Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities
- CVEs
- CVE-2024-49112CVE-2024-49124CVE-2024-49127CVE-2024-49126CVE-2024-49105CVE-2024-49117CVE-2024-49106CVE-2024-49108CVE-2024-49115CVE-2024-49119CVE-2024-49120CVE-2024-49123CVE-2024-49132CVE-2024-49116CVE-2024-49128CVE-2024-49122CVE-2024-49118CVE-2024-49138CVE-2024-49070CVE-2024-49093CVE-2024-49088CVE-2024-49090CVE-2024-49114
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-49070 | Microsoft SharePoint Remote Code Execution Vulnerability | 7.4 | 2% | ||
| CVE-2024-49112 | Unauthenticated RCE in Microsoft Windows LDAP (CVE-2024-49112) | 9.8 group max | 71% | ||
| CVE-2024-49093 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | 8.8 | <1% | ||
| CVE-2024-49105 | Remote Desktop Client Remote Code Execution Vulnerability | 8.4 | 2% | ||
| CVE-2024-49116 | Windows Remote Desktop Services Remote Code Execution Vulnerability | 8.1 | 10% | ||
CVE-2024-49123+2 related CVEs | Windows Remote Desktop Services Remote Code Execution Vulnerability | 8.1 group max | 1% | ||
| CVE-2024-49117 | Windows Hyper-V Remote Code Execution Vulnerability | 8.8 | 1% | ||
| CVE-2024-49138 | Local Privilege Escalation via Heap Overflow in Microsoft Windows CLFS Driver | 7.8 | 26% | KEVPoC ×2 | KEV |
From the original article
3 min read at blog.talosintelligence.com
The Patch Tuesday for December of 2024 includes 72 vulnerabilities, including four that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.” Microsoft assessed that exploitation of the four “critical” vulnerabilities is “less likely.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.