The Update BureauKB5043051: Cumulative update for Windows 10, version 1607, September 2024. Exploited Windows Installer flaw; repairs now prompt for credentials
In short
Windows Installer now prompts for administrator credentials when repairing apps. The update addresses 30 security vulnerabilities, including three that are being exploited.
Does it affect you? Applies to: This update is for devices running Windows 10 Enterprise LTSB 2016, version 1607 (OS Build 14393.7336). It is no longer available through Microsoft’s release channels.
Review notes Additional details from the official release notes (3) Read notes
- What changes Linux might fail to start when Windows and Linux dual-boot is enabled. Microsoft labels this a known issue and links to guidance.
- In detail Microsoft says automation scripts must be updated because Windows Installer repairs now prompt for credentials.
- What changes Microsoft says automation scripts must be updated, and application owners must add the Shield icon to indicate that full administrator access is required.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Improvements 2 changes
Windows Installer
-
When Windows Installer repairs an application, you now see a User Account Control prompt asking for credentials.1
Automation scripts might need updating. Application owners should add the Shield icon to indicate that full administrator access is required. To turn off the prompt, set
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\DisableLUAInRepairto1.
Dual boot of Windows and Linux
-
The update notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.2
The reported message is “Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation.” The page refers to CVE-2022-2601 and CVE-2023-40547 for guidance.
Known issues
-
After installing the Windows update released on or after July 9, 2024, Windows Servers might affect Remote Desktop Connectivity across an organization.
Remote Desktop connections across an organization might be interrupted on Windows Servers after updates released on or after July 9, 2024. This issue is resolved by KB5044293.3
Resolution Fixed in KB5044293Install KB5044293 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-09-10
- Type
- Cumulative update
| Version | Build | Channel |
|---|---|---|
| 1607 | 14393.7336 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-43461
Exploited
Windows MSHTML Platform Spoofing Vulnerability
|
Important | 8.8 |
|
CVE-2024-38014
Exploited
Windows Installer Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
CVE-2024-38217
Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
|
Important | 5.4 |
|
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
|
Critical | 7.5 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 8.1 |
|
Windows Security Zone Mapping Security Feature Bypass Vulnerability
|
Important | 7.8 |
|
PowerShell Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Graphics Component Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Networking Information Disclosure Vulnerability
|
Important | 7.7 |
|
Windows Networking Denial of Service Vulnerability
|
Important | 7.5 |
|
Windows Networking Denial of Service Vulnerability
|
Important | 7.5 |
|
Microsoft AllJoyn API Information Disclosure Vulnerability
|
Important | 7.5 |
|
Windows Kerberos Elevation of Privilege Vulnerability
|
Important | 7.2 |
|
Windows Networking Denial of Service Vulnerability
|
Important | 6.5 |
|
Windows Hyper-V Denial of Service Vulnerability
|
Important | 6.5 |
|
Windows Authentication Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Kernel-Mode Driver Information Disclosure Vulnerability
|
Important | 5.5 |
|
Windows Mark of the Web Security Feature Bypass Vulnerability
|
Moderate | 6.5 |
|
Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
|
Not rated | — |
|
Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
|
Not rated | — |
Sources
Updated
Cited passages from Microsoft's official notes (3)
-
1.
When it repairs an application, the User Account Control (UAC) does not prompt for your credentials. After you install this update, the UAC will prompt for them.
support.microsoft.com -
2.
Linux might fail to start up when you turn on dual-boot setup for Windows and Linux on your device.
support.microsoft.com -
3.
This issue is addressed in KB5044293.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake