Applies To
Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Windows 10, version 22H2, all editions

Release Date:

9/7/2024

Version:

OS Builds 19044.4651 and 19045.4651

EXPIRATION NOTICE

IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows.

 

11/17/20

For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 10, version 22H2, see its update history page. 

Note Follow @WindowsUpdate to find out when new content is published to the Windows release health dashboard.  

Highlights

  • This update addresses security issues for your Windows operating system.  

Improvements 

Note To view the list of addressed issues, click or tap the OS name to expand the collapsible section.

Important: Use EKB KB5015684 to update to Windows 10, version 22H2.

This security update includes quality improvements. Key changes include: 

  • This build includes all the improvements from the supported Windows 10, version 21H2 editions.

  • No additional issues are documented for this release.  

Important: Use EKB KB5003791 to update to Windows 10, version 21H2 on supported editions.

This security update includes quality improvements that were a part of update KB5039299 (released June 25, 2024). Below is a summary of the key issues that this update addresses when you install this KB. If there are new features, it lists them as well. The bold text within the brackets indicates the item or area of the change we are documenting.

  • ​​​​​​​[Remote Authentication Dial-In User Service (RADIUS) protocol] This issue is related to MD5 collisions. For more information, see KB5040268.

  • [BitLocker] This update adds PCR 4 to PCR 7 and 11 for the default Secure Boot validation profile. See CVE-2024-38058 for more information.

  • This update changes how IT administrators should set up remote paths for file shortcut icons (.LNK files). The set up now requires that you configure the policy “Allow the use of remote paths in file shortcut icons”. If you don’t configure this policy, icons on the Start menu, Windows desktop and taskbar will fail to render after you install this update or subsequent updates.

If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.  

For more information about security vulnerabilities, please refer to the new Security Update Guide website and the July 2024 Security Updates. 

Windows 10 servicing stack update (KB5039336) - 19044.4585 and 19045.4585

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

Symptom

Workaround

After you install KB5034203 (dated 01/23/2024) or later updates, some Windows devices that use the DHCP Option 235 to discover Microsoft Connected Cache (MCC) nodes in their network might be unable to use those nodes. Instead, these Windows devices will download updates and apps from the public internet. IT administrators also see increased download traffic on their internet routes.

Those of you who use the Home edition of Windows are not likely to experience this issue. MCC and DHCP Option 235 are typically used in enterprise environments.

This issue is addressed in KB5040525.

After installing this update, you might be unable to change your user account profile picture.

When attempting to change a profile picture by selecting the button Start> Settings > Account > Your info and, under Create your picture, clicking on Browse for one, you might receive an error message with error code 0x80070520. 

After further investigation, we concluded this issue has very limited or no impact for this Windows version.

If you encounter this issue on your device, please contact Windows support for help

After installing the July 9, 2024, Windows security update, you might see a BitLocker recovery screen upon starting up your device. This screen does not commonly appear after a Windows update. You are more likely to face this issue if you have the Device Encryption option enabled in Settings under Privacy & Security > Device encryption. Because of this issue, you might be prompted to enter the recovery key from your Microsoft account to unlock your drive

This issue is addressed in KB5041580.

How to get this update

EXPIRATION NOTICE

IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows.

Facebook LinkedIn Email
SUBSCRIBE RSS FEEDS

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Microsoft 365 subscription benefits

Microsoft 365 training

Microsoft security

Accessibility center