Microsoft · Security update · November 12, 2024

KB5046687: November 2024 security update

KB5046687, released November 12, 2024, fixes 20 CVEs across 2 products. One of them is being exploited (CVE-2024-43451); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
20
None rated Critical
Exploited
1
CVE-2024-43451
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8427
99th percentile

Priority of the 20 CVEs

Patch now 1 Urgent 2 High 11 Routine 6

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43451 Windows NTLM Spoofing 6.5 0.8427 KEVDisclosedExploited
Urgent CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege 7.8 0.0451 More likely
Urgent CVE-2024-49019 Role: Windows Active Directory Certificate Services Elevation of Privilege 7.8 0.0198 DisclosedMore likely
High CVE-2024-43627 Windows Telephony Service Remote Code Execution 8.8 0.0171 Exploitation Less Likely
High CVE-2024-43628 Windows Telephony Service Remote Code Execution 8.8 0.0171 Exploitation Less Likely
High CVE-2024-43635 Windows Telephony Service Remote Code Execution 8.8 0.0170 Exploitation Less Likely
High CVE-2024-43620 Windows Telephony Service Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-43621 Windows Telephony Service Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-43622 Windows Telephony Service Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-43626 Windows Telephony Service Elevation of Privilege 7.8 0.0073 Exploitation Less Likely
High CVE-2024-43641 Windows Registry Elevation of Privilege 7.8 0.0067 Exploitation Less Likely
High CVE-2024-43450 Microsoft Windows DNS Spoofing 7.5 0.0061 Exploitation Less Likely
High CVE-2024-43644 Windows Client-Side Caching (CSC) Service Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2024-49046 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
Routine CVE-2024-43449 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Routine CVE-2024-43634 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Routine CVE-2024-43637 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Routine CVE-2024-43638 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Routine CVE-2024-43643 Windows USB Video Driver Elevation of Privilege 6.8 0.0074 Exploitation Less Likely
Routine CVE-2024-38203 Windows Package Library Manager Information Disclosure 6.2 0.0068 Exploitation Less Likely
Showing 1 to 20 of 20 1