Microsoft's security release of 10 December 2024
Patch Tuesday, December 2024
As of , CISA lists one of the 71 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-49138, Windows Common Log File System Driver Elevation of Privilege.
On CISA's list of exploited vulnerabilities
- CVE-2024-49138Windows Common Log File System Driver Elevation of Privilege. Listed by CISA on 10 December 2024, release day
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 71 CVEs |
| On CISA's list of exploited vulnerabilities | 1 CVE |
| CISA's SSVC exploitation: active | 1 CVE |
| CISA's SSVC exploitation: proof of concept | 3 CVEs |
| CISA's SSVC exploitation: none | 67 CVEs |
| Not assessed by CISA's SSVC | none |
| Critical by CVSS (9.0 or more) | 1 CVE |
| EPSS 0.10 or more | 5 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2024-49138Windows Common Log File System Driver Elevation of Privilege | Active | Patch soonListed | 7.8 High | 0.26 |
| 2 | CVE-2024-49113Windows Lightweight Directory Access Protocol (LDAP) Denial of Service | Proof of concept | Not on CISA's list | 7.5 High | 0.84 |
| 3 | CVE-2024-49112Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution | Proof of concept | Not on CISA's list | 9.8 Critical | 0.72 |
| 4 | CVE-2024-49114Windows Cloud Files Mini Filter Driver Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.01 |
| 5 | CVE-2024-49122Microsoft Message Queuing (MSMQ) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.21 |
| 6 | CVE-2024-49116Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.10 |
| 7 | CVE-2024-49075Windows Remote Desktop Services Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 8 | CVE-2024-49096Microsoft Message Queuing (MSMQ) Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 9 | CVE-2024-49062Microsoft SharePoint Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.03 |
| 10 | CVE-2024-49064Microsoft SharePoint Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.03 |
| 11 | CVE-2024-49080Windows IP Routing Management Snapin Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 12 | CVE-2024-49085Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 13 | CVE-2024-49086Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 14 | CVE-2024-49102Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 15 | CVE-2024-49104Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 16 | CVE-2024-49125Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 17 | CVE-2024-49063Microsoft/Muzic Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.02 |
| 18 | CVE-2024-49105Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.02 |
| 19 | CVE-2024-49068Microsoft SharePoint Elevation of Privilege | None | Not on CISA's list | 8.2 High | 0.02 |
| 20 | CVE-2024-49057Microsoft Defender for Endpoint on Android Spoofing | None | Not on CISA's list | 8.1 High | 0.02 |
| 21 | CVE-2024-49121Windows Lightweight Directory Access Protocol (LDAP) Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 22 | CVE-2024-49070Microsoft SharePoint Remote Code Execution | None | Not on CISA's list | 7.4 High | 0.02 |
| 23 | CVE-2024-43594Microsoft System Center Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.02 |
| 24 | CVE-2024-49107WmsRepair Service Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.02 |
| 25 | CVE-2024-49089Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 26 | CVE-2024-49091Windows Domain Name Service Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 27 | CVE-2024-49082Windows File Explorer Information Disclosure | None | Not on CISA's list | 6.8 Medium | 0.02 |
| 28 | CVE-2024-49093Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 29 | CVE-2024-49117Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 30 | CVE-2024-49106Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 31 | CVE-2024-49108Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 32 | CVE-2024-49115Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 33 | CVE-2024-49118Microsoft Message Queuing (MSMQ) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 34 | CVE-2024-49119Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 35 | CVE-2024-49120Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 36 | CVE-2024-49123Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 37 | CVE-2024-49124Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 38 | CVE-2024-49126Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 39 | CVE-2024-49127Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 40 | CVE-2024-49128Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 41 | CVE-2024-49132Windows Remote Desktop Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 42 | CVE-2024-43600Microsoft Office Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 43 | CVE-2024-49069Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 44 | CVE-2024-49072Windows Task Scheduler Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 45 | CVE-2024-49074Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 46 | CVE-2024-49076Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 47 | CVE-2024-49079Input Method Editor (IME) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 48 | CVE-2024-49088Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 49 | CVE-2024-49090Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 50 | CVE-2024-49142Microsoft Access Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 51 | CVE-2024-49129Windows Remote Desktop Gateway (RD Gateway) Denial of Service | None | Not on CISA's list | 7.5 High | 0.01 |
| 52 | CVE-2024-49073Windows Mobile Broadband Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 53 | CVE-2024-49077Windows Mobile Broadband Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 54 | CVE-2024-49078Windows Mobile Broadband Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 55 | CVE-2024-49083Windows Mobile Broadband Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 56 | CVE-2024-49092Windows Mobile Broadband Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 57 | CVE-2024-49110Windows Mobile Broadband Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 58 | CVE-2024-49081Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 59 | CVE-2024-49094Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 60 | CVE-2024-49101Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 61 | CVE-2024-49109Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 62 | CVE-2024-49111Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 63 | CVE-2024-49065Microsoft Office Remote Code Execution | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 64 | CVE-2024-49087Windows Mobile Broadband Driver Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 65 | CVE-2024-49098Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure | None | Not on CISA's list | 4.3 Medium | 0.01 |
| 66 | CVE-2024-49099Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure | None | Not on CISA's list | 4.3 Medium | 0.01 |
| 67 | CVE-2024-49103Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure | None | Not on CISA's list | 4.3 Medium | 0.01 |
| 68 | CVE-2024-49059Microsoft Office Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 69 | CVE-2024-49084Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 70 | CVE-2024-49095Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 71 | CVE-2024-49097Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 10 December 2024, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.