Windows 11 KB5032190 Update Fixes 3 Vulnerabilities, Enables Moment 4 Features

Microsoft has released Update KB5032190 for both Windows 11 23H2 and 22H2. You need to install the same package, no matter which version of Windows 11 you’re running. But there’s a catch here. Windows 11 22H2 will stop getting optional and non-security updates after 24th February 2024. You can check out the complete support timeline on our Windows 11 End of Life page.

The latest Windows update (KB5032190) brings security fixes and important changes, including the availability of all Moment 4 features, to all users across the globe. Let’s check out the summary stats and then we’ll discuss this update in more detail.

Release information

• Update released on 11/14/2023.
• OS Version: Windows 11 23H2 and 22H2
• OS Builds 22621.2715 and 22631.2715 for Windows 11, versions 22H2 and 23H2.
• Size: 599.4 MB
• Changes in Windows 11, version 22H2
• No more optional, non-security preview releases for Windows 11 22H2 after February 27, 2024.
• Only cumulative monthly security updates for supported editions.
• Highlights of Windows 11, version 23H2: Various improvements, including Copilot in Windows preview, Start menu enhancements, and security updates. Detailed categories cover File Explorer, Windows Share, Emoji, Windows Spotlight, and more.
• Known Issues and Solutions
• IT Admins: BitLocker reporting issues with mobile device management apps.
• All Users: Multimonitor configuration issues with Copilot, color font format problem.
• Automatic updates through Windows Update, Windows Update for Business, and WSUS.
• Standalone package available on the Microsoft Update Catalog website. (See below for direct download links

References:

• https://support.microsoft.com/en-us/topic/november-14-2023-kb5032190-os-builds-22621-2715-and-22631-2715-f9e3e13c-5e98-42c2-add8-f075841ca812
• https://www.catalog.update.microsoft.com/Search.aspx?q=KB5032190
• https://msrc.microsoft.com/update-guide/releaseNote/2023-Nov

What is KB5032190?

KB5032190 is an important cumulative Windows Patch Tuesday update released on 14th November 2023. The purpose of regular Patch Tuesday updates is multi-fold. Here are some points to consider while updating your system to the latest version:

• Security Fortification: These updates come with vulnerability fixes so the user always stays safe while using Windows 11.
• Unpacking the layers of security enhancements embedded in OS Build updates.
• Showcasing how staying current is synonymous with safeguarding digital assets.
• Optimizing Performance Dynamics: The Patch Tuesday also includes new features and enhancements to existing features.
• Spotlighting the performance improvements that accompany OS Build updates.
• A peek into the mechanisms that streamline operations and elevate the overall user experience.
• New Features and Functionalities
• A curated glimpse into the innovative features and functionalities brought forth by KB5032190.
• Setting the stage for a more intuitive and enriched user interaction with the Windows environment.

What’s new in KB5032190

KB5032190 is an important update, as it fixes three zero-day vulnerabilities, some of which are already being exploited. These include the following:

CVE No.	Information	Exploitation
CVE-2023-36025	Windows SmartScreen Security Feature Bypass Vulnerability	Exploited
CVE-2023-36033	Windows DWM Core Library Elevation of Privilege Vulnerability	Publicly exploited
CVE-2023-36036	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Exploited

Since these vulnerabilities are already known and can be publicly exploited, it is recommended to install this update as soon as possible to stay safe from these threats.

Apart from security fixes, this update brings Moment 4 features to everyone. Let’s check out some highlights of Moment 4:

CoPilot AI Assistant

Microsoft’s biggest leap in recent updates is the introduction of CoPilot, an AI assistant that can talk to users about open apps and data. The users can actually talk to CoPilot about their open documents.

CoPilot replaces Cortana, which has been phased out by Microsoft. For more Moment 4 updates, refer to this article.

