Skip to the content
The Update Bureau
Security

KB5048671: all 32 vulnerabilities

Cumulative update for Windows Server, version 2016, December 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

32 vulnerabilities fixed
1 exploited 11 critical 21 important
VulnerabilitySeverityCVSS
CVE-2024-49138 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49112
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.4
CVE-2024-49106
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49108
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49115
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49118
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49119
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49122
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49124
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49126
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49127
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-49080
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49085
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49086
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49102
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49104
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-49125
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49072
Windows Task Scheduler Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49079
Input Method Editor (IME) Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-49088
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49090
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-49096
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49113
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49121
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49129
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
 Important 7.5
CVE-2024-49107
WmsRepair Service Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-49089
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.2
CVE-2024-49091
Windows Domain Name Service Remote Code Execution Vulnerability
 Important 7.2
CVE-2024-49084
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-49082
Windows File Explorer Information Disclosure Vulnerability
 Important 6.8