Microsoft · Security update · December 10, 2024

KB5048661: December 2024 cumulative update for Windows 10 1809

KB5048661, released December 10, 2024, fixes 56 CVEs across 4 products. One of them is being exploited (CVE-2024-49138); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV2 publicly disclosed
CVEs closed
56
14 rated Critical
Exploited
1
CVE-2024-49138
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.8378
99th percentile

Priority of the 56 CVEs

Patch now 1 Urgent 18 High 21 Routine 16

Applies to

ProductBuild after install
Windows 10 Version 1809 for 32-bit Systems17763.6659
Windows 10 Version 1809 for x64-based Systems17763.6659
Windows Server 201917763.6659
Windows Server 2019 (Server Core installation)17763.6659

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege 7.8 0.2622 KEVDisclosedExploited
Urgent CVE-2024-49112 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 9.8 0.7217 Exploitation Less Likely
Urgent CVE-2024-49122 Windows Message Queuing Remote Code Execution 8.1 0.2093 More likely
Urgent CVE-2024-49105 Remote Desktop Client Remote Code Execution 8.4 0.0153 Exploitation Less Likely
Urgent CVE-2024-49118 Windows Message Queuing Remote Code Execution 8.1 0.0145 Exploitation Less Likely
Urgent CVE-2024-49124 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0142 Exploitation Less Likely
Urgent CVE-2024-43583 Winlogon Elevation of Privilege 7.8 0.0134 DisclosedMore likely
Urgent CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution 8.1 0.0129 Exploitation Less Likely
Urgent CVE-2024-49127 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0129 Exploitation Less Likely
Urgent CVE-2024-49106 Windows Remote Desktop Services Remote Code Execution 8.1 0.0121 Exploitation Less Likely
Urgent CVE-2024-49108 Windows Remote Desktop Services Remote Code Execution 8.1 0.0121 Exploitation Less Likely
Urgent CVE-2024-49119 Windows Remote Desktop Services Remote Code Execution 8.1 0.0117 Exploitation Less Likely
Urgent CVE-2024-49128 Windows Remote Desktop Services Remote Code Execution 8.1 0.0117 Exploitation Less Likely
Urgent CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution 8.1 0.0111 Exploitation Less Likely
Urgent CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution 8.1 0.0110 Exploitation Less Likely
Urgent CVE-2024-49132 Windows Remote Desktop Remote Code Execution 8.1 0.0110 Exploitation Less Likely
Urgent CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
Urgent CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0104 More likely
Urgent CVE-2024-49114 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0075 More likely
High CVE-2024-49113 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.8378 Exploitation Less Likely
High CVE-2024-49096 Windows Message Queuing Denial of Service 7.5 0.0288 Exploitation Less Likely
High CVE-2024-49075 Windows Remote Desktop Services Denial of Service 7.5 0.0262 Exploitation Less Likely
High CVE-2024-49121 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0236 Exploitation Less Likely
High CVE-2024-49089 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.2 0.0207 Exploitation Less Likely
High CVE-2024-49107 WmsRepair Service Elevation of Privilege 7.3 0.0193 Exploitation Less Likely
Showing 1 to 25 of 56 1Next