Apart from the CoPilot, here are the changes and improvements included in KB5032190:

1. New feature: Customization options for Dynamic Lighting OEMs, allowing OS image customization for new PCs, including Dynamic Lighting defaults.
2. Change: Officially changes the name of the former Republic of Turkey to the Republic of Türkiye.
3. Change: Support Croatia’s shift from Kuna to Euro and accommodation of daylight saving time (DST) changes in Syria.
4. Fix: Addresses various issues, including unresponsiveness in fontdrvhost.exe when using Compact Font Format version 2 (CFF2) fonts, memory leaks in ctfmon.exe and TextInputHost.exe, and problems with Dynamic Lighting default provider setup using Unattend files.
5. Fix: Resolved issues in the Windows Firewall Profile, Outlook unresponsiveness when printing to a slow IPP printer, errors in v4 print drivers, and incorrect cellular settings naming for certain mobile operators.
6. Change: Updated Country and Operator Settings Asset (COSA) profiles for specific mobile operators and fixed problems blocking external connections during the setup of a Kubernetes load-balanced service with session affinity.
7. Fix: Addressed Firewall configuration service provider (CSP) issues, stop errors in devices with defined Windows Information Protection (WIP) policies and proxy setup, affecting those using Microsoft Defender Application Guard (formerly known as enterprise data protection – EDP).
8. Fix: Resolved issues after a push-button reset, enabling Windows Hello facial recognition setup for devices with Windows Enhanced Sign-in Security (ESS) turned on.
9. Fix: Fixed issues with PowerShell versions greater than 7.3.1, preventing script execution in Constrained Language Mode when a WDAC policy is activated.
10. Fix: Rectified problems with the Automatically Hide the Taskbar setting, allowing configuration using the SHAppBarMessage() API.
11. Improvement: Improves the search box experience and addresses issues with robocopy, specifically fixing the /efsraw switch to ensure proper data copying.
12. Improvement: Optimized the sync session duration for the Device Management (DM) client during the enrollment status page (ESP).

Download and install Windows 11 KB5032190

This cumulative update can be installed through Windows Update and standalone installers.

We have provided direct download links to the standalone installers below, using which you can install the update on your respective Windows 11 version, or you can simply update to the latest build using Windows Update through the given guide below.

Offline Installers

Download KB5032190 Cumulative Update Preview for Windows 11 Version 23H2 64-Bit [599.4 MB]

Download KB5032190 Cumulative Update Preview for Windows 11 Version 22H2 64-bit [599.4 MB]

Download KB5032190 Cumulative Update Preview for Windows 11 Version 23H2 ARM64 [725.6 MB]

Download KB5032190 Cumulative Update Preview for Windows 11 Version 22H2 ARM64 [725.6 MB]

To install the update, simply run the downloaded MSU file and Windows will automatically install the update. To download any other updates related to any of the above, please check the Microsoft Catalog.

Windows Update

To install this update via Windows Update, you need to be running Windows 11 version 22H2. To check your version of the operating system, type in “winver” in the Run Command box and press Enter. You must also install the Windows Configuration Update.

Once ensured you have the correct OS version, perform the following steps to install KB5032190:

1. Navigate to the following:

   Settings app >> Windows Update

2. Here, click “Check for updates.”

   

3. Click “Download and install” under the available optional update.

   2023-10 Cumulative Update Preview for Windows 11 Version 23H2 for x64-based Systems (KB5032190) is available

   Note: The update may download and install automatically if you have enabled “Get the latest updates as soon as they’re available.”

   

4. Once the update is downloaded and installed, click “Restart Now.”

   

Once the computer restarts, the update will be successfully installed. To confirm this, check the updated build number by typing in “winver” in the Run Command box.

Cleanup after installing an update

If you want to save space after installing Windows updates, you can run the following commands one after the other in Command Prompt with administrative privileges:

dism.exe /Online /Cleanup-Image /AnalyzeComponentStore
dism.exe /Online /Cleanup-Image /StartComponentCleanup

Block KB5032190 from installing

Although this is an optional update, which means that it won’t install without you manually pressing any buttons. However, you can completely block it from installing, both temporarily or permanently, using these steps:

1. Download the “Show or hide updates” tool from Microsoft.

2. Run the utility and click Next to start the scanning process.

   

3. Next, click the “Hide updates” button.

   

4. Select the updates you want to block and click Next.

   

   This automatically hides the update from Windows Update and it will not be installed during the next update process.

5. Click the Close button.

If you want to unhide or show hidden updates, run the tool again and select “Show hidden updates” instead of “Hide updates.” The rest of the process is the same.

Conclusion

Since this update has just landed, I am still downloading it on my computers to see if it works smoothly without any issues. I have a laptop with Windows 11 Preview (Beta) version installed. All the updates and fixes included in Kb5032190 are already installed in the Preview version. I have yet to encounter any issues.

As time passes, I’ll update this post if I encounter any issues. Please share your experiences while installing this update in the comments below.

Windows 11 Patch Tuesday History

KB Article	OS Version	Build	Release Date	Significant Changes	Announcement
KB5032190	23H2, 22H2	226X1.2715	14-Nov-23	Enable Moment 4 features, addresses zero-day vulnerabilities, introduces issues with Copilot and COLRv1.	Microsoft announcement of KB5032190
KB5031354	22H2	22621.2428	10-Oct-23	Introduces Copilot and Dev Drives, new voice access commands, improvements to Settings app and File Explorer	Microsoft announcement of KB5031354
KB5030219	22H2	22621.2283	12-Sep-23	Improved Search app, search flyout box on hover, easily tab through search results	Microsoft announcement of KB5030219
KB5029263	22H2	22621.2134	8-Aug-23	Addresses VPN issues, more accurate brightness levels, notifications more reliable	Microsoft Announcement of KB5029263
KB5029253	21H2	22000.2295	8-Aug-23	Addresses VPN issues, reliable notifications	Microsoft Announcement of KB5029253
KB5028185	22H2	22621.1992	11-Jul-23	Share local files with Outlook contacts, 78 vulnerabilities addresses	Microsoft Announcement of KB5028185
KB5028182	21H2	22000.2176	11-Jul-23	Announcement of some Windows 11 22H2 editions EOL, share local files with Outlook contacts	Microsoft Announcement of KB5028182
KB5027231	22H2	22621.1848	13-Jun-23	Fixes a known issue with 32-bit apps, addresses a Windows kernel information disclosure vulnerability	Microsoft Announcement of KB5027231
KB5027223	21H2	22000.2057	13-Jun-23	Fixes a known issue with 32-bit apps, addresses a Windows kernel information disclosure vulnerability	Microsoft Announcement of KB5027223
KB5026372	22H2	22621.1702	9-May-23	Option to get the latest non-security updates immediately, new animations in the Widgets icons	Microsoft Announcement of KB5026372
KB5026368	21H2	22000.1936	9-May-23	Addresses issues with LSASS and other fixes	Microsoft Announcement of KB5026368
KB5025239	22H2	22621.1555	11-Apr-23	Microsoft account notifications in the Start menu, the search box will be lighter in a custom color theme, and a plethora of fixes	Microsoft Announcement of KB5025239
KB5025224	21H2	22000.1817	11-Apr-23	Fixes known issues with kiosk devices	Microsoft Announcement of KB5025224
KB5023706	22H2	22621.1413	14-Mar-23	AI Bing search box, iOS linking, tabbed notepad, screen recording from Snipping Tool, redesigned Quick Assist	Microsoft Announcement of KB5023706
KB5023698	21H2	22000.1696	14-Mar-23	Phase three of DCOM hardening, other fixes	Microsoft Announcement of KB5023698
KB5022845	22H2	22621.1265	14-Feb-23	.NET Framework updates integrated into UUP-based feature updates	Microsoft Announcement of KB5022845
KB5022836	21H2	22000.1574	14-Feb-23	– Combines Windows Spotlight with Themes on the Personalization page – Multiple changes to the Accounts Settings page	Microsoft Announcement of KB5022836
KB5022303	22H2	22621.1105	10-Jan-23	– ODBC Connectivity with SQL Server fixed. – Local Session Manager security issues fixed	Microsoft Announcement of KB5022303
KB5022287	21H2	22000.1455	10-Jan-23	– ODBC Connectivity with SQL Server fixed. – Local Session Manager security issues fixed	Microsoft Announcement of KB5022287
KB5021255	22H2	22621.963	13-Dec-22	-UI discrepancies in Task Manager are fixed -DPAPI decryption issue is fixed	Microsoft Announcement of KB5021255
KB5021234	21H2	22000.1335	13-Dec-22	-UI discrepancies in Task Manager are fixed -DPAPI decryption issue is fixed	Microsoft Announcement of KB5021234
KB5019980	22H2	22621.819	8-Nov-22	Task Manager option added to taskbar’s context menu	Microsoft Announcement of KB5019980
KB5019961	21H2	22000.1219	8-Nov-22	Task Manager option added to taskbar’s context menu	Microsoft Announcement of KB5019961