KB5048667: Cumulative update for Windows 11, version 24H2, December 2024. Exploited CLFS driver flaw addressed; Arm Roblox issue remains

The update addresses 47 vulnerabilities, including an exploited flaw in the Common Log File System driver. Players on Arm devices still can’t download or play Roblox from the Microsoft Store.

Does it affect you? Applies to: Devices running Windows 11, version 24H2, with x64 or Arm64 processors.

Review notes Additional details from the official release notes (2) Read notes

Known issues The reported OpenSSH failure affects a limited number of enterprise, IoT, and education devices. Microsoft is investigating whether Home or Pro devices are affected.
Known issues On affected devices, OpenSSH may fail to start without detailed logging, and manual intervention may be needed to run sshd.exe. The reported impact is limited to some enterprise, IoT, and education devices; Home and Pro impact is under investigation.

The official sources are linked at the end of the page.

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvements 2 changes

Windows operating system

Includes miscellaneous security improvements to internal Windows functionality.¹

Servicing stack

The component that installs Windows updates receives quality improvements.²
Includes servicing stack update KB5049685, build 26100.2592.

Known issues

Resolved Affects: Everyone Resolved by KB5052093

Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

Some customers report that the OpenSSH service fails to start after installing the October 2024 security update, preventing SSH connections. This issue is addressed in KB5052093.³

Resolution Fixed in KB5052093

Install KB5052093 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Open Affects: Everyone

We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows.

Players on Arm devices might be unable to download or play Roblox through the Microsoft Store.⁴

How to apply the workaround Workaround

Download Roblox directly from Roblox.com.⁴

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2024-12-10
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5046617, KB5044284, KB5043178, KB5043080

+6 earlier
KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239
Replaced by: KB5050009

Version	Build	Channel
24H2	26100.2605	General availability

Security

47 vulnerabilities fixed

1 exploited 10 critical 37 important

Vulnerability	Severity	CVSS
CVE-2024-49138 Exploited Windows Common Log File System Driver Elevation of Privilege Vulnerability	Important	7.8
CVE-2024-49112 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	Critical	9.8
CVE-2024-49117 Windows Hyper-V Remote Code Execution Vulnerability	Critical	8.8
CVE-2024-49105 Remote Desktop Client Remote Code Execution Vulnerability	Critical	8.4
CVE-2024-49118 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49122 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49127 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability	Critical	8.1
CVE-2024-43583 Winlogon Elevation of Privilege Vulnerability	Important	7.8

The table lists the 12 exploited, publicly disclosed or critical vulnerabilities. See all 47 vulnerabilities →

Downloads (Microsoft Update Catalog)

x64 24H2

1.0 GB

windows11.0-kb5048667-x64.msu Main update · KB5048667 SHA-1: d4ad0ca6…0c9f93 windows11.0-kb5043080-x64.msu Prerequisite · KB5043080 SHA-1: 95344967…9c83e8

Arm64 24H2

1.2 GB

windows11.0-kb5048667-arm64.msu Main update · KB5048667 SHA-1: 3713792b…b19f4f windows11.0-kb5043080-arm64.msu Prerequisite · KB5043080 SHA-1: df540a05…0f090b

Updated components

1,414 files changed since the previous update for the same versions.

Top changed components	Files
.NET networking	38
Graphics and display	25
Hyper-V and virtualization	16
Remote Desktop	15
Storage and file systems	14
WCF	12
Networking	11
File Explorer and shell	9
Printing	9
Bluetooth	8
.NET data access	6
.NET runtime (CLR)	6

Sources

Microsoft Support: KB5048667

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (4)

1. This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. support.microsoft.com
2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
3. Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections. support.microsoft.com
4. We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake