Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday Zero-day

KB5036899

KB5036899: Cumulative update for Windows 10, version 1607, April 2024. Exploited proxy-driver flaw addressed; Remote Desktop access improved

In short

The update addresses an actively exploited proxy-driver spoofing vulnerability and a Remote Desktop access problem. The VPN and domain-controller issues reported after installation were later addressed in KB5037763.

Does it affect you? Applies to: This update applies to Windows 10 Enterprise LTSB 2016, version 1607, OS Build 14393.6897.

Build
14393.6897
Security
50 fixed · 1 exploited

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 3 changes

Daylight saving time

3 items
  • Clock changes in Palestine are supported.1
    Supports daylight saving time (DST) changes in Palestine.
  • Clock changes in Kazakhstan are supported.2
    Supports DST changes in Kazakhstan.
  • Clock changes in Samoa are supported.3
    Supports DST changes in Samoa.

Fix 1 change

Remote Desktop

For: Devices using Remote Credential Guard

  • The update addresses a problem that could prevent access to a network resource from a Remote Desktop session.4
    The issue occurs when Remote Credential Guard is enabled and the client runs Windows 11, version 22H2 or higher.

Known issues

  1. Resolved Affects: Everyone Resolved by KB5037763

    Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later.

    VPN connections might fail after installing the April 9, 2024 update or later updates. KB5037763 addresses this issue.5

    Resolution Fixed in KB5037763

    Install KB5037763 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

  2. Resolved Affects: Organizations and IT administrators Resolved by KB5037763

    After installing the April 9, 2024 security update on domain controllers (DCs), you might notice a significant increase in [NTLM](https://learn.microsoft.com/windows-server/security/kerberos/ntlm-ove…

    After the April 9, 2024 security update, domain controllers might see a significant increase in NTLM authentication traffic. This issue is likely to affect organizations with very few primary domain controllers and high NTLM traffic; KB5037763 addresses it.6

    Resolution Fixed in KB5037763

    Install KB5037763 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-04-09
Type
Cumulative update
VersionBuildChannel
1607 14393.6897 General availability

Security

50 vulnerabilities fixed
1 exploited 50 important
VulnerabilitySeverityCVSS
CVE-2024-26234 Exploited
Proxy Driver Spoofing Vulnerability
 Important 6.7

The table lists the 1 exploited, publicly disclosed or critical vulnerabilities. See all 50 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. This update supports daylight saving time (DST) changes in Palestine. support.microsoft.com
  2. 2. This update supports DST changes in Kazakhstan. support.microsoft.com
  3. 3. This update supports DST changes in Samoa. support.microsoft.com
  4. 4. This update addresses an issue that affects a network resource. You cannot access it from a Remote Desktop session. support.microsoft.com
  5. 5. Windows devices might face VPN connection failures after installing the update dated April 9, 2024, or later. support.microsoft.com
  6. 6. After installing the April 9, 2024 security update on domain controllers (DCs), you might notice a significant increase in [NTLM] support.microsoft.com
Checked automatically: 7 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake