Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Security update
Patch Tuesday Zero-day

KB5048671

KB5048671: Cumulative update for Windows Server, version 2016, December 2024. Exploited CLFS driver flaw patched; critical LDAP risks addressed

In short

The update patches 32 vulnerabilities, including 11 critical ones. It addresses an exploited Common Log File System Driver flaw and a publicly disclosed Winlogon flaw.

Does it affect you? Applies to: Devices running Windows Server 2016, x64.

Build
14393.7606
Security
32 fixed · 11 critical · 1 exploited
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Improvement 1 change

Windows operating system

For: Windows Server administrators

  • The update includes miscellaneous security improvements to internal operating system functionality. No additional issues are documented.1

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-12-10
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5046612, KB5037423
Replaced by
KB5049993
VersionBuildChannel
2016 14393.7606 General availability

Security

32 vulnerabilities fixed
1 exploited 11 critical 21 important
VulnerabilitySeverityCVSS
CVE-2024-49138 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49112
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.4
CVE-2024-49106
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49108
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49115
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49118
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49119
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49122
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49124
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49126
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49127
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability
 Important 7.8

The table lists the 13 exploited, publicly disclosed or critical vulnerabilities. See all 32 vulnerabilities →

Updated components

130 files changed since the previous update for the same versions.

Top changed componentsFiles
Hyper-V and virtualization6
Graphics and display4
Remote Desktop4
Secure Boot4
File Explorer and shell3
Kernel2
Settings2
Security and sign-in1
Storage and file systems1

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake