NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2024-49117

CVSS 3.1: 8.8 high
EPSS: 1%p61
Published: Dec 12, 2024 · Dec 12, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-49117 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Windows Hyper-V Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows 11 22h2, windows 11 23h2, windows 11 24h2, windows server 2022, windows server 2022 23h2, windows server 2025

Weakness: CWE-393

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

3 stories

Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability

The Hacker NewsDec 11, 15:01 UTC · Dec 11, 2024VulnerabilityExploitedCVE-2024-49138 CVE-2022-24521 CVE-2022-37969+65 · 2 reads

60

Microsoft December 2024 Patch Tuesday addressed actively exploited zero

Security AffairsDec 10, 22:25 UTC · Dec 10, 2024VulnerabilityExploitedCVE-2024-49138 CVE-2024-49112 CVE-2024-491172 · 1 read

60

Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

Cisco TalosDec 10, 20:52 UTC · Dec 10, 2024VulnerabilityExploitedCVE-2024-49112 CVE-2024-49124 CVE-2024-49127+203 · 1 read

60