On Patch Tuesday 24 February 2024, Windows 11 received a Security Update carrying improvements for —– and bug fixes. KB5034765 is the release that changes the OS builds to 22631.3155 and 22621.3155 for 23H2 and 22H2 respectively. This Windows update includes all the improvements that the cumulative update preview KB5034204 23/01/204 brought. You can see the list of all the patches in Windows 11 Cumulative Updates Monitor.
Full name of the release is “2024-02 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5034765)”. You can install this Windows update automatically or manually after downloading its Standalone package from Microsoft update catalog.
Table of Contents
February 2024 Security update KB5034765 Windows 11 23H2 changes bug fixes, and improvements
Here is the changelog:
Bug Fixes and improvements
Note: To view the list of addressed issues, click or tap the OS name to expand the collapsible section.
Windows 11, version 23H2
- There is a new change; the Copilot in Windows icon now appears on the right side of the system tray on the taskbar in KB5034765. Furthermore, the Show desktop located at the rightmost corner of the taskbar will be off by default. If you want to enable it head to Settings > Personalization > Taskbar.
- This update addresses security issues for your Windows operating system.
Windows 11 22H2
- For the 22H2 version, this patch addresses Narrator announcements that are slow when using Natural Voices.
- This update addresses explorer.exe to stop responding when you restart or shut down a PC that has a controller accessory attached to it.
- LCU KB5034765 addresses an issue that affects the download of device metadata. Downloads from the Windows Metadata and Internet Services aka WMIS and over HTTPS are now more secure.
Improvements of KB5034204 that are included in KB5034765 Windows 11 23H2
- KB5034765 addresses problems with certain types of 7-Zip files. Because of this issue, they appear as empty in File Explorer.
- This Cumulative update addresses the WiFi Protected Access 3 (WPA3) issue occuring in the Group Policy editor. As a result, HTML preview rendering fails.
- This security patch addresses a caching problem in Windows Management Instrumentation or WMI. Because of the issue CurrentTimeZone changed to the wrong value.
- Windows 11 22631.3155 and 22621.3155 make Windows more reliable during power transitions. This change reduces the risk of a stop error.
- This update addresses an issue that affects the OpenType font driver. On a certain architecture, the issue might affect how text renders for third-party applications.
- KB5034765 LCU addresses a known issue that affects the color font format for COLRv1. It now renders properly. Windows 11 utilizes this format to display emoji with a 3D-like appearance.
- WMI stops working in certain scenarios with mobile device management (MDM) providers, such as Microsoft Intune.
- This LCU addresses a known issue that affects BitLocker data-only encryption. A mobile device management or MDM service, for example, Microsoft Intune, might not get the right data. This problem happens when using the policy settings SystemDrivesEncryptionType, FixedDrivesEncryptionType, and BitLocker configuration service provider (CSP).
- Windows 11 22631.3155 and 22621.3155 addresses an issue that affects Access Point Name (APN) profiles. As a result, automatically configuring APN profiles fails for cellular enabled devices. This happens when running the netsh mbn show readyinfo command.
- KB5034765 addresses a Trusted Platform Modules or TPM problem that occurs on certain devices and they did not initialize correctly. As a result, TPM-based scenarios stopped working.
- This patch incorporates quarterly changes to the Windows Kernel Vulnerable Driver Blocklist file, p7b to add to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.
- This release affects Unified Extensible Firmware Interface aka UEFI and Secure Boot systems and adds a renewed signing certificate to the Secure Boot DB variable. You can now opt for this change.
- February patch Tuesday update for Windows 11 23H2 addresses the RemoteApp Windows issue. In particular cases, they continue on client devices after you close them.
- This cumulative update patch addresses a remote desktop client issue that might connect to a wrong instance of a user’s session. This happens when a user has multiple sessions on the host.
- This update addresses changes in the keyboard language that fail to apply to RemoteApps in some scenarios.
- Windows 11 22631.3155 and 22621.3155 address Windows Local Administrator Password Solution (LAPS) Post Authentication Actions (PAA) problem. The actions happen at reboot instead of at the end of the grace period.
- This LCU addresses Active Directory. Bind requests to IPv6 addresses fail issue. The problem occurs when the requestor is not joined to a domain.
- KB5034765 addresses the LocalUsersAndGroups CSP that stops processing group memberships if it cannot find a group.
- This release addresses a Group Policy Folder Redirection issue that occurs in a multi-forest deployment. Because of this problem, it stops you from selecting a group account from the target domain. As a result, you cannot apply advanced folder redirection settings to that domain. This problem seems to appear when the target domain has a one-way trust with the domain of the admin user. This problem involves all Hardened Forests (HF), Privileged Access Management (PAM) deployments, or Enhanced Security Admin Environment (ESAE).
- LCU KB5034765 changes a setting in Active Directory Users & Computers. Now onwards, by default, the snap-in uses a strong certificate mapping of X509IssuerSerialNumber which does not use the weak mapping of x509IssuerSubject.
- This update addresses a smart card icon that does not appear when you sign in. The problem occurs when there are multiple certificates on the smart card.
- Finally, this update addresses an issue that causes your device to shut down after 1 minute that occurs when you use a smart card to authenticate on a remote system.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
Known issues
There are no known issue found in this version
How to download KB5034765 in Windows 11 23H2 and install
First of all, make sure that the servicing stack update 22621.3073 or 22631.3073 on Windows 11 22H2 and 23H2 respectively. Now, follow any of the methods:
Using automatic Windows update
- Press the “Windows & I” and type “updates”.
- From the Settings app, click on “Check for updates”.
Through Microsoft update catalog
- Go to the KB5034765 download link.
- Find a suitable file compatible with your computer and click on “Download”.
- Click on the Standalone package link.
- Double click on the .msu file you have downloaded and confirm the prompt.
That’s all!!