Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday Zero-day

KB5048661

KB5048661: Cumulative update for Windows Server, version 2019, December 2024. Exploited log-file driver flaw patched; motherboard activation fixed

In short

Fixes a Windows activation problem after motherboard replacement and addresses security issues, including an actively exploited privilege-escalation flaw in the Common Log File System Driver.

Does it affect you? Applies to: Devices running Windows Server 2019, build 17763.6659.

Build
17763.6659
Security
55 fixed · 13 critical · 1 exploited

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fix 1 change

Motherboard replacement

  • Windows activates after you replace a motherboard.1

Improvement 1 change

Servicing stack

  • The component that installs Windows updates gets quality improvements to help devices receive and install Microsoft updates reliably.2
    Includes servicing stack update KB5043126, build 17763.6289.

Known issues

  1. Resolved Affects: Organizations and IT administrators Resolved by KB5053596

    Following the installation of the October 2024 security update, some customers report that the OpenSSH (Open Secure Shell) service fails to start, preventing SSH connections.

    On a limited number of enterprise, IoT, and education devices, the OpenSSH service might fail to start after the October 2024 security update, preventing SSH connections. Microsoft is investigating whether consumer customers using Home or Pro editions of Windows are affected. KB5053596 addresses the issue.3

    Resolution Fixed in KB5053596

    Install KB5053596 (or a later cumulative update) on affected devices. No manual workaround is required after updating.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-12-10
Type
Cumulative update
VersionBuildChannel
2019 17763.6659 General availability

Security

55 vulnerabilities fixed
1 exploited 13 critical 42 important
VulnerabilitySeverityCVSS
CVE-2024-49138 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49112
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.4
CVE-2024-49106
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49108
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49115
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49118
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49119
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49122
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49123
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49124
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49126
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49127
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49132
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability
 Important 7.8

The table lists the 15 exploited, publicly disclosed or critical vulnerabilities. See all 55 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. [Motherboard replacement] Fixed: Windows does not activate after you replace a motherboard. support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. This issue is addressed in KB5053596. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake