Microsoft · ServicingStack update · December 10, 2024

KB5048653: December 2024 cumulative update for Windows Server 23H2

KB5048653, released December 10, 2024, fixes 57 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1308). One of them is being exploited (CVE-2024-49138); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
57
16 rated Critical
Exploited
1
CVE-2024-49138
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.8378
99th percentile

Priority of the 57 CVEs

Patch now 1 Urgent 20 High 20 Routine 16

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.1308

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege 7.8 0.2622 KEVDisclosedExploited
Urgent CVE-2024-49112 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 9.8 0.7217 Exploitation Less Likely
Urgent CVE-2024-49122 Windows Message Queuing Remote Code Execution 8.1 0.2093 More likely
Urgent CVE-2024-49116 Windows Remote Desktop Services Remote Code Execution 8.1 0.1028 Exploitation Less Likely
Urgent CVE-2024-49105 Remote Desktop Client Remote Code Execution 8.4 0.0153 Exploitation Less Likely
Urgent CVE-2024-49118 Windows Message Queuing Remote Code Execution 8.1 0.0145 Exploitation Less Likely
Urgent CVE-2024-49124 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0142 Exploitation Less Likely
Urgent CVE-2024-43583 Winlogon Elevation of Privilege 7.8 0.0134 DisclosedMore likely
Urgent CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution 8.1 0.0129 Exploitation Less Likely
Urgent CVE-2024-49127 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0129 Exploitation Less Likely
Urgent CVE-2024-49106 Windows Remote Desktop Services Remote Code Execution 8.1 0.0121 Exploitation Less Likely
Urgent CVE-2024-49108 Windows Remote Desktop Services Remote Code Execution 8.1 0.0121 Exploitation Less Likely
Urgent CVE-2024-49119 Windows Remote Desktop Services Remote Code Execution 8.1 0.0117 Exploitation Less Likely
Urgent CVE-2024-49128 Windows Remote Desktop Services Remote Code Execution 8.1 0.0117 Exploitation Less Likely
Urgent CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution 8.1 0.0111 Exploitation Less Likely
Urgent CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution 8.1 0.0110 Exploitation Less Likely
Urgent CVE-2024-49132 Windows Remote Desktop Remote Code Execution 8.1 0.0110 Exploitation Less Likely
Urgent CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
Urgent CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0104 More likely
Urgent CVE-2024-49117 Role: Windows Hyper-V Remote Code Execution 8.8 0.0103 Exploitation Less Likely
Urgent CVE-2024-49114 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0075 More likely
High CVE-2024-49113 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.8378 Exploitation Less Likely
High CVE-2024-49096 Windows Message Queuing Denial of Service 7.5 0.0288 Exploitation Less Likely
High CVE-2024-49075 Windows Remote Desktop Services Denial of Service 7.5 0.0262 Exploitation Less Likely
High CVE-2024-49121 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0236 Exploitation Less Likely
Showing 1 to 25 of 57 1Next