Skip to the content
The Update Bureau
Security

KB5046616: all 37 vulnerabilities

Cumulative update for Windows Server, version 2022, November 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

37 vulnerabilities fixed
2 exploited 2 critical 35 important
VulnerabilitySeverityCVSS
CVE-2024-49039 Exploited
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43451 Exploited
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2024-43639
Windows KDC Proxy Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-43625
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
 Critical 8.1
CVE-2024-43620
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43621
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43622
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43624
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-43627
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43628
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43635
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43447
Windows SMBv3 Server Remote Code Execution Vulnerability
 Important 8.1
CVE-2024-43516
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43528
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43530
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43626
Windows Telephony Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43629
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43630
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43640
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43641
Windows Registry Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43644
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49019
Active Directory Certificate Services Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49046
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-43450
Windows DNS Spoofing Vulnerability
 Important 7.5
CVE-2024-43452
Windows Registry Elevation of Privilege Vulnerability
 Important 7.5
CVE-2024-43642
Windows SMB Denial of Service Vulnerability
 Important 7.5
CVE-2024-43511
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-43449
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43634
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43637
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43638
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43643
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-43631
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7
CVE-2024-43646
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 6.7
CVE-2024-38203
Windows Package Library Manager Information Disclosure Vulnerability
 Important 6.2