KB5048661: Cumulative update for Windows 10, version 1809, December 2024. Exploited CLFS driver flaw addressed; motherboard activation fixed

The update addresses 46 security vulnerabilities, including an exploited flaw in the Common Log File System Driver, and fixes Windows activation after a motherboard replacement.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSC 2019, version 1809, build 17763.6659.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Fix 1 change

Motherboard replacement

For: devices with a replaced motherboard

Windows activates again after a motherboard replacement.¹

Improvement 1 change

Servicing stack

The component that installs Windows updates gets quality improvements to help devices receive and install updates.²
Includes servicing stack update KB5043126 (build 17763.6289).

Known issues

Resolved Affects: Organizations and IT administrators Resolved by KB5053596

Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

After the October 2024 security update, the OpenSSH service might fail to start, preventing SSH connections. KB5053596 addresses this issue.³

Resolution Fixed in KB5053596

Install KB5053596 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-12-10
Type: Cumulative update

Version	Build	Channel
1809	17763.6659	General availability

Security

46 vulnerabilities fixed

1 exploited 9 critical 37 important

Vulnerability	Severity	CVSS
CVE-2024-49138 Exploited Windows Common Log File System Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-49112 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	Critical	9.8
CVE-2024-49105 Remote Desktop Client Remote Code Execution Vulnerability	Critical	8.4
CVE-2024-49118 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49122 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49127 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-43583 Winlogon Elevation of Privilege Vulnerability	Important	7.8

The table lists the 11 exploited, publicly disclosed or critical vulnerabilities. See all 46 vulnerabilities →

Sources

Microsoft Support: KB5048661

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (3)

1. [Motherboard replacement] Fixed: Windows does not activate after you replace a motherboard. support.microsoft.com
2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
3. This issue is addressed in KB5053596. support.microsoft.com

Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Nov 14, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake