Microsoft · Security update · November 12, 2024

KB5046613: November 2024 cumulative update for Windows 10 21H2

KB5046613, released November 12, 2024, fixes 31 CVEs across 6 products. 2 of them are being exploited (CVE-2024-43451); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
31
None rated Critical
Exploited
2
CVE-2024-43451
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8427
99th percentile

Priority of the 31 CVEs

Patch now 2 Urgent 4 High 17 Routine 8

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43451 Windows NTLM Spoofing 6.5 0.8427 KEVDisclosedExploited
Patch now CVE-2024-49039 Windows Task Scheduler Elevation of Privilege 8.8 0.1418 KEVRansomwareExploited
Urgent CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege 7.8 0.0451 More likely
Urgent CVE-2024-43629 Windows DWM Core Library Elevation of Privilege 7.8 0.0436 More likely
Urgent CVE-2024-43630 Windows Kernel Elevation of Privilege 7.8 0.0378 More likely
Urgent CVE-2024-43636 Windows DWM Core Library Elevation of Privilege 7.8 0.0068 More likely
High CVE-2024-43452 Windows Registry Elevation of Privilege 7.5 0.3016 Exploitation Less Likely
High CVE-2024-43624 Role: Windows Hyper-V Elevation of Privilege 8.8 0.0185 Exploitation Less Likely
High CVE-2024-43627 Windows Telephony Service Remote Code Execution 8.8 0.0171 Exploitation Less Likely
High CVE-2024-43628 Windows Telephony Service Remote Code Execution 8.8 0.0171 Exploitation Less Likely
High CVE-2024-43635 Windows Telephony Service Remote Code Execution 8.8 0.0170 Exploitation Less Likely
High CVE-2024-43620 Windows Telephony Service Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-43621 Windows Telephony Service Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-43622 Windows Telephony Service Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-43626 Windows Telephony Service Elevation of Privilege 7.8 0.0073 Exploitation Less Likely
High CVE-2024-43641 Windows Registry Elevation of Privilege 7.8 0.0067 Exploitation Less Likely
High CVE-2024-43516 Windows Secure Kernel Mode Elevation of Privilege 7.8 0.0062 Exploitation Less Likely
High CVE-2024-43640 Windows Secure Kernel Mode Elevation of Privilege 7.8 0.0057 Exploitation Less Likely
High CVE-2024-43644 Windows Client-Side Caching (CSC) Service Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2024-43528 Windows Secure Kernel Mode Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2024-43530 Windows Update Stack Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
High CVE-2024-49046 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2024-43511 Windows Kernel Elevation of Privilege 7.0 0.0038 Exploitation Less Likely
Routine CVE-2024-43449 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Routine CVE-2024-43634 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Showing 1 to 25 of 31 1Next