The Update BureauKB5046617: Cumulative update for Windows Server, version 2025, November 2024. Exploited Task Scheduler flaw patched; Dev Drive access restored
In short
The update fixes 32 vulnerabilities, including two critical ones and two that attackers are exploiting. It also restores Dev Drive access from WSL and fixes several other installation and connectivity problems.
Does it affect you? Applies to: Devices running Windows Server 2025, including build 26100.2314.
Microsoft publishes separate notes for this KB for Windows 11.
What changes
Fixes 4 changes
Task Manager
-
Task Manager shows the correct group count on the Processes tab when you turn on “Group by type.”1
Fixes an incorrect or zero group count on the Processes tab when “Group by type” is enabled.
Windows Subsystem for Linux (WSL)
-
You can access your Dev Drive from WSL again.2
Fixes the inability to access a Dev Drive from Windows Subsystem for Linux.
Setup
-
On some hardware configurations, Setup no longer stops responding on the first installation screen.3
Addresses a problem where Setup might stop responding on its first screen for up to 40 minutes.
Internet connection
-
A small number of devices can connect to the internet again.4
Fixes IPv4 connections stopping on certain networks when a DHCP server response contains duplicate DHCP options.
Improvement 1 change
Servicing stack
-
The component that installs Windows updates gets quality improvements.5
Includes servicing stack update KB5047621, build 26100.2303.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-11-12
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5043080, KB5044284
- Replaced by
- KB5048667
| Version | Build | Channel |
|---|---|---|
| 2025 | 26100.2314 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-49039
Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
|
Important | 8.8 |
|
CVE-2024-43451
Exploited
NTLM Hash Disclosure Spoofing Vulnerability
|
Important | 6.5 |
|
Windows KDC Proxy Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
|
Critical | 8.1 |
|
Active Directory Certificate Services Elevation of Privilege Vulnerability
|
Important | 7.8 |
The table lists the 5 exploited, publicly disclosed or critical vulnerabilities. See all 32 vulnerabilities →
Downloads (Microsoft Update Catalog)
x64
2025
0.9 GB
Sources
Updated
Cited passages from Microsoft's official notes (5)
-
1.
[Task Manager] Fixed: The count for the number of groups is wrong or always zero (0) on the Processes tab. This occurs when you turn on “Group by type.”
support.microsoft.com -
2.
[Windows Subsystem for Linux (WSL)] Fixed: You cannot access your Dev Drive.
support.microsoft.com -
3.
[Setup] Fixed: For some hardware configurations, setup might stop responding on the first screen of the installation. This lack of response might last for up to 40 minutes.
support.microsoft.com -
4.
[Internet connection] Fixed: A small number of devices cannot connect to the internet. This occurs when a DHCP server response has duplicate DHCP options. This stops IPv4 connections on certain networks.
support.microsoft.com -
5.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake