Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday Zero-day

KB5046612

KB5046612: Cumulative update for Windows 10, version 1607, November 2024. Exploited NTLM and Task Scheduler flaws patched; vmswitch crash fixed

In short

The update addresses 24 Important vulnerabilities, including exploited CVE-2024-43451 (NTLM hash disclosure) and CVE-2024-49039 (Task Scheduler privilege escalation); CVE-2024-43451 was also publicly disclosed. It also fixes a vmswitch stop error in a specific virtual-machine setup.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607.

Build
14393.7515
Security
24 fixed · 2 exploited
Restart
Required
Review notes Additional details from the official release notes (1) Read note
  • What changes The stop error occurs with LBFO teaming and two virtual switches on a virtual machine when one switch uses SR-IOV.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fix 1 change

vmswitch

For: Virtual machines using this two-switch configuration

  • A virtual machine no longer hits a stop error in the described two-switch setup.1
    Fixes a stop error when Load Balancing and Failover (LBFO) teaming is used with two virtual switches on a virtual machine, and one switch uses single root Input/Output virtualization (SR-IOV).

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-11-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5037423
Replaced by
KB5048671
VersionBuildChannel
1607 14393.7515 General availability

Security

24 vulnerabilities fixed
2 exploited 24 important
VulnerabilitySeverityCVSS
CVE-2024-49039 Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43451 Exploited
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2024-43620
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43621
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43622
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43627
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43628
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43635
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43516
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43626
Windows Telephony Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43641
Windows Registry Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43644
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49046
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43511
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43634
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43637
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43638
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43643
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43645
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
 Important 6.7
CVE-2024-43646
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7
CVE-2024-38203
Windows Package Library Manager Information Disclosure Vulnerability
 Important 6.2

Updated components

3,107 files changed since the previous update for the same versions.

Top changed componentsFiles
WPF30
Security and sign-in26
Networking22
Audio21
Printing20
Secure Boot20
File Explorer and shell18
Settings17
ASP.NET16
.NET runtime (CLR)14
Hyper-V and virtualization13
Graphics and display12

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. [vmswitch] Fixed: A vmswitch triggers a stop error. This occurs when you use Load Balancing and Failover (LBFO) teaming with two virtual switches on a virtual machine (VM). support.microsoft.com
Checked automatically: 7 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 21, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake