# KB5048699: December 2024 security update KB5048699, released December 10, 2024, fixes 30 CVEs across 2 products. One of them is being exploited (CVE-2024-49138); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5048699 - Platform: Microsoft - Released: Dec 10, 2024 - Priority: Patch now (Closes CVE-2024-49138, exploited (CISA KEV)) - CVEs: 30, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5048699 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2012](https://patchblox.com/security/data/product/microsoft/windows-server-2012.md) | | | | [Windows Server 2012 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-49138](https://patchblox.com/security/data/cve/CVE-2024-49138.md) | Patch now | Windows Common Log File System Driver | 7.8 | 0.2622 | CISA KEV, Disclosed | | [CVE-2024-49112](https://patchblox.com/security/data/cve/CVE-2024-49112.md) | Urgent | Windows LDAP - Lightweight Directory Access Protocol | 9.8 | 0.7217 | | | [CVE-2024-49122](https://patchblox.com/security/data/cve/CVE-2024-49122.md) | Urgent | Windows Message Queuing | 8.1 | 0.2093 | More likely | | [CVE-2024-49105](https://patchblox.com/security/data/cve/CVE-2024-49105.md) | Urgent | Remote Desktop Client | 8.4 | 0.0153 | | | [CVE-2024-49118](https://patchblox.com/security/data/cve/CVE-2024-49118.md) | Urgent | Windows Message Queuing | 8.1 | 0.0145 | | | [CVE-2024-49124](https://patchblox.com/security/data/cve/CVE-2024-49124.md) | Urgent | Windows LDAP - Lightweight Directory Access Protocol | 8.1 | 0.0142 | | | [CVE-2024-43583](https://patchblox.com/security/data/cve/CVE-2024-43583.md) | Urgent | Winlogon | 7.8 | 0.0134 | Disclosed | | [CVE-2024-49126](https://patchblox.com/security/data/cve/CVE-2024-49126.md) | Urgent | Windows Local Security Authority Subsystem Service (LSASS) | 8.1 | 0.0129 | | | [CVE-2024-49127](https://patchblox.com/security/data/cve/CVE-2024-49127.md) | Urgent | Windows LDAP - Lightweight Directory Access Protocol | 8.1 | 0.0129 | | | [CVE-2024-49128](https://patchblox.com/security/data/cve/CVE-2024-49128.md) | Urgent | Windows Remote Desktop Services | 8.1 | 0.0117 | | | [CVE-2024-49120](https://patchblox.com/security/data/cve/CVE-2024-49120.md) | Urgent | Windows Remote Desktop Services | 8.1 | 0.0110 | | | [CVE-2024-49090](https://patchblox.com/security/data/cve/CVE-2024-49090.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0107 | More likely | | [CVE-2024-49088](https://patchblox.com/security/data/cve/CVE-2024-49088.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0104 | More likely | | [CVE-2024-49113](https://patchblox.com/security/data/cve/CVE-2024-49113.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.8378 | | | [CVE-2024-49096](https://patchblox.com/security/data/cve/CVE-2024-49096.md) | High | Windows Message Queuing | 7.5 | 0.0288 | | | [CVE-2024-49121](https://patchblox.com/security/data/cve/CVE-2024-49121.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0236 | | | [CVE-2024-49089](https://patchblox.com/security/data/cve/CVE-2024-49089.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.2 | 0.0207 | | | [CVE-2024-49080](https://patchblox.com/security/data/cve/CVE-2024-49080.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0173 | | | [CVE-2024-49091](https://patchblox.com/security/data/cve/CVE-2024-49091.md) | High | Role: DNS Server | 7.2 | 0.0170 | | | [CVE-2024-49102](https://patchblox.com/security/data/cve/CVE-2024-49102.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0169 | | | [CVE-2024-49104](https://patchblox.com/security/data/cve/CVE-2024-49104.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0169 | | | [CVE-2024-49085](https://patchblox.com/security/data/cve/CVE-2024-49085.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0160 | | | [CVE-2024-49086](https://patchblox.com/security/data/cve/CVE-2024-49086.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0160 | | | [CVE-2024-49125](https://patchblox.com/security/data/cve/CVE-2024-49125.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0153 | | | [CVE-2024-38033](https://patchblox.com/security/data/cve/CVE-2024-38033.md) | High | Windows PowerShell | 7.3 | 0.0106 | | | [CVE-2024-49079](https://patchblox.com/security/data/cve/CVE-2024-49079.md) | High | Microsoft Office Publisher | 7.8 | 0.0099 | | | [CVE-2024-49129](https://patchblox.com/security/data/cve/CVE-2024-49129.md) | High | Windows Remote Desktop Services | 7.5 | 0.0085 | | | [CVE-2024-49072](https://patchblox.com/security/data/cve/CVE-2024-49072.md) | High | Windows Task Scheduler | 7.8 | 0.0062 | | | [CVE-2024-49084](https://patchblox.com/security/data/cve/CVE-2024-49084.md) | High | Windows Kernel | 7.0 | 0.0043 | | | [CVE-2024-49082](https://patchblox.com/security/data/cve/CVE-2024-49082.md) | Routine | Windows File Explorer | 6.8 | 0.0154 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo