Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Security update
Patch Tuesday Zero-day

KB5046612

KB5046612: Cumulative update for Windows Server, version 2016, November 2024. Exploited NTLM and Task Scheduler flaws patched; vmswitch crash fixed

In short

The update fixes 27 vulnerabilities, including exploited CVE-2024-43451 and CVE-2024-49039, and fixes a vmswitch stop error in a specific LBFO and SR-IOV setup.

Does it affect you? Applies to: Devices running Windows Server 2016 (x64). The update brings the OS build to 14393.7515.

Build
14393.7515
Security
27 fixed · 1 critical · 2 exploited
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fix 1 change

vmswitch

  • A vmswitch stop error is fixed when a virtual machine uses LBFO teaming with two virtual switches, one using SR-IOV.1
    Applies to Load Balancing and Failover (LBFO) teaming with two virtual switches on a virtual machine (VM), where one switch uses single root Input/Output virtualization (SR-IOV).

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-11-12
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5037423
Replaced by
KB5048671
VersionBuildChannel
2016 14393.7515 General availability

Security

27 vulnerabilities fixed
2 exploited 1 critical 26 important
VulnerabilitySeverityCVSS
CVE-2024-49039 Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43451 Exploited
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2024-43639
Windows KDC Proxy Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-43620
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43621
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43622
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43627
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43628
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43635
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43516
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43626
Windows Telephony Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43641
Windows Registry Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43644
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49019
Active Directory Certificate Services Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49046
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43450
Windows DNS Spoofing Vulnerability
 Important 7.5
CVE-2024-43511
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43634
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43637
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43638
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43643
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43645
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
 Important 6.7
CVE-2024-43646
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7
CVE-2024-38203
Windows Package Library Manager Information Disclosure Vulnerability
 Important 6.2

Updated components

1,729 files changed since the previous update for the same versions.

Top changed componentsFiles
WPF15
Security and sign-in14
Hyper-V and virtualization13
Networking13
Audio11
Printing10
Secure Boot10
File Explorer and shell9
Settings9
ASP.NET8
.NET runtime (CLR)7
Graphics and display7

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. Fixed: A vmswitch triggers a stop error. This occurs when you use Load Balancing and Failover (LBFO) teaming with two virtual switches on a virtual machine (VM). support.microsoft.com
Checked automatically: 7 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 21, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 3/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake