diff --git a/pkg/api/azenvtypes.go b/pkg/api/azenvtypes.go
index 782a1a67e..0c96c3694 100644
--- a/pkg/api/azenvtypes.go
+++ b/pkg/api/azenvtypes.go
@@ -156,7 +156,7 @@ var (
 		ImageOffer:     "aks-windows",
 		ImageSku:       "2019-datacenter-core-azurestack-smalldisk",
 		ImagePublisher: "microsoft-aks",
-		ImageVersion:   "17763.3650.20230322",
+		ImageVersion:   "17763.3887.20230332",
 	}
 
 	// AKSWindowsServer2019ContainerDOSImageConfig is the aks-engine image based on Windows Server 2019
@@ -165,7 +165,7 @@ var (
 		ImageOffer:     "aks-windows",
 		ImageSku:       "2019-datacenter-core-azurestack-ctrd",
 		ImagePublisher: "microsoft-aks",
-		ImageVersion:   "17763.3650.20230322",
+		ImageVersion:   "17763.3887.20230332",
 	}
 
 	// WindowsServer2019OSImageConfig is the 'vanilla' Windows Server 2019 image
diff --git a/vhd/release-notes/aks-windows-2019-containerd/2019-datacenter-core-azurestack-ctrd-17763.3650.20230322.txt b/vhd/release-notes/aks-windows-2019-containerd/2019-datacenter-core-azurestack-ctrd-17763.3887.20230332.txt
similarity index 93%
rename from vhd/release-notes/aks-windows-2019-containerd/2019-datacenter-core-azurestack-ctrd-17763.3650.20230322.txt
rename to vhd/release-notes/aks-windows-2019-containerd/2019-datacenter-core-azurestack-ctrd-17763.3887.20230332.txt
index 6c500b405..02892313d 100644
--- a/vhd/release-notes/aks-windows-2019-containerd/2019-datacenter-core-azurestack-ctrd-17763.3650.20230322.txt
+++ b/vhd/release-notes/aks-windows-2019-containerd/2019-datacenter-core-azurestack-ctrd-17763.3887.20230332.txt
@@ -1,14 +1,14 @@
-Build Number: 2023.032.2
-Build Id:     67996566
+Build Number: 2023.033.2
+Build Id:     68091787
 Build Repo:   
 Build Branch: master
-Commit:       7187b7b367a0266346aadf7b5636b477935db5da
+Commit:       b5e15774857a99d40921ec7ed4c81aea7d5329e1
 
-VHD ID:      0a2a4b9e-4ec7-4726-8f09-f67107bd341e
+VHD ID:      d01b6cfe-cce7-44a4-bb22-cae30232901b
 
 System Info
 	OS Name        : Windows Server 2019 Datacenter
-	OS Version     : 17763.3650
+	OS Version     : 17763.3887
 	OS InstallType : Server Core
 
 Allowed security protocols: Tls, Tls11, Tls12
@@ -50,13 +50,13 @@ Installed Packages
 	OpenSSH.Server~~~~0.0.1.0
 
 Installed QFEs
-	KB5020627 : Update          : http://support.microsoft.com/?kbid=5020627
-	KB5019966 : Security Update : http://support.microsoft.com/?kbid=5019966
+	KB5020866 : Update          : http://support.microsoft.com/?kbid=5020866
+	KB5022286 : Security Update : http://support.microsoft.com/?kbid=5022286
 	KB5020374 : Security Update : http://support.microsoft.com/?kbid=5020374
 
 Installed Updates
-	2022-11 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5020685)
-	Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.381.2978.0)
+	2022-12 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5021085)
+	Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.381.3043.0)
 
 Windows Update Registry Settings
 	https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings
diff --git a/vhd/release-notes/aks-windows/2019-datacenter-core-azurestack-smalldisk-17763.3650.20230322.txt b/vhd/release-notes/aks-windows/2019-datacenter-core-azurestack-smalldisk-17763.3887.20230332.txt
similarity index 93%
rename from vhd/release-notes/aks-windows/2019-datacenter-core-azurestack-smalldisk-17763.3650.20230322.txt
rename to vhd/release-notes/aks-windows/2019-datacenter-core-azurestack-smalldisk-17763.3887.20230332.txt
index 28f5631cd..106c467af 100644
--- a/vhd/release-notes/aks-windows/2019-datacenter-core-azurestack-smalldisk-17763.3650.20230322.txt
+++ b/vhd/release-notes/aks-windows/2019-datacenter-core-azurestack-smalldisk-17763.3887.20230332.txt
@@ -1,14 +1,14 @@
-Build Number: 2023.032.2
-Build Id:     67996566
+Build Number: 2023.033.2
+Build Id:     68091787
 Build Repo:   
 Build Branch: master
-Commit:       7187b7b367a0266346aadf7b5636b477935db5da
+Commit:       b5e15774857a99d40921ec7ed4c81aea7d5329e1
 
-VHD ID:      b17750da-3bed-4a44-bcc9-46c1c07b2224
+VHD ID:      fe3e1776-4bff-4b1b-bfcc-4273ffba985c
 
 System Info
 	OS Name        : Windows Server 2019 Datacenter
-	OS Version     : 17763.3650
+	OS Version     : 17763.3887
 	OS InstallType : Server Core
 
 Allowed security protocols: Tls, Tls11, Tls12
@@ -50,13 +50,13 @@ Installed Packages
 	OpenSSH.Server~~~~0.0.1.0
 
 Installed QFEs
-	KB5020627 : Update          : http://support.microsoft.com/?kbid=5020627
-	KB5019966 : Security Update : http://support.microsoft.com/?kbid=5019966
+	KB5020866 : Update          : http://support.microsoft.com/?kbid=5020866
+	KB5022286 : Security Update : http://support.microsoft.com/?kbid=5022286
 	KB5020374 : Security Update : http://support.microsoft.com/?kbid=5020374
 
 Installed Updates
-	2022-11 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5020685)
-	Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.381.2978.0)
+	2022-12 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5021085)
+	Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.381.3043.0)
 
 Windows Update Registry Settings
 	https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings