Microsoft Patch Tuesday — November 2024

Tuesday, 12 November 2024

Vulnerabilities: 90
Critical: 3
High: 73
Zero-days: 2
Public exploit: 4

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2024-49039 Zero-day Public exploit Windows Task Scheduler Elevation of Privilege Vulnerability
EPSS 14%
Medium 6.5
CVE-2024-43451 Zero-day Public exploit NTLM Hash Disclosure Spoofing Vulnerability
EPSS 84%

Critical 3

Critical 9.9
CVE-2024-43602 Azure CycleCloud Remote Code Execution Vulnerability
EPSS 2.3%
Critical 9.8
CVE-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 3.6%
Critical 9.8
CVE-2024-43639 Windows KDC Proxy Remote Code Execution Vulnerability
EPSS 8.9%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2024-43630 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 3.8%
High 7.8
CVE-2024-49019 Public exploit Active Directory Certificate Services Elevation of Privilege Vulnerability
EPSS 2%

All vulnerabilities 90

Critical3 Show

Critical 9.9
CVE-2024-43602 Azure CycleCloud Remote Code Execution Vulnerability
EPSS 2.3%
Critical 9.8
CVE-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 3.6%
Critical 9.8
CVE-2024-43639 Windows KDC Proxy Remote Code Execution Vulnerability
EPSS 8.9%

High73 Show

High 8.8
CVE-2024-49039 Zero-day Public exploit Windows Task Scheduler Elevation of Privilege Vulnerability
EPSS 14%
High 8.8
CVE-2024-38255 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43459 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43462 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43620 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-43621 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-43622 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-43624 Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-43627 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43628 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43635 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-48993 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-48994 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-48995 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-48996 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-48997 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-48998 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-48999 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49000 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49001 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49002 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49003 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49004 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49005 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49006 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49007 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49008 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49009 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49010 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49011 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49012 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49013 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49014 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49015 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49016 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49017 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-49018 SQL Server Native Client Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-49050 Visual Studio Code Python Extension Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2024-43447 Windows SMBv3 Server Remote Code Execution Vulnerability
EPSS 1.5%
High 8.1
CVE-2024-43598 LightGBM Remote Code Execution Vulnerability
EPSS 1.4%
High 8.1
CVE-2024-43625 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
High 8.1
CVE-2024-49048 TorchGeo Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-43630 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 3.8%
High 7.8
CVE-2024-49019 Public exploit Active Directory Certificate Services Elevation of Privilege Vulnerability
EPSS 2%
High 7.8
CVE-2024-43530 Windows Update Stack Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability
EPSS 4.5%
High 7.8
CVE-2024-43626 Windows Telephony Service Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43629 Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 4.4%
High 7.8
CVE-2024-43636 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43640 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43641 Windows Registry Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43644 Windows Client-Side Caching Elevation of Privilege Vulnerability
High 7.8
CVE-2024-49021 Microsoft SQL Server Remote Code Execution Vulnerability
High 7.8
CVE-2024-49026 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-49027 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-49028 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-49029 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-49030 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-49031 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2024-49032 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2024-49043 Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
High 7.8
CVE-2024-49046 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High 7.8
CVE-2024-49051 Microsoft PC Manager Elevation of Privilege Vulnerability
High 7.5
CVE-2024-43450 Windows DNS Spoofing Vulnerability
High 7.5
CVE-2024-43452 Windows Registry Elevation of Privilege Vulnerability
EPSS 30%
High 7.5
CVE-2024-43499 .NET and Visual Studio Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2024-43642 Windows SMB Denial of Service Vulnerability
EPSS 63%
High 7.5
CVE-2024-49033 Microsoft Word Security Feature Bypass Vulnerability
EPSS 2.1%
High 7.5
CVE-2024-49040 Microsoft Exchange Server Spoofing Vulnerability
EPSS 8.5%
High 7.3
CVE-2024-49056 Airlift.microsoft.com Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.2
CVE-2024-43613 Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.2
CVE-2024-49042 Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.1
CVE-2024-49049 Visual Studio Code Remote Extension Elevation of Privilege Vulnerability

Medium14 Show

Medium 6.5
CVE-2024-43451 Zero-day Public exploit NTLM Hash Disclosure Spoofing Vulnerability
EPSS 84%
Medium 6.8
CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-43634 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-43637 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-43638 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.7
CVE-2024-43631 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Medium 6.7
CVE-2024-43645 Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-43646 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Medium 6.7
CVE-2024-49044 Visual Studio Elevation of Privilege Vulnerability
Medium 6.5
CVE-2024-43633 Windows Hyper-V Denial of Service Vulnerability
Medium 6.2
CVE-2024-38203 Windows Package Library Manager Information Disclosure Vulnerability
Medium 5.9
CVE-2024-38264 Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
EPSS 1.3%
Medium 5.4
CVE-2024-49025 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability