Microsoft update

KB5046617

Security Update

View on Microsoft →

Fixed in

Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.2314
Windows 11 Version 24H2 for x64-based Systems 10.0.26100.2314
Windows Server 2025 10.0.26100.2314
Windows Server 2025 (Server Core installation) 10.0.26100.2314

Fixes 33 records

TI-2024-32708 CVE-2024-49039 · GHSA-jmf3-9f5j-cpjh

Windows Task Scheduler Elevation of Privilege Vulnerability

CRITICAL 97KEV

Windows Task Scheduler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.14179 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +8 CWE-287

TI-2024-29096 CVE-2024-43451 · GHSA-8rx5-xm8f-w3w5

NTLM Hash Disclosure Spoofing Vulnerability

CRITICAL 86KEV

NTLM Hash Disclosure Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.84266 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +11 CWE-73

TI-2024-29264 CVE-2024-43642 · GHSA-x3c4-52mm-7pp9

Windows SMB Denial of Service Vulnerability

HIGH 74

Windows SMB Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.63081 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.20348.2849 +3 CWE-416

TI-2024-32694 CVE-2024-49019 · GHSA-p2rj-qgfh-h8m9

Active Directory Certificate Services Elevation of Privilege Vulnerability

HIGH 69

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01981 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +7 CWE-1390

TI-2024-29261 CVE-2024-43639 · GHSA-2f2h-73pp-4p79

Windows KDC Proxy Remote Code Execution Vulnerability

MEDIUM 60

Windows KDC Proxy Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08943 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +5 CWE-197

TI-2024-29097 CVE-2024-43452 · GHSA-4jpm-2crw-5qqr

Windows Registry Elevation of Privilege Vulnerability

MEDIUM 58

Windows Registry Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.30155 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +7 CWE-367

TI-2024-29247 CVE-2024-43624 · GHSA-7jpm-f32g-qv8w

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

MEDIUM 44

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01849 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +6 CWE-822

TI-2024-29257 CVE-2024-43635 · GHSA-8hgc-m8mv-wr7p

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01697 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-190

TI-2024-29253 CVE-2024-43630 · GHSA-w799-83vp-q48c

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 43

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03784 Published 2024-11-12 Fixed in 10.0.20348.2849, 10.0.19044.5131 +3 CWE-121

TI-2024-29252 CVE-2024-43629 · GHSA-93ww-rwv5-gjg4

Windows DWM Core Library Elevation of Privilege Vulnerability

MEDIUM 43

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04363 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +6 CWE-822

TI-2024-29251 CVE-2024-43628 · GHSA-hqx6-xxcj-4chg

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01711 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-190

TI-2024-29250 CVE-2024-43627 · GHSA-5888-fpmr-f2v8

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01711 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-122

TI-2024-29246 CVE-2024-43623 · GHSA-4v4m-mgj6-c8jv

Windows NT OS Kernel Elevation of Privilege Vulnerability

MEDIUM 43

Windows NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04505 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-190

TI-2024-29245 CVE-2024-43622 · GHSA-5whg-6vqr-5wxf

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-122

TI-2024-29244 CVE-2024-43621 · GHSA-rgwg-49qg-75jg

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +12 CWE-122

TI-2024-29243 CVE-2024-43620 · GHSA-vhc2-7wp4-4355

Windows Telephony Service Remote Code Execution Vulnerability

MEDIUM 43

Windows Telephony Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-122

TI-2024-29248 CVE-2024-43625 · GHSA-92jc-4j34-wj49

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

LOW 38

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00672 Published 2024-11-12 Fixed in 10.0.20348.2849, 10.0.22621.4460 +3 CWE-416

TI-2024-29268 CVE-2024-43646 · GHSA-3986-r924-xxjc

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

LOW 37

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00542 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +7 CWE-822

TI-2024-29266 CVE-2024-43644 · GHSA-vcm2-gg9p-f48m

Windows Client-Side Caching Elevation of Privilege Vulnerability

LOW 37

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00546 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +12 CWE-125

TI-2024-29263 CVE-2024-43641 · GHSA-693v-cgfp-qgfp

Windows Registry Elevation of Privilege Vulnerability

LOW 37

Windows Registry Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00665 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +12 CWE-190

TI-2024-29258 CVE-2024-43636 · GHSA-qxf2-gf78-5hgp

Win32k Elevation of Privilege Vulnerability

LOW 37

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00684 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +9 CWE-822

TI-2024-29254 CVE-2024-43631 · GHSA-6583-5qh2-wgh7

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

LOW 37

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00542 Published 2024-11-12 Fixed in 10.0.20348.2849, 10.0.19044.5131 +5 CWE-822

TI-2024-29249 CVE-2024-43626 · GHSA-v9xc-66hj-99jw

Windows Telephony Service Elevation of Privilege Vulnerability

LOW 37

Windows Telephony Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00732 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-122

TI-2024-32714 CVE-2024-49046 · GHSA-6w96-779v-fpfh

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

LOW 36

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00446 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-367

TI-2024-29095 CVE-2024-43450 · GHSA-wgj3-g943-v8wv

Windows DNS Spoofing Vulnerability

LOW 36

Windows DNS Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00607 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +6 CWE-924

TI-2024-29265 CVE-2024-43643 · GHSA-3mrx-hx45-5865

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

LOW 33

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00743 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +12 CWE-125

TI-2024-29260 CVE-2024-43638 · GHSA-r549-w33c-xm84

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

LOW 33

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00743 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-125

TI-2024-29259 CVE-2024-43637 · GHSA-fgm4-wh6f-2pxc

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

LOW 33

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00743 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-125

TI-2024-29256 CVE-2024-43634 · GHSA-vw76-rp45-c8p9

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

LOW 33

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00743 Published 2024-11-12 Fixed in 10.0.17763.6532, 10.0.20348.2849 +12 CWE-125

TI-2024-29094 CVE-2024-43449 · GHSA-66pp-32jj-853p

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

LOW 33

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00743 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +11 CWE-125

TI-2024-29255 CVE-2024-43633 · GHSA-2p4q-qc9j-27gx

Windows Hyper-V Denial of Service Vulnerability

LOW 30

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00579 Published 2024-11-12 Fixed in 10.0.22621.4460, 10.0.22631.4460 +1 CWE-591

TI-2024-25542 CVE-2024-38264 · GHSA-f2vc-g638-2wm6

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

LOW 29

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01318 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.22621.4460 +2 CWE-591

TI-2024-25484 CVE-2024-38203 · GHSA-8pwc-jhg2-h67f

Windows Package Library Manager Information Disclosure Vulnerability

LOW 29

Windows Package Library Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00682 Published 2024-11-12 Fixed in 10.0.26100.2314, 10.0.17763.6532 +12 CWE-693