Microsoft update

KB5048685

Security Update

View on Microsoft →

Fixed in

Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.4602
Windows 11 Version 22H2 for x64-based Systems 10.0.22621.4602
Windows 11 Version 23H2 for ARM64-based Systems 10.0.22631.4602
Windows 11 Version 23H2 for x64-based Systems 10.0.22631.4602

Fixes 46 records

TI-2024-32792 CVE-2024-49138 · GHSA-h4hx-5g7m-p3hc

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.26215 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32773 CVE-2024-49112 · GHSA-ffx5-3pxp-6q4w

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CRITICAL 87

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72173 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-190

TI-2024-32774 CVE-2024-49113 · GHSA-hq8w-cr85-pwqw

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

HIGH 80

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83777 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-125

TI-2024-32775 CVE-2024-49114 · GHSA-396q-83g8-947v

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

HIGH 69

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00748 Published 2024-12-10 Fixed in 10.0.17763.6659, 10.0.19044.5247 +6 CWE-820

TI-2024-29214 CVE-2024-43583 · GHSA-8xj7-c2mm-v3r5

Winlogon Elevation of Privilege Vulnerability

HIGH 69

Winlogon Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01341 Published 2024-10-08 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-250

TI-2024-32783 CVE-2024-49122 · GHSA-m66h-xc6v-38j2

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 56

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.20927 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32758 CVE-2024-49096 · GHSA-9j95-8xv9-jv6r

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02875 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-400

TI-2024-32742 CVE-2024-49080 · GHSA-c8c9-xcrw-6rgj

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

MEDIUM 44

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01727 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32737 CVE-2024-49075 · GHSA-p224-82hj-42w3

Windows Remote Desktop Services Denial of Service Vulnerability

MEDIUM 44

Windows Remote Desktop Services Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02624 Published 2024-12-10 Fixed in 10.0.17763.6659, 10.0.19044.5247 +7 CWE-400

TI-2024-32782 CVE-2024-49121 · GHSA-gqgf-rxrp-grhx

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02355 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-476

TI-2024-32765 CVE-2024-49104 · GHSA-h6fx-m56r-mvw2

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01688 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32763 CVE-2024-49102 · GHSA-6xm9-4v9w-hpvh

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01688 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32778 CVE-2024-49117 · GHSA-j885-4693-cqgh

Windows Hyper-V Remote Code Execution Vulnerability

MEDIUM 42

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01029 Published 2024-12-10 Fixed in 10.0.22621.4602, 10.0.22631.4602 +3 CWE-393

TI-2024-32766 CVE-2024-49105 · GHSA-6wcv-fq4v-cvv9

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01529 Published 2024-12-10 Fixed in 1.2.5716.0, 10.0.10240.20857 +13 CWE-284

TI-2024-32788 CVE-2024-49127 · GHSA-qgrj-p6f4-pxj8

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 40

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01291 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32787 CVE-2024-49126 · GHSA-453g-5mrh-qccr

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

MEDIUM 40

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01291 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32785 CVE-2024-49124 · GHSA-78q2-767q-6x6v

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

MEDIUM 40

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01416 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-362

TI-2024-32779 CVE-2024-49118 · GHSA-7j7p-8xpw-v444

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01448 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32791 CVE-2024-49132 · GHSA-j6r2-q88x-5m39

Windows Remote Desktop Services Remote Code Execution Vulnerability

LOW 39

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01104 Published 2024-12-10 Fixed in 10.0.17763.6659, 10.0.19044.5247 +7 CWE-416

TI-2024-32784 CVE-2024-49123 · GHSA-q5hq-6qcp-phr8

Windows Remote Desktop Services Remote Code Execution Vulnerability

LOW 39

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01104 Published 2024-12-10 Fixed in 10.0.17763.6659, 10.0.19044.5247 +7 CWE-591

TI-2024-32768 CVE-2024-49107 · GHSA-6cx8-q77v-f378

WmsRepair Service Elevation of Privilege Vulnerability

LOW 38

WmsRepair Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01931 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +8 CWE-284

TI-2024-32752 CVE-2024-49090 · GHSA-jr5x-w373-qc62

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 38

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01071 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-822

TI-2024-32751 CVE-2024-49089 · GHSA-w784-x6v6-q82v

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02069 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32750 CVE-2024-49088 · GHSA-986v-gc7p-69fc

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 38

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01042 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-126

TI-2024-32741 CVE-2024-49079 · GHSA-fpq5-9jg6-fqq7

Input Method Editor (IME) Remote Code Execution Vulnerability

LOW 38

Input Method Editor (IME) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00988 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +10 CWE-416

TI-2024-32738 CVE-2024-49076 · GHSA-f353-6hqm-57r9

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

LOW 38

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01216 Published 2024-12-10 Fixed in 10.0.17763.6659, 10.0.19044.5247 +6 CWE-287

TI-2024-32734 CVE-2024-49072 · GHSA-h37q-rxj6-83hg

Windows Task Scheduler Elevation of Privilege Vulnerability

LOW 37

Windows Task Scheduler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00616 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32744 CVE-2024-49082 · GHSA-67jv-gxg5-rmq6

Windows File Explorer Information Disclosure Vulnerability

LOW 35

Windows File Explorer Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01536 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-22

TI-2024-32771 CVE-2024-49110 · GHSA-v8xr-q4f3-9wmf