Skip to the content
The Update Bureau

Windows 10 1607

Windows 10 Enterprise LTSB 2016

Every published release for Windows 10 Enterprise LTSB 2016, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5131291 Nov 10, 2026
Build
14393.9688
Released
Aug 2, 2016
All editions
no longer updated since Oct 13, 2026
Known issues
1 open

Build history

  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5055521

    Exploited CLFS driver flaw patched; audit-policy display issue noted

    Addresses 46 vulnerabilities, including an actively exploited flaw in the Common Log File System driver. It also changes daylight saving time support in Chile and adds Kerberos protections that might log Event ID 45 on domain controllers.

    Check the newer update, KB5058921

    Key changes 46 CVEs · 3 changes

    • Improved Daylight Saving Time (DST): Daylight saving time support is updated for the Aysen region in Chile to follow the government’s 2025 change order.
    • Improved OS Security: A new inetpub folder is created on the system drive. Leave it in place.
    • Improved Kerberos Authentication: Kerberos protections are enabled by default. On domain controllers, this change might cause Event ID 45 events to be logged.

    Read update Source: Microsoft

    Build
    14393.7969
    Security
    46 fixed · 5 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5053594

    Exploited kernel, NTFS and FAT flaws patched

    Fixes 30 security vulnerabilities, including six actively exploited flaws, and makes system temporary files safer. It also fixes a process-creation race condition and updates Paraguay’s daylight saving time.

    Check the newer update, KB5055521
    Windows 10 support ended October 14, 2025. After that date, Microsoft no longer provides free software updates from Windows Update, technical assistance, or security fixes; PCs continue to work.

    Key changes 30 CVEs · 4 changes

    • Improved Temporary files: System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.
    • Improved Daylight saving time (DST): Daylight saving time changes for Paraguay are updated.
    • Fix Security: The update addresses security issues in Windows.

    Read update Source: Microsoft

    Build
    14393.7876
    Security
    30 fixed · 2 critical · 6 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5052006

    Exploited storage and WinSock flaws patched; USB audio fixed

    Fixes 31 vulnerabilities, including two actively exploited flaws, and resolves issues with USB cameras and audio devices.

    Check the newer update, KB5053594

    Key changes 31 CVEs · 3 changes

    • Fix USB cameras: USB cameras are recognized as on again after the January 2025 security update.
    • Fix USB audio device drivers: The code 10 “This device cannot start” error with certain external audio management devices is fixed.
    • Fix Digital/Analog converter (DAC): USB audio devices are less likely to stop working and interrupt playback, especially when using a DAC audio driver based on USB 1.0.

    Read update Source: Microsoft

    Build
    14393.7785
    Security
    31 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5049993

    Critical OLE and multicast code-execution flaws addressed

    The update adds drivers to the vulnerable-driver blocklist and addresses 105 security vulnerabilities, including five critical ones. CVE-2025-21308, a Windows Themes spoofing flaw, was publicly disclosed.

    Check the newer update, KB5052006

    Key changes 105 CVEs · 1 change

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The blocklist covers more drivers that are at risk of attacks using vulnerable drivers.
    • Critical CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability
    • Critical CVE-2025-21307: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.7699
    Security
    105 fixed · 5 critical
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5048671

    Closes exploited flaw in the Common Log File System Driver

    Fixes 23 security flaws, including 7 critical ones. It closes an actively exploited flaw in the Common Log File System Driver.

    Check the newer update, KB5049993

    Key changes 23 CVEs · 1 change

    • Improved Windows operating system: The update adds general security improvements inside Windows.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
    • Critical CVE-2024-49112: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.7606
    Security
    23 fixed · 7 critical · 1 exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5046612

    Exploited NTLM and Task Scheduler flaws patched; vmswitch crash fixed

    The update addresses 24 Important vulnerabilities, including exploited CVE-2024-43451 (NTLM hash disclosure) and CVE-2024-49039 (Task Scheduler privilege escalation); CVE-2024-43451 was also publicly disclosed. It also fixes a vmswitch stop error in a specific virtual-machine setup.

