Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday

KB5035855

KB5035855: Cumulative update for Windows 10, version 1607, March 2024. Critical Hyper-V flaws patched; update is no longer available

In short

Addresses 29 vulnerabilities, including two critical Hyper-V flaws. It has not been available from Microsoft release channels since March 31, 2026.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607. The update is no longer available from Microsoft release channels as of March 31, 2026.

Build
14393.6796
Security
29 fixed · 2 critical

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvement 1 change

Windows operating system

For: Windows 10 Enterprise LTSB 2016 devices

  • Internal Windows functions receive miscellaneous security improvements.1
    The update includes miscellaneous security improvements to internal OS functionality.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5037423

    Following installation of this update, Local Security Authority Subsystem Service (LSASS) may experience a memory leak on domain controllers (DCs).

    After installing this update, LSASS might leak memory on domain controllers handling on-premises or cloud-based Active Directory Kerberos authentication requests. Severe leaks might crash LSASS and trigger an unscheduled restart. KB5037423 addresses the issue.2

    Resolution Fixed in KB5037423

    Install KB5037423 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-03-12
Type
Cumulative update
VersionBuildChannel
1607 14393.6796 General availability

Security

29 vulnerabilities fixed
2 critical 27 important
VulnerabilitySeverityCVSS
CVE-2024-21407
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-21408
Windows Hyper-V Denial of Service Vulnerability
 Critical 5.5
CVE-2024-21440
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21441
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21444
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21450
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21451
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26159
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26161
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26162
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26166
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21436
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21437
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21446
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26173
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26176
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26178
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26182
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21438
Microsoft AllJoyn API Denial of Service Vulnerability
 Important 7.5
CVE-2024-21432
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21433
Windows Print Spooler Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21439
Windows Telephony Server Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21429
Windows USB Hub Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-21430
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
 Important 5.7
CVE-2024-26174
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26177
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26181
Windows Kernel Denial of Service Vulnerability
 Important 5.5
CVE-2023-28746
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
 Important —

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. This update makes miscellaneous security improvements to internal OS functionality. support.microsoft.com
  2. 2. Following installation of this update, Local Security Authority Subsystem Service (LSASS) may experience a memory leak on domain controllers (DCs). support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake