KB5034119 Cumulative Update for Windows Server 2016

KB5034119 is a cumulative update for Windows Server 2016 and Windows Server 2016 Server Core installation. The update was released on 9 January 2024 as part of Microsoft’s ‘Patch Tuesday’ project.

KB5034119 for Windows 10 version 1607 can be found on this page.

KB5034119 has now been superseded by KB5034767. You can read more about KB5034767 on this page.

  • KB5034119 is a cumulative update that supersedes the KB5033373 cumulative update.
  • KB5033373 was released on 12 December 2023 and you can read more about it on this KB5033373 page.
  • KB5034119 corresponds to server build 14393.6614.
  • KB5033373 corresponds to server build 14393.6529. If you had installed KB5033373, you would be transitioning from build 6529 to 6614 when installing KB5034119.
  • KB5032391 is the Servicing Stack Update that needs to be installed before installing KB5034119. KB5032391 is a Servicing Stack update for Windows Server 2016 released on 14 November 2023. There has been no SSU release for Windows Server 2016 in December 2023 and January 2024. If you already installed KB5032391, you can skip the SSU installation and go straight to KB5034119 deployment.
  • 26 security vulnerabilities have been reported for Windows Server 2016 in the January 2024 security bulletin released by Microsoft.
  • One of these security vulnerabilities has a CRITICAL severity level for Windows Server 2016.
  • 3 vulnerabilities affect the .NET frameworks 3.5 and 4.7.2 on Windows Server 2016 and Windows Server 2016 Server Core installation. All these threats have an ‘IMPORTANT’ severity level.

Details of security vulnerabilities on Windows Server 2016 are listed in the vulnerabilities section below.

KB5034119 can be applied automatically using one of the following methods:

  • Windows Update
  • Windows Update for Business
  • WSUS or Windows Server Update Services

WSUS remains the most preferred method to automatically deploy security and cumulative updates.

For automated deployments, the Servicing Stack Update KB5032391 will be automatically installed before KB5032197 or KB5034119 are installed on Windows Server 2016.

For manual deployment of KB5034119, you will need to follow a 2-step process.

  • Download and install KB5032391 Servicing Stack Update. You may have already installed it and can check the Windows Update history on your server. Remember that KB5032391 was released in November 2023. There has been no new SSU or Servicing Stack release in December 2023 or January 2024 for Windows Server 2016.
  • Download and install the KB5034119 cumulative update.

The download for the Servicing Stack Update and the cumulative update can be completed from the Microsoft Update Catalog site. The installer is available as an offline installer file in the .MSU format.

The size of the Servicing Stack Update file is 11.6 MB. The server will not restart after installing the SSU.

KB5034119 for Windows Server 2016 can be downloaded from the Microsoft Update Catalog site. Or, you could use the direct download link below.

The size of the cumulative update KB5034119 is 1627.3 MB. KB5034119 will cause a server reboot. Please plan for implementation as part of an organized change management process.

26 security vulnerabilities affect Windows Server 2016 as part of the January 2024 security reports. One of these vulnerabilities is a CRITICAL severity vulnerability.

The remaining 25 security vulnerabilities have IMPORTANT severity levels.

We have listed the CRITICAL vulnerabilities for Windows Server 2016 below.

There is a single CRITICAL security vulnerability affecting Windows Server 2016 and Windows Server 2016 Server Core installation. The CRITICAL vulnerability could lead to a ‘Security Feature Bypass’ impact on the server.

The single CRITICAL security vulnerability on Windows Server 2016 is listed below.

CVE detailsCVSSSeverityImpact Description
CVE-2024-206749.0CRITICALSecurity Feature BypassThe authentication feature could be bypassed as this vulnerability allows impersonation.

An authenticated attacker could exploit this vulnerability by establishing a machine-in-the-middle (MITM) attack or other local network spoofing technique, then sending a malicious Kerberos message to the client victim machine to spoof itself as the Kerberos authentication server.

The following changes or improvements are part of the KB5034119 cumulative update for Windows Server 2016:

  • This update addresses an issue that affects the ActiveX scroll bar. It does not work in IE mode.
  • This update addresses security issues for your Windows operating system. 
Rajesh Dhawan

Rajesh Dhawan is a technology professional who loves to blog about smart wearables, Cloud computing and Microsoft technologies. He loves to break complex problems into manageable chunks of meaningful information.