Microsoft · Security update · December 10, 2024
KB5048654: December 2024 cumulative update for Windows Server 2022
KB5048654, released December 10, 2024, fixes 42 CVEs across 2 products. One of them is being exploited (CVE-2024-49138); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV2 publicly disclosed
CVEs closed
42
16 rated Critical
Exploited
1
CVE-2024-49138
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.8378
99th percentile
Priority of the 42 CVEs
Patch now 1
Urgent 20
High 20
Routine 1
Applies to
| Product | Build after install |
|---|---|
| Windows Server 2022 | 20348.2966 |
| Windows Server 2022 (Server Core installation) | 20348.2966 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-49138 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.2622 | KEVDisclosedExploited |
| Urgent | CVE-2024-49112 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 9.8 | 0.7217 | Exploitation Less Likely |
| Urgent | CVE-2024-49122 | Windows Message Queuing | Remote Code Execution | 8.1 | 0.2093 | More likely |
| Urgent | CVE-2024-49116 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.1028 | Exploitation Less Likely |
| Urgent | CVE-2024-49105 | Remote Desktop Client | Remote Code Execution | 8.4 | 0.0153 | Exploitation Less Likely |
| Urgent | CVE-2024-49118 | Windows Message Queuing | Remote Code Execution | 8.1 | 0.0145 | Exploitation Less Likely |
| Urgent | CVE-2024-49124 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.0142 | Exploitation Less Likely |
| Urgent | CVE-2024-43583 | Winlogon | Elevation of Privilege | 7.8 | 0.0134 | DisclosedMore likely |
| Urgent | CVE-2024-49126 | Windows Local Security Authority Subsystem Service (LSASS) | Remote Code Execution | 8.1 | 0.0129 | Exploitation Less Likely |
| Urgent | CVE-2024-49127 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.0129 | Exploitation Less Likely |
| Urgent | CVE-2024-49106 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0121 | Exploitation Less Likely |
| Urgent | CVE-2024-49108 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0121 | Exploitation Less Likely |
| Urgent | CVE-2024-49119 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0117 | Exploitation Less Likely |
| Urgent | CVE-2024-49128 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0117 | Exploitation Less Likely |
| Urgent | CVE-2024-49115 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0111 | Exploitation Less Likely |
| Urgent | CVE-2024-49123 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0110 | Exploitation Less Likely |
| Urgent | CVE-2024-49132 | Windows Remote Desktop | Remote Code Execution | 8.1 | 0.0110 | Exploitation Less Likely |
| Urgent | CVE-2024-49090 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0107 | More likely |
| Urgent | CVE-2024-49088 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0104 | More likely |
| Urgent | CVE-2024-49117 | Role: Windows Hyper-V | Remote Code Execution | 8.8 | 0.0103 | Exploitation Less Likely |
| Urgent | CVE-2024-49114 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.0075 | More likely |
| High | CVE-2024-49113 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 7.5 | 0.8378 | Exploitation Less Likely |
| High | CVE-2024-49096 | Windows Message Queuing | Denial of Service | 7.5 | 0.0288 | Exploitation Less Likely |
| High | CVE-2024-49075 | Windows Remote Desktop Services | Denial of Service | 7.5 | 0.0262 | Exploitation Less Likely |
| High | CVE-2024-49121 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 7.5 | 0.0236 | Exploitation Less Likely |
Showing 1 to 25 of 42
1Next