Microsoft · Security update · December 10, 2024

KB5048699: December 2024 security update

KB5048699, released December 10, 2024, fixes 30 CVEs across 2 products. One of them is being exploited (CVE-2024-49138); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV2 publicly disclosed
CVEs closed
30
9 rated Critical
Exploited
1
CVE-2024-49138
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8378
99th percentile

Priority of the 30 CVEs

Patch now 1 Urgent 12 High 16 Routine 1

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege 7.8 0.2622 KEVDisclosedExploited
Urgent CVE-2024-49112 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 9.8 0.7217 Exploitation Less Likely
Urgent CVE-2024-49122 Windows Message Queuing Remote Code Execution 8.1 0.2093 More likely
Urgent CVE-2024-49105 Remote Desktop Client Remote Code Execution 8.4 0.0153 Exploitation Less Likely
Urgent CVE-2024-49118 Windows Message Queuing Remote Code Execution 8.1 0.0145 Exploitation Less Likely
Urgent CVE-2024-49124 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0142 Exploitation Less Likely
Urgent CVE-2024-43583 Winlogon Elevation of Privilege 7.8 0.0134 DisclosedMore likely
Urgent CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution 8.1 0.0129 Exploitation Less Likely
Urgent CVE-2024-49127 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0129 Exploitation Less Likely
Urgent CVE-2024-49128 Windows Remote Desktop Services Remote Code Execution 8.1 0.0117 Exploitation Less Likely
Urgent CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution 8.1 0.0110 Exploitation Less Likely
Urgent CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
Urgent CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0104 More likely
High CVE-2024-49113 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.8378 Exploitation Less Likely
High CVE-2024-49096 Windows Message Queuing Denial of Service 7.5 0.0288 Exploitation Less Likely
High CVE-2024-49121 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0236 Exploitation Less Likely
High CVE-2024-49089 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.2 0.0207 Exploitation Less Likely
High CVE-2024-49080 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0173 Exploitation Less Likely
High CVE-2024-49091 Role: DNS Server Remote Code Execution 7.2 0.0170 Exploitation Less Likely
High CVE-2024-49102 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0169 Exploitation Less Likely
High CVE-2024-49104 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0169 Exploitation Less Likely
High CVE-2024-49085 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2024-49086 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2024-49125 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0153 Exploitation Less Likely
High CVE-2024-38033 Windows PowerShell Elevation of Privilege 7.3 0.0106 Exploitation Less Likely
Showing 1 to 25 of 30 1Next