KB5034119 is a cumulative update for Windows Server 2016 and Windows Server 2016 Server Core installation. The update was released on 9 January 2024 as part of Microsoft’s ‘Patch Tuesday’ project.
KB5034119 for Windows 10 version 1607 can be found on this page.
KB5034119 has now been superseded by KB5034767. You can read more about KB5034767 on this page.
Salient points
- KB5034119 is a cumulative update that supersedes the KB5033373 cumulative update.
- KB5033373 was released on 12 December 2023 and you can read more about it on this KB5033373 page.
- KB5034119 corresponds to server build 14393.6614.
- KB5033373 corresponds to server build 14393.6529. If you had installed KB5033373, you would be transitioning from build 6529 to 6614 when installing KB5034119.
- KB5032391 is the Servicing Stack Update that needs to be installed before installing KB5034119. KB5032391 is a Servicing Stack update for Windows Server 2016 released on 14 November 2023. There has been no SSU release for Windows Server 2016 in December 2023 and January 2024. If you already installed KB5032391, you can skip the SSU installation and go straight to KB5034119 deployment.
- 26 security vulnerabilities have been reported for Windows Server 2016 in the January 2024 security bulletin released by Microsoft.
- One of these security vulnerabilities has a CRITICAL severity level for Windows Server 2016.
- 3 vulnerabilities affect the .NET frameworks 3.5 and 4.7.2 on Windows Server 2016 and Windows Server 2016 Server Core installation. All these threats have an ‘IMPORTANT’ severity level.
Details of security vulnerabilities on Windows Server 2016 are listed in the vulnerabilities section below.
Download KB5034119
KB5034119 can be applied automatically using one of the following methods:
- Windows Update
- Windows Update for Business
- WSUS or Windows Server Update Services
WSUS remains the most preferred method to automatically deploy security and cumulative updates.
For automated deployments, the Servicing Stack Update KB5032391 will be automatically installed before KB5032197 or KB5034119 are installed on Windows Server 2016.
For manual deployment of KB5034119, you will need to follow a 2-step process.
- Download and install KB5032391 Servicing Stack Update. You may have already installed it and can check the Windows Update history on your server. Remember that KB5032391 was released in November 2023. There has been no new SSU or Servicing Stack release in December 2023 or January 2024 for Windows Server 2016.
- Download and install the KB5034119 cumulative update.
The download for the Servicing Stack Update and the cumulative update can be completed from the Microsoft Update Catalog site. The installer is available as an offline installer file in the .MSU format.
Download KB5032391
The size of the Servicing Stack Update file is 11.6 MB. The server will not restart after installing the SSU.
Download KB5034119
KB5034119 for Windows Server 2016 can be downloaded from the Microsoft Update Catalog site. Or, you could use the direct download link below.
The size of the cumulative update KB5034119 is 1627.3 MB. KB5034119 will cause a server reboot. Please plan for implementation as part of an organized change management process.
Vulnerabilities
26 security vulnerabilities affect Windows Server 2016 as part of the January 2024 security reports. One of these vulnerabilities is a CRITICAL severity vulnerability.
The remaining 25 security vulnerabilities have IMPORTANT severity levels.
We have listed the CRITICAL vulnerabilities for Windows Server 2016 below.
CRITICAL Vulnerabilities
There is a single CRITICAL security vulnerability affecting Windows Server 2016 and Windows Server 2016 Server Core installation. The CRITICAL vulnerability could lead to a ‘Security Feature Bypass’ impact on the server.
The single CRITICAL security vulnerability on Windows Server 2016 is listed below.
| CVE details | CVSS | Severity | Impact | Description |
|---|---|---|---|---|
| CVE-2024-20674 | 9.0 | CRITICAL | Security Feature Bypass | The authentication feature could be bypassed as this vulnerability allows impersonation. An authenticated attacker could exploit this vulnerability by establishing a machine-in-the-middle (MITM) attack or other local network spoofing technique, then sending a malicious Kerberos message to the client victim machine to spoof itself as the Kerberos authentication server. |
KB5034119 Changelog
The following changes or improvements are part of the KB5034119 cumulative update for Windows Server 2016:
- This update addresses an issue that affects the ActiveX scroll bar. It does not work in IE mode.
- This update addresses security issues for your Windows operating system.
December 2023 Cumulative or Security Updates
- KB5033371 for Windows 10 version 1809
- KB5033373 for Windows 10 version 1607
- KB5033379 for Windows 10
- KB5033372 for Windows 10 21H2 and 22H2
- KB5033375 Cumulative Update for Windows 11 22H2 and 23H2
- KB5033369 Cumulative Update for Windows 11 21H2
- KB5033420 Monthly Rollup Update for Windows Server 2012 R2
- KB5033429 Monthly Rollup Update for Windows Server 2012
- KB5033383 Cumulative Update for Windows Server 2022
- KB5033118 Cumulative Update for Windows Server 2022
- KB5033371 Cumulative Update for Windows Server 2019
- KB5033373 Cumulative Update for Windows Server 2016
- Microsoft Edge upgrades to version 120.0.2210.61
November 2023 Cumulative or Security Updates
Rajesh Dhawan is a technology professional who loves to write about Cyber-security events and stories, Cloud computing and Microsoft technologies. He loves to break complex problems into manageable chunks of meaningful information.