The Update BureauKB5037763: Cumulative update for Windows 10, version 1607, May 2024. Exploited MSHTML bypass and DWM privilege flaws patched
In short
Addresses 30 vulnerabilities, including exploited flaws in the MSHTML platform and DWM Core Library. It also addresses VPN, domain controller, and Virtual Secure Mode issues.
Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607 (OS Build 14393.6981).
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Fixes 3 changes
VPN
For: VPN users
- Addresses an issue that might cause your VPN connection to fail after installing the update dated April 9, 2024, or later.1
Domain controllers
- Addresses an issue that might increase NTLM authentication traffic on domain controllers.2
Virtual Secure Mode
For: Users of these features
- Addresses failures in Virtual Secure Mode scenarios, including VPN, Windows Hello, Credential Guard, and Key Guard.3
Improvements 2 changes
Currency
- Supports Croatia’s change from the kuna to the euro.4
DNS Server
For: DNS Server administrators
-
Sets the NSEC3 validation limit in a recursive resolver to 1,000 computations by default.5
DNS Server administrators can change the DWORD value
MaxComputationForNsec3ValidationatHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters; the allowed range is 1 to 9600.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-05-14
- Type
- Cumulative update
| Version | Build | Channel |
|---|---|---|
| 1607 | 14393.6981 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-30040
Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
|
Important | 8.8 |
|
CVE-2024-30051
Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows Hyper-V Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows Cryptographic Services Remote Code Execution Vulnerability
|
Important | 8.1 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
NTFS Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Win32k Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows DWM Core Library Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Win32k Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 7.5 |
|
Windows Remote Access Connection Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Remote Access Connection Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Remote Access Connection Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Remote Access Connection Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows DWM Core Library Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Cryptographic Services Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
Important | 5.5 |
|
Windows Remote Access Connection Manager Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Mark of the Web Security Feature Bypass Vulnerability
|
Moderate | 5.4 |
Sources
Updated
Cited passages from Microsoft's official notes (5)
-
1.
This update addresses a known issue that might cause your VPN connection to fail. This occurs after you install the update dated April 9, 2024, or later.
support.microsoft.com -
2.
This update addresses a known issue that might affect domain controllers (DC). NTLM authentication traffic might increase.
support.microsoft.com -
3.
This update addresses an issue that might affect Virtual Secure Mode (VSM) scenarios. They might fail. These scenarios include VPN, Windows Hello, Credential Guard, and Key Guard.
support.microsoft.com -
4.
This update supports the currency change in Croatia from the kuna to the euro.
support.microsoft.com -
5.
Its limit is now 1,000 computations. One computation is equal to the validation of one label with one iteration. DNS Server Administrators can change the default number of computations.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake