Skip to the content
The Update Bureau
Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
Patch Tuesday Zero-day

KB5048652

KB5048652: Cumulative update for Windows 10, versions 21H2 and 22H2, December 2024. Exploited Common Log File System flaw patched; Sysprep error fixed

In short

The update fixes 46 vulnerabilities, including nine critical ones and an actively exploited flaw in the Common Log File System driver. It also fixes a Sysprep error on Windows 10 Enterprise and IoT Enterprise LTSC 2021.

Does it affect you? Applies to: This update applies to Windows 10, version 22H2, and to version 21H2 on Enterprise LTSC 2021 and IoT Enterprise LTSC 2021.

Builds
19044.5247 · 19045.5247
Security
46 fixed · 9 critical · 1 exploited

What changes

Improvements 2 changes

Windows 10, version 22H2

  • Includes all improvements from supported Windows 10, version 21H2 editions.1

Servicing stack

  • The component that installs Windows updates receives quality improvements.2
    Includes servicing stack update KB5046823 for builds 19044.5071 and 19045.5071.

Fix 1 change

Sysprep /generalize

  • On Windows 10 Enterprise LTSC 2021 and IoT Enterprise LTSC 2021, Sysprep no longer fails with error 0x80073cf when you remove a package after removing its dependencies.3

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5052077

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    After the October 2024 security update, the OpenSSH service might fail to start, preventing SSH connections. The issue affected a limited number of enterprise, IoT, and Education devices and is addressed by KB5052077; Microsoft was investigating whether Home or Pro devices were affected.4

    Resolution Fixed in KB5052077

    Install KB5052077 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-12-10
Type
Cumulative update
VersionBuildChannel
21H2 19044.5247 General availability
22H2 19045.5247 General availability

Security

46 vulnerabilities fixed
1 exploited 9 critical 37 important
VulnerabilitySeverityCVSS
CVE-2024-49138 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49112
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.4
CVE-2024-49118
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49122
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49123
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49124
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49126
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49127
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49132
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability
 Important 7.8

The table lists the 11 exploited, publicly disclosed or critical vulnerabilities. See all 46 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. This build includes all the improvements from the supported Windows 10, version 21H2 editions. support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. [Sysprep /generalize] Fixed: This command fails with error 0x80073cf. This occurs when you try to remove a package after you have already removed its dependencies. support.microsoft.com
  4. 4. This issue is addressed in KB5052077. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake