The Update BureauKB5044293: Cumulative update for Windows Server, version 2016, October 2024. Exploited MMC flaw addressed; Remote Desktop drops fixed
The update addresses 56 security vulnerabilities, including actively exploited MMC remote-code-execution and MSHTML spoofing flaws, and fixes Remote Desktop disconnections with legacy gateway protocols. It is no longer available as of March 31, 2026.
Does it affect you? Applies to: This update is for devices running Windows Server 2016. It is associated with OS Build 14393.7428.
Review notes Additional details from the official release notes (2) Read notes
- In detail This update fixes the Remote Desktop connection disruptions that could occur when a legacy protocol is used in the Remote Desktop Gateway.
- What changes This update fixes the Remote Desktop connection disruptions that could occur when a legacy protocol is used in the Remote Desktop Gateway.
The official sources are linked at the end of the page.
Microsoft publishes separate notes for this KB for Windows 10.
What changes
Fix 1 change
Remote Desktop (known issue)
For: Organizations using legacy Remote Desktop Gateway protocols
-
Remote Desktop connections on Windows Servers might no longer drop sporadically when a legacy protocol is used in the Remote Desktop Gateway.1
The issue could occur with protocols such as Remote Procedure Call over HTTP. When it occurred, the TSGateway service stopped responding with exception code 0xc0000005.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-10-08
- Type
- Cumulative update
| Version | Build | Channel |
|---|---|---|
| 2016 | 14393.7428 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2024-43572
Exploited
Microsoft Management Console Remote Code Execution Vulnerability
|
Important | 7.8 |
|
CVE-2024-43573
Exploited
Windows MSHTML Platform Spoofing Vulnerability
|
Moderate | 6.5 |
|
Windows Update Stack Elevation of Privilege Vulnerability
|
Important | 7.3 |
The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 56 vulnerabilities →
Sources
Cited passages from Microsoft's official notes (1)
-
1.
Fixed: Windows Servers might disrupt Remote Desktop connections across your company. This issue might occur if you use a legacy protocol in the Remote Desktop Gateway.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Nov 8, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake