Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday Zero-day

KB5048671

KB5048671: Cumulative update for Windows 10, version 1607, December 2024. Closes exploited flaw in the Common Log File System Driver

In short

Fixes 23 security flaws, including 7 critical ones. It closes an actively exploited flaw in the Common Log File System Driver.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607, build 14393.7606.

Build
14393.7606
Security
23 fixed · 7 critical · 1 exploited
Restart
Required
Review notes Additional details from the official release notes (3) Read notes
  • Does it affect you? This update is for Windows 10 Enterprise LTSB 2016, version 1607, and installs OS build 14393.7606.
  • In detail Microsoft strongly recommends installing KB5043124 before this cumulative update. Windows Update offers the SSU automatically.
  • What to do Microsoft strongly recommends installing KB5043124 before this cumulative update. Windows Update offers the SSU automatically.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvement 1 change

Windows operating system

For: Windows 10 Enterprise LTSB 2016 devices

  • The update adds general security improvements inside Windows.1
    Adds miscellaneous security improvements to internal OS functionality.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-12-10
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5046612, KB5037423
Replaced by
KB5049993
VersionBuildChannel
1607 14393.7606 General availability

Security

23 vulnerabilities fixed
1 exploited 7 critical 16 important
VulnerabilitySeverityCVSS
CVE-2024-49138 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49112
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.4
CVE-2024-49118
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49122
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49124
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49126
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49127
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49080
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49102
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49104
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49072
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49079
Input Method Editor (IME) Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-49088
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49090
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49096
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49113
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49121
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49107
WmsRepair Service Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-49089
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.2
CVE-2024-49084
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-49082
Windows File Explorer Information Disclosure Vulnerability
 Important 6.8

Updated components

215 files changed since the previous update for the same versions.

Top changed componentsFiles
Graphics and display7
Secure Boot7
File Explorer and shell6
Hyper-V and virtualization6
Remote Desktop5
Kernel4
Settings4
Storage and file systems2
Security and sign-in1

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 3/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake