Microsoft update

KB5048695

Monthly Rollup

View on Microsoft →

Fixed in

Windows 11 Version 22H2 for ARM64-based Systems 6.1.7601.27467
Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27467
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27467

Fixes 24 records

TI-2024-32792 CVE-2024-49138 · GHSA-h4hx-5g7m-p3hc

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.26215 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32773 CVE-2024-49112 · GHSA-ffx5-3pxp-6q4w

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CRITICAL 87

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72173 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-190

TI-2024-32774 CVE-2024-49113 · GHSA-hq8w-cr85-pwqw

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

HIGH 80

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83777 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-125

TI-2024-29214 CVE-2024-43583 · GHSA-8xj7-c2mm-v3r5

Winlogon Elevation of Privilege Vulnerability

HIGH 69

Winlogon Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01341 Published 2024-10-08 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-250

TI-2024-32783 CVE-2024-49122 · GHSA-m66h-xc6v-38j2

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 56

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.20927 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32758 CVE-2024-49096 · GHSA-9j95-8xv9-jv6r

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02875 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-400

TI-2024-32742 CVE-2024-49080 · GHSA-c8c9-xcrw-6rgj

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

MEDIUM 44

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01727 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32786 CVE-2024-49125 · GHSA-prrv-2g69-29hw

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01528 Published 2024-12-10 Fixed in 6.0.6003.23016, 6.1.7601.27467 +7 CWE-122

TI-2024-32782 CVE-2024-49121 · GHSA-gqgf-rxrp-grhx

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02355 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-476

TI-2024-32765 CVE-2024-49104 · GHSA-h6fx-m56r-mvw2

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01688 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32763 CVE-2024-49102 · GHSA-6xm9-4v9w-hpvh

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01688 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32748 CVE-2024-49086 · GHSA-vc4g-w5wr-85hv

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01596 Published 2024-12-10 Fixed in 6.0.6003.23016, 6.1.7601.27467 +7 CWE-122

TI-2024-32747 CVE-2024-49085 · GHSA-2g7f-fm5g-52cj

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01596 Published 2024-12-10 Fixed in 6.0.6003.23016, 6.1.7601.27467 +7 CWE-122

TI-2024-32766 CVE-2024-49105 · GHSA-6wcv-fq4v-cvv9

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 42

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01529 Published 2024-12-10 Fixed in 1.2.5716.0, 10.0.10240.20857 +13 CWE-284

TI-2024-32788 CVE-2024-49127 · GHSA-qgrj-p6f4-pxj8

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 40

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01291 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32787 CVE-2024-49126 · GHSA-453g-5mrh-qccr

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

MEDIUM 40

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01291 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32785 CVE-2024-49124 · GHSA-78q2-767q-6x6v

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

MEDIUM 40

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01416 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-362

TI-2024-32779 CVE-2024-49118 · GHSA-7j7p-8xpw-v444

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01448 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-416

TI-2024-32752 CVE-2024-49090 · GHSA-jr5x-w373-qc62

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 38

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01071 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-822

TI-2024-32751 CVE-2024-49089 · GHSA-w784-x6v6-q82v

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02069 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32750 CVE-2024-49088 · GHSA-986v-gc7p-69fc

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 38

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01042 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-126

TI-2024-32734 CVE-2024-49072 · GHSA-h37q-rxj6-83hg

Windows Task Scheduler Elevation of Privilege Vulnerability

LOW 37

Windows Task Scheduler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00616 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-122

TI-2024-32744 CVE-2024-49082 · GHSA-67jv-gxg5-rmq6

Windows File Explorer Information Disclosure Vulnerability

LOW 35

Windows File Explorer Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01536 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-22

TI-2024-32746 CVE-2024-49084 · GHSA-v5p3-66g2-2879

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00434 Published 2024-12-10 Fixed in 10.0.10240.20857, 10.0.14393.7606 +12 CWE-362