Microsoft's security release of 12 November 2024
Patch Tuesday, November 2024
As of , CISA lists two of the 89 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-43451, NTLM Hash Disclosure Spoofing.
On CISA's list of exploited vulnerabilities
- CVE-2024-43451NTLM Hash Disclosure Spoofing. Listed by CISA on 12 November 2024, release day
- CVE-2024-49039Windows Task Scheduler Elevation of Privilege. Listed by CISA on 12 November 2024, release day
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 89 CVEs |
| On CISA's list of exploited vulnerabilities | 2 CVEs |
| CISA's SSVC exploitation: active | 2 CVEs |
| CISA's SSVC exploitation: proof of concept | 2 CVEs |
| CISA's SSVC exploitation: none | 85 CVEs |
| Not assessed by CISA's SSVC | none |
| Critical by CVSS (9.0 or more) | 3 CVEs |
| EPSS 0.10 or more | 4 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2024-43451NTLM Hash Disclosure Spoofing | Active | Patch this weekListed | 6.5 Medium | 0.84 |
| 2 | CVE-2024-49039Windows Task Scheduler Elevation of Privilege | Active | Patch this weekListed | 8.8 High | 0.14 |
| 3 | CVE-2024-49040Microsoft Exchange Server Spoofing | Proof of concept | Not on CISA's list | 7.5 High | 0.08 |
| 4 | CVE-2024-49019Active Directory Certificate Services Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.02 |
| 5 | CVE-2024-43642Windows SMB Denial of Service | None | Not on CISA's list | 7.5 High | 0.63 |
| 6 | CVE-2024-43452Windows Registry Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.28 |
| 7 | CVE-2024-43639Windows KDC Proxy Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.09 |
| 8 | CVE-2024-43623Windows NT OS Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.05 |
| 9 | CVE-2024-43498.NET and Visual Studio Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.04 |
| 10 | CVE-2024-43629Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.04 |
| 11 | CVE-2024-43630Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.04 |
| 12 | CVE-2024-43499.NET and Visual Studio Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 13 | CVE-2024-43602Azure CycleCloud Remote Code Execution | None | Not on CISA's list | 9.9 Critical | 0.02 |
| 14 | CVE-2024-38255SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 15 | CVE-2024-43459SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 16 | CVE-2024-43462SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 17 | CVE-2024-43620Windows Telephony Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 18 | CVE-2024-43621Windows Telephony Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 19 | CVE-2024-43622Windows Telephony Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 20 | CVE-2024-43624Windows Hyper-V Shared Virtual Disk Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.02 |
| 21 | CVE-2024-43627Windows Telephony Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 22 | CVE-2024-43628Windows Telephony Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 23 | CVE-2024-43635Windows Telephony Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 24 | CVE-2024-48993SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 25 | CVE-2024-48994SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 26 | CVE-2024-48995SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 27 | CVE-2024-48996SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 28 | CVE-2024-49018SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 29 | CVE-2024-49033Microsoft Word Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.02 |
| 30 | CVE-2024-48997SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 31 | CVE-2024-48998SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 32 | CVE-2024-48999SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 33 | CVE-2024-49000SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 34 | CVE-2024-49001SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 35 | CVE-2024-49002SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 36 | CVE-2024-49003SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 37 | CVE-2024-49004SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 38 | CVE-2024-49005SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 39 | CVE-2024-49006SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 40 | CVE-2024-49007SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 41 | CVE-2024-49008SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 42 | CVE-2024-49009SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 43 | CVE-2024-49010SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 44 | CVE-2024-49011SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 45 | CVE-2024-49012SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 46 | CVE-2024-49013SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 47 | CVE-2024-49014SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 48 | CVE-2024-49015SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 49 | CVE-2024-49016SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 50 | CVE-2024-49017SQL Server Native Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 51 | CVE-2024-49050Visual Studio Code Python Extension Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 52 | CVE-2024-43447Windows SMBv3 Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 53 | CVE-2024-43598LightGBM Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 54 | CVE-2024-43625Microsoft Windows VMSwitch Elevation of Privilege | None | Not on CISA's list | 8.1 High | 0.01 |
| 55 | CVE-2024-49048TorchGeo Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 56 | CVE-2024-43626Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 57 | CVE-2024-43636Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 58 | CVE-2024-43640Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 59 | CVE-2024-43641Windows Registry Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 60 | CVE-2024-43644Windows Client-Side Caching Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 61 | CVE-2024-49021Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 62 | CVE-2024-49026Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 63 | CVE-2024-49027Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 64 | CVE-2024-49028Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 65 | CVE-2024-49029Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 66 | CVE-2024-49030Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 67 | CVE-2024-49031Microsoft Office Graphics Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 68 | CVE-2024-49032Microsoft Office Graphics Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 69 | CVE-2024-49043Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 70 | CVE-2024-49051Microsoft PC Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 71 | CVE-2024-43450Windows DNS Spoofing | None | Not on CISA's list | 7.5 High | 0.01 |
| 72 | CVE-2024-49056Airlift.microsoft.com Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 73 | CVE-2024-43613Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege | None | Not on CISA's list | 7.2 High | 0.01 |
| 74 | CVE-2024-49042Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege | None | Not on CISA's list | 7.2 High | 0.01 |
| 75 | CVE-2024-43449Windows USB Video Class System Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 76 | CVE-2024-43634Windows USB Video Class System Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 77 | CVE-2024-43637Windows USB Video Class System Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 78 | CVE-2024-43638Windows USB Video Class System Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 79 | CVE-2024-43643Windows USB Video Class System Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 80 | CVE-2024-43631Windows Secure Kernel Mode Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 81 | CVE-2024-43645Windows Defender Application Control (WDAC) Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 82 | CVE-2024-43646Windows Secure Kernel Mode Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 83 | CVE-2024-49044Visual Studio Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 84 | CVE-2024-43633Windows Hyper-V Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 85 | CVE-2024-38203Windows Package Library Manager Information Disclosure | None | Not on CISA's list | 6.2 Medium | 0.01 |
| 86 | CVE-2024-38264Microsoft Virtual Hard Disk (VHDX) Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 87 | CVE-2024-43530Windows Update Stack Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 88 | CVE-2024-49046Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 89 | CVE-2024-49049Visual Studio Code Remote Extension Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.00 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 12 November 2024, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.