Microsoft Patch Tuesday — December 2024

Tuesday, 10 December 2024

Vulnerabilities: 73
Critical: 2
High: 51
Zero-days: 1
Public exploit: 4

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2024-49138 Zero-day Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 26%

Critical 2

Critical 9.8
CVE-2024-49112 Public exploit Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 72%
Critical 9.3
CVE-2024-49147 Microsoft Update Catalog Elevation of Privilege Vulnerability
EPSS 1.3%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2024-49117 Public exploit Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1%
High 7.5
CVE-2024-49113 Public exploit Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
EPSS 84%

All vulnerabilities 73

Critical2 Show

Critical 9.8
CVE-2024-49112 Public exploit Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 72%
Critical 9.3
CVE-2024-49147 Microsoft Update Catalog Elevation of Privilege Vulnerability