    Check the newer update, KB5048671

    Key changes 24 CVEs · 1 change

    • Fix vmswitch: A virtual machine no longer hits a stop error in the described two-switch setup.
    • Exploited CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability
    • Exploited CVE-2024-43451: NTLM Hash Disclosure Spoofing Vulnerability

    Read update Source: Microsoft

    Build
    14393.7515
    Security
    24 vulnerabilities fixed · 2 actively exploited
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5044293

    Exploited MMC flaw patched; legacy-protocol gateway drops fixed

    Patches an actively exploited MMC remote-code-execution flaw and fixes sporadic Remote Desktop disconnects on Windows Servers using a legacy Remote Desktop Gateway protocol.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 33 CVEs · 1 change

    • Fix Remote Desktop: The update fixes sporadic Remote Desktop disconnections on Windows Servers using a legacy Remote Desktop Gateway protocol, such as Remo...
    • Exploited CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability
    • Exploited CVE-2024-43573: Windows MSHTML Platform Spoofing Vulnerability

    Read update Source: Microsoft

    Build
    14393.7428
    Security
    33 vulnerabilities fixed · 2 actively exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5043051

    Exploited Windows Installer flaw; repairs now prompt for credentials

    Windows Installer now prompts for administrator credentials when repairing apps. The update addresses 30 security vulnerabilities, including three that are being exploited.

    As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.

    Key changes 30 CVEs · 2 changes

    • Improved Windows Installer: When Windows Installer repairs an application, you now see a User Account Control prompt asking for credentials.
    • Improved Dual boot of Windows and Linux: The update notes that Linux might fail to start on devices set up to dual-boot Windows and Linux.
    • Exploited CVE-2024-43461: Windows MSHTML Platform Spoofing Vulnerability

    Read update Source: Microsoft

    Build
    14393.7336
    Security
    30 fixed · 1 critical · 3 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5041773

    Exploited Windows flaws addressed; Linux dual-boot booting can fail

    The update addresses security issues, including four exploited vulnerabilities, and changes Secure Boot behavior that can prevent Linux from starting on some dual-boot devices.

    As of March 31, 2026, this update is no longer available through the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 38 CVEs · 6 changes

    • Improved Lock screen: The “Use my Windows user account” checkbox is not available on the lock screen when connecting to Wi-Fi.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Windows blocks vulnerable Linux boot managers. Older Linux installation images might not boot after this change.
    • Improved Domain Name System (DNS): DNS server security is hardened. If domain configurations are not up to date, DNS requests might return SERVFAIL or time out.

    Read update Source: Microsoft

    Build
    14393.7259
    Security
    38 fixed · 5 critical · 4 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5040434

    Exploited MSHTML spoofing flaw addressed

    The update addresses 69 vulnerabilities, including an exploited MSHTML spoofing flaw and a critical Windows Imaging Component remote-code-execution flaw. It has been unavailable from Microsoft since March 31, 2026.

    KB5040434 has been unavailable from the Microsoft Update Catalog and other release channels since March 31, 2026.

    Key changes 69 CVEs · 4 changes

    • Improved Republic of Turkey name: The official country name is now the Republic of Türkiye.
    • Improved BitLocker: The default Secure Boot validation profile uses additional PCR measurements.
    • Improved File shortcut icons (.LNK files): Icons for shortcuts to remote paths might not appear in the Start menu, on the desktop, or on the taskbar unless administrators configu...

    Read update Source: Microsoft

    Build
    14393.7159
    Security
    69 fixed · 1 critical · 1 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5039214

    Exploited Mark of the Web bypass addressed; LSASS issues fixed

    The update addresses 24 vulnerabilities, including an actively exploited Mark of the Web security bypass, and two LSASS problems. It has been unavailable since March 31, 2026.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 24 CVEs · 3 changes

    • New File Explorer: Files and folders from untrusted locations get an internet-origin tag. The tag updates the file’s LastWriteTime timestamp, which might...
    • Fix LSASS: The Windows security process stops responding on Windows servers after the April 2024 security updates.
    • Fix LSASS: The Windows security process can leak memory during a domain policy communication.

    Read update Source: Microsoft

    Build
    14393.7070
    Security
    24 fixed · 1 critical · 1 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5037763

    Exploited MSHTML bypass and DWM privilege flaws patched

    Addresses 30 vulnerabilities, including exploited flaws in the MSHTML platform and DWM Core Library. It also addresses VPN, domain controller, and Virtual Secure Mode issues.

    As of March 31, 2026, this update is no longer available through the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 30 CVEs · 5 changes

    • Improved Currency: Supports Croatia’s change from the kuna to the euro.
    • Improved DNS Server: Sets the NSEC3 validation limit in a recursive resolver to 1,000 computations by default.
    • Fix VPN: Addresses an issue that might cause your VPN connection to fail after installing the update dated April 9, 2024, or later.

    Read update Source: Microsoft

    Build
    14393.6981
    Security
    30 vulnerabilities fixed · 2 actively exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5036899

    Exploited proxy-driver flaw addressed; Remote Desktop access improved

    The update addresses an actively exploited proxy-driver spoofing vulnerability and a Remote Desktop access problem. The VPN and domain-controller issues reported after installation were later addressed in KB5037763.

    As of March 31, 2026, this update is no longer available through the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 50 CVEs · 4 changes

    • Improved Daylight saving time: Clock changes in Palestine are supported.
    • Improved Daylight saving time: Clock changes in Kazakhstan are supported.
    • Improved Daylight saving time: Clock changes in Samoa are supported.

    Read update Source: Microsoft

    Build
    14393.6897
    Security
    50 vulnerabilities fixed · 1 actively exploited
  • Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows Server
    Out-of-band

    KB5037423

    LSASS memory leak could trigger unexpected domain controller restarts

    Addresses an LSASS memory leak on domain controllers. If the leak becomes substantial, LSASS might stop responding and the controllers might restart unexpectedly.

    Check the newer update, KB5046612

    Key changes 1 change

    • Fix Local Security Authority Subsystem Service (LSASS): Addresses an LSASS memory leak on domain controllers. If the leak becomes substantial, LSASS might stop responding and the controllers...

    Read update Source: Microsoft

    Build
    14393.6800
    Restart
    Required
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5035855

    Critical Hyper-V flaws patched; update is no longer available

    Addresses 29 vulnerabilities, including two critical Hyper-V flaws. It has not been available from Microsoft release channels since March 31, 2026.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 29 CVEs · 1 change

    • Improved Windows operating system: Internal Windows functions receive miscellaneous security improvements.
    • Critical CVE-2024-21407: Windows Hyper-V Remote Code Execution Vulnerability
    • Critical CVE-2024-21408: Windows Hyper-V Denial of Service Vulnerability

    Read update Source: Microsoft

    Build
    14393.6796
    Security
    29 fixed · 2 critical
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day

    KB5034767

    Exploited SmartScreen bypass patched; Secure Boot certificate added

    The update fixes 33 vulnerabilities, including an actively exploited SmartScreen bypass (CVE-2024-21351) and a critical remote-code-execution flaw (CVE-2024-21357). It also adds an optional Secure Boot certificate and secures HTTPS device-metadata downloads.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 33 CVEs · 2 changes

    • Improved UEFI Secure Boot: Systems using UEFI Secure Boot can opt to add a renewed signing certificate to the Secure Boot database.
    • Fix Device metadata: Downloads of device metadata over HTTPS are more secure.
    • Exploited CVE-2024-21351: Windows SmartScreen Security Feature Bypass Vulnerability

    Read update Source: Microsoft

    Build
    14393.6709
    Security
    33 fixed · 1 critical · 1 exploited
  • Windows 10 1607 Windows 10 1607 Security update Also for Windows Server

    KB5034119

    Critical Kerberos bypass risk and IE mode scroll bar addressed

    Addresses 24 vulnerabilities, including the critical Kerberos security feature bypass CVE-2024-20674, and an ActiveX scroll bar issue in IE mode. It is no longer available from Microsoft as of March 31, 2026.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 24 CVEs · 1 change

    • Fix ActiveX scroll bar: Addresses a problem that prevents the ActiveX scroll bar from working in IE mode.
    • Critical CVE-2024-20674: Windows Kerberos Security Feature Bypass Vulnerability
    • CVSS 8.1 CVE-2024-20652: Windows HTML Platforms Security Feature Bypass Vulnerability

    Read update Source: Microsoft

    Build
    14393.6614
    Security
    24 fixed · 1 critical