Microsoft · Security update · December 10, 2024
KB5048744: December 2024 security update
KB5048744, released December 10, 2024, fixes 23 CVEs across 4 products. One of them is being exploited (CVE-2024-49138); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
23
6 rated Critical
Exploited
1
CVE-2024-49138
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8378
99th percentile
Priority of the 23 CVEs
Patch now 1
Urgent 9
High 12
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-49138 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.2622 | KEVDisclosedExploited |
| Urgent | CVE-2024-49112 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 9.8 | 0.7217 | Exploitation Less Likely |
| Urgent | CVE-2024-49122 | Windows Message Queuing | Remote Code Execution | 8.1 | 0.2093 | More likely |
| Urgent | CVE-2024-49118 | Windows Message Queuing | Remote Code Execution | 8.1 | 0.0145 | Exploitation Less Likely |
| Urgent | CVE-2024-49124 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.0142 | Exploitation Less Likely |
| Urgent | CVE-2024-43583 | Winlogon | Elevation of Privilege | 7.8 | 0.0134 | DisclosedMore likely |
| Urgent | CVE-2024-49126 | Windows Local Security Authority Subsystem Service (LSASS) | Remote Code Execution | 8.1 | 0.0129 | Exploitation Less Likely |
| Urgent | CVE-2024-49127 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.0129 | Exploitation Less Likely |
| Urgent | CVE-2024-49090 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0107 | More likely |
| Urgent | CVE-2024-49088 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0104 | More likely |
| High | CVE-2024-49113 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 7.5 | 0.8378 | Exploitation Less Likely |
| High | CVE-2024-49096 | Windows Message Queuing | Denial of Service | 7.5 | 0.0288 | Exploitation Less Likely |
| High | CVE-2024-49121 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 7.5 | 0.0236 | Exploitation Less Likely |
| High | CVE-2024-49089 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.2 | 0.0207 | Exploitation Less Likely |
| High | CVE-2024-49080 | Windows IP Routing Management Snapin | Remote Code Execution | 8.8 | 0.0173 | Exploitation Less Likely |
| High | CVE-2024-49102 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0169 | Exploitation Less Likely |
| High | CVE-2024-49104 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0169 | Exploitation Less Likely |
| High | CVE-2024-49085 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0160 | Exploitation Less Likely |
| High | CVE-2024-49086 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0160 | Exploitation Less Likely |
| High | CVE-2024-49125 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0153 | Exploitation Less Likely |
| High | CVE-2024-49072 | Windows Task Scheduler | Elevation of Privilege | 7.8 | 0.0062 | Exploitation Less Likely |
| High | CVE-2024-49084 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0043 | Exploitation Less Likely |
| Routine | CVE-2024-49082 | Windows File Explorer | Information Disclosure | 6.8 | 0.0154 | Exploitation Less Likely |
Showing 1 to 23 of 23
1