel |
|---|---|---|
| 2019 | 17763.6532 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-49039
Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
|
Important | 8.8 |
|
CVE-2024-43451
Exploited
NTLM Hash Disclosure Spoofing Vulnerability
|
Important | 6.5 |
|
Windows KDC Proxy Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Active Directory Certificate Services Elevation of Privilege Vulnerability
|
Important | 7.8 |
The table lists the 4 exploited, publicly disclosed or critical vulnerabilities. See all 31 vulnerabilities →
Sources
Cited passages from Microsoft's official notes (4)
-
1.
[vmswitch] Fixed: A vmswitch triggers a stop error. This occurs when you use Load Balancing and Failover (LBFO) teaming with two virtual switches on a virtual machine (VM).
support.microsoft.com -
2.
[Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] Fixed: This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.
support.microsoft.com -
3.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
4.
This issue is addressed in KB5053596.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Nov 15, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake