Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Security update
Patch Tuesday

KB5035855

KB5035855: Cumulative update for Windows Server, version 2016, March 2024. Domain controller memory leaks can trigger reboots; update expired

In short

An LSASS memory leak can crash domain controllers and trigger unscheduled reboots while they handle Kerberos requests. This update is no longer available; Microsoft recommends updating devices to the latest Windows version.

Does it affect you? Applies to: Devices running Windows Server 2016.

Build
14393.6796
Security
30 fixed · 2 critical
Review notes Additional details from the official release notes (1) Read note
  • In short Extreme memory leaks may cause LSASS to crash, triggering an unscheduled reboot of the domain controller.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Improvement 1 change

Operating system

  • The update includes miscellaneous security improvements to internal operating system functionality.1
    No additional issues were documented for this release.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5037423

    Following installation of this update, Local Security Authority Subsystem Service (LSASS) may experience a memory leak on domain controllers (DCs).

    After this update, LSASS (Local Security Authority Subsystem Service) may leak memory on domain controllers while they handle Kerberos authentication requests. In extreme cases, LSASS may crash and trigger an unscheduled domain controller reboot. KB5037423 addresses the issue.2

    Resolution Fixed in KB5037423

    Install KB5037423 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-03-12
Type
Cumulative update
VersionBuildChannel
2016 14393.6796 General availability

Security

30 vulnerabilities fixed
2 critical 28 important
VulnerabilitySeverityCVSS
CVE-2024-21407
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-21408
Windows Hyper-V Denial of Service Vulnerability
 Critical 5.5
CVE-2024-21440
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21441
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21444
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21450
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21451
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26159
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26161
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26162
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26166
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21436
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21437
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21446
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26173
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26176
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26178
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26182
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21438
Microsoft AllJoyn API Denial of Service Vulnerability
 Important 7.5
CVE-2024-21432
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21433
Windows Print Spooler Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21439
Windows Telephony Server Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21429
Windows USB Hub Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-26197
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
 Important 6.5
CVE-2024-21430
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
 Important 5.7
CVE-2024-26174
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26177
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26181
Windows Kernel Denial of Service Vulnerability
 Important 5.5
CVE-2023-28746
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
 Important —

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. support.microsoft.com
  2. 2. service Kerberos authentication requests. Extreme memory leaks may cause LSASS to crash, which triggers an unscheduled reboot of underlying domain controllers (DCs). support.microsoft.com
Checked automatically: 7 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake