Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday Zero-day

KB5034767

KB5034767: Cumulative update for Windows 10, version 1607, February 2024. Exploited SmartScreen bypass patched; Secure Boot certificate added

In short

The update fixes 33 vulnerabilities, including an actively exploited SmartScreen bypass (CVE-2024-21351) and a critical remote-code-execution flaw (CVE-2024-21357). It also adds an optional Secure Boot certificate and secures HTTPS device-metadata downloads.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607, build 14393.6709.

Build
14393.6709
Security
33 fixed · 1 critical · 1 exploited
Review notes Additional details from the official release notes (2) Read notes
  • This page On UEFI Secure Boot systems, users can opt to add the renewed signing certificate; the change is not automatic.
  • Does it affect you? KB5034767 is for Windows 10 Enterprise LTSB 2016, version 1607, and installs OS build 14393.6709.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fix 1 change

Device metadata

  • Downloads of device metadata over HTTPS are more secure.1
    Addresses an issue affecting metadata downloads from Windows Metadata and Internet Services (WMIS) over HTTPS.

Improvement 1 change

UEFI Secure Boot

  • Systems using UEFI Secure Boot can opt to add a renewed signing certificate to the Secure Boot database.2
    Adds a renewed signing certificate to the Secure Boot DB variable.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-02-13
Type
Cumulative update
VersionBuildChannel
1607 14393.6709 General availability

Security

33 vulnerabilities fixed
1 exploited 1 critical 31 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-21351 Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
 Moderate 7.6
CVE-2024-21357
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
 Critical 8.1

The table lists the 2 exploited, publicly disclosed or critical vulnerabilities. See all 33 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. This update addresses an issue that affects the download of device metadata. Downloads from the Windows Metadata and Internet Services (WMIS) over HTTPS are now more secure. support.microsoft.com
  2. 2. This update affects Unified Extensible Firmware Interface (UEFI) Secure Boot systems. It adds a renewed signing certificate to the Secure Boot DB variable. You can now opt for this change. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake