Skip to the content
The Update Bureau
Security

KB5048667: all 47 vulnerabilities

Cumulative update for Windows 11, version 24H2, December 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

47 vulnerabilities fixed
1 exploited 10 critical 37 important
VulnerabilitySeverityCVSS
CVE-2024-49138 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49112
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-49117
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.8
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.4
CVE-2024-49118
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49122
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49123
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49124
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49126
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49127
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49132
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49080
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49093
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-49102
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49104
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49072
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49076
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49079
Input Method Editor (IME) Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-49088
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49090
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49114
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49075
Windows Remote Desktop Services Denial of Service Vulnerability
 Important 7.5
CVE-2024-49096
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49113
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49121
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49107
WmsRepair Service Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-49089
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.2
CVE-2024-49084
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-49095
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-49097
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-49073
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-49077
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-49078
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-49082
Windows File Explorer Information Disclosure Vulnerability
 Important 6.8
CVE-2024-49083
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-49092
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-49110
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-49081
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
 Important 6.6
CVE-2024-49094
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
 Important 6.6
CVE-2024-49101
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
 Important 6.6
CVE-2024-49109
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
 Important 6.6
CVE-2024-49111
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
 Important 6.6
CVE-2024-49087
Windows Mobile Broadband Driver Information Disclosure Vulnerability
 Important 4.6
CVE-2024-49098
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
 Important 4.3
CVE-2024-49099
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
 Important 4.3
CVE-2024-49103
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
 Important 4.3