# Security updates released in December 2024

- Web page: https://patchblox.com/security/patch-radar/2024/12

| Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now |
|---|---:|---:|---:|---:|
| Microsoft | 26 | 70 | 16 | 16 |
| macOS | 3 | 79 | 0 | 0 |
| Linux | 1,784 | 1,293 | 10 | 10 |

## Patch Tuesday, December 10, 2024

70 CVEs, 15 Critical, 1 exploited, 1 publicly disclosed, in 27 security updates.

## Microsoft products with the most CVEs fixed

| Product | CVEs | Exploited | Patch now |
|---|---:|---:|---:|
| Windows Server | 61 | 1 | 1 |
| Windows 11 | 47 | 1 | 1 |
| Windows 10 | 46 | 1 | 1 |
| Microsoft Office | 5 | 0 | 0 |
| SharePoint Server | 5 | 0 | 0 |

## Microsoft updates

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [KB5048794](https://patchblox.com/security/data/fix/microsoft/kb5048794.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | Dec 10, 2024 | Patch now | 59 | 1 | CVE-2024-49138 |
| [KB5048667](https://patchblox.com/security/data/fix/microsoft/kb5048667.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | Dec 10, 2024 | Patch now | 58 | 1 | CVE-2024-49138 |
| [KB5048653](https://patchblox.com/security/data/fix/microsoft/kb5048653.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Dec 10, 2024 | Patch now | 57 | 1 | CVE-2024-49138 |
| [KB5048661](https://patchblox.com/security/data/fix/microsoft/kb5048661.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Dec 10, 2024 | Patch now | 56 | 1 | CVE-2024-49138 |
| [KB5048652](https://patchblox.com/security/data/fix/microsoft/kb5048652.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Dec 10, 2024 | Patch now | 46 | 1 | CVE-2024-49138 |
| [KB5048685](https://patchblox.com/security/data/fix/microsoft/kb5048685.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more | Dec 10, 2024 | Patch now | 46 | 1 | CVE-2024-49138 |
| [KB5048800](https://patchblox.com/security/data/fix/microsoft/kb5048800.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Dec 10, 2024 | Patch now | 43 | 1 | CVE-2024-49138 |
| [KB5048654](https://patchblox.com/security/data/fix/microsoft/kb5048654.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Dec 10, 2024 | Patch now | 42 | 1 | CVE-2024-49138 |
| [KB5048671](https://patchblox.com/security/data/fix/microsoft/kb5048671.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Dec 10, 2024 | Patch now | 33 | 1 | CVE-2024-49138 |
| [KB5048699](https://patchblox.com/security/data/fix/microsoft/kb5048699.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Dec 10, 2024 | Patch now | 30 | 1 | CVE-2024-49138 |
| [KB5048735](https://patchblox.com/security/data/fix/microsoft/kb5048735.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Dec 10, 2024 | Patch now | 29 | 1 | CVE-2024-49138 |
| [KB5048676](https://patchblox.com/security/data/fix/microsoft/kb5048676.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Dec 10, 2024 | Patch now | 24 | 1 | CVE-2024-49138 |
| [KB5048695](https://patchblox.com/security/data/fix/microsoft/kb5048695.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Dec 10, 2024 | Patch now | 24 | 1 | CVE-2024-49138 |
| [KB5048710](https://patchblox.com/security/data/fix/microsoft/kb5048710.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Dec 10, 2024 | Patch now | 23 | 1 | CVE-2024-49138 |
| [KB5048744](https://patchblox.com/security/data/fix/microsoft/kb5048744.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Dec 10, 2024 | Patch now | 23 | 1 | CVE-2024-49138 |
| [KB5048703](https://patchblox.com/security/data/fix/microsoft/kb5048703.md) | Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems | Dec 10, 2024 | Patch now | 23 | 1 | CVE-2024-49138 |
| [KB5002657](https://patchblox.com/security/data/fix/microsoft/kb5002657.md) | Microsoft SharePoint Server 2019 | Dec 10, 2024 | Urgent | 5 | 0 | CVE-2024-49070 |
| [KB5002659](https://patchblox.com/security/data/fix/microsoft/kb5002659.md) | Microsoft SharePoint Enterprise Server 2016 | Dec 10, 2024 | Urgent | 5 | 0 | CVE-2024-49070 |
| [KB5002544](https://patchblox.com/security/data/fix/microsoft/kb5002544.md) | Microsoft SharePoint Enterprise Server 2016 | Dec 10, 2024 | Urgent | 4 | 0 | CVE-2024-49070 |
| [KB5002658](https://patchblox.com/security/data/fix/microsoft/kb5002658.md) | Microsoft SharePoint Server Subscription Edition | Dec 10, 2024 | Urgent | 4 | 0 | CVE-2024-49070 |
| [KB5002664](https://patchblox.com/security/data/fix/microsoft/kb5002664.md) | Microsoft SharePoint Server 2019 | Dec 10, 2024 | Urgent | 4 | 0 | CVE-2024-49070 |
| [KB4475587](https://patchblox.com/security/data/fix/microsoft/kb4475587.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Dec 10, 2024 | High | 2 | 0 | CVE-2024-43600 |
| [KB5002661](https://patchblox.com/security/data/fix/microsoft/kb5002661.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition) and 1 more | Dec 10, 2024 | High | 2 | 0 | CVE-2024-43600 |
| [KB2920716](https://patchblox.com/security/data/fix/microsoft/kb2920716.md) | Microsoft Office 2016 (64-bit edition) | Dec 10, 2024 | High | 1 | 0 | CVE-2024-43600 |
| [KB5002660](https://patchblox.com/security/data/fix/microsoft/kb5002660.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Dec 10, 2024 | High | 1 | 0 | CVE-2024-49069 |
| [KB5002641](https://patchblox.com/security/data/fix/microsoft/kb5002641.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | Dec 10, 2024 | High | 1 | 0 | CVE-2024-49142 |

## macOS updates

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [Sequoia 15.2](https://patchblox.com/security/data/fix/macos/sequoia-15.2.md) | Sequoia | Dec 11, 2024 | Urgent | 77 | 0 | CVE-2024-45490 |
| [Sonoma 14.7.2](https://patchblox.com/security/data/fix/macos/sonoma-14.7.2.md) | Sonoma | Dec 11, 2024 | Urgent | 39 | 0 | CVE-2024-45490 |
| [Ventura 13.7.2](https://patchblox.com/security/data/fix/macos/ventura-13.7.2.md) | Ventura | Dec 11, 2024 | Urgent | 32 | 0 | CVE-2024-45490 |

## Linux, by distribution

| Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now |
|---|---:|---:|---:|---:|
| Ubuntu | 1,042 | 61 | 0 | 0 |
| Debian | 507 | 492 | 5 | 5 |
| Red Hat | 49 | 86 | 0 | 0 |
| almalinux | 46 | 75 | 0 | 0 |
| sles | 44 | 570 | 4 | 4 |
| ol | 42 | 284 | 0 | 0 |
| rocky | 24 | 55 | 1 | 1 |
| amzn | 20 | 132 | 0 | 0 |
| opensuse-leap | 10 | 17 | 0 | 0 |

## Most urgent Linux advisories

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6 | Dec 13, 2024 | Patch now | 506 | 2 | CVE-2024-53104 |
| [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | kernel-coco, kernel-coco_debug, kernel-source-coco and 1 more on sles 15.6 | Dec 19, 2024 | Patch now | 479 | 2 | CVE-2024-53104 |
| [SUSE-SU-2024:4314-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4314-1.md) | kernel-livepatch-SLE15-SP6-RT_Update_6, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6 | Dec 13, 2024 | Patch now | 241 | 2 | CVE-2024-53104 |
| [SUSE-SU-2024:4316-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4316-1.md) | kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6 | Dec 13, 2024 | Patch now | 219 | 2 | CVE-2024-53104 |
| [RLSA-2024:10481](https://patchblox.com/security/data/fix/linux/rlsa-2024-10481.md) | webkit2gtk3 on rocky 8 | Dec 19, 2024 | Patch now | 1 | 1 | CVE-2024-44309 |
| [DLA-3982-1](https://patchblox.com/security/data/fix/linux/dla-3982-1.md) | webkit2gtk on Debian 11.6 (bullseye) | Dec 3, 2024 | Patch now | 1 | 1 | CVE-2024-44308 |
| [DSA-5823-1](https://patchblox.com/security/data/fix/linux/dsa-5823-1.md) | webkit2gtk on Debian 12.15 (bookworm) | Dec 2, 2024 | Patch now | 1 | 1 | CVE-2024-44308 |
| [DEBIAN-CVE-2024-53197](https://patchblox.com/security/data/fix/linux/debian-cve-2024-53197.md) | linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Dec 27, 2024 | Patch now | 1 | 1 | CVE-2024-53197 |
| [DEBIAN-CVE-2024-53104](https://patchblox.com/security/data/fix/linux/debian-cve-2024-53104.md) | linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Dec 2, 2024 | Patch now | 1 | 1 | CVE-2024-53104 |
| [DEBIAN-CVE-2024-53150](https://patchblox.com/security/data/fix/linux/debian-cve-2024-53150.md) | linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Dec 24, 2024 | Patch now | 1 | 1 | CVE-2024-53150 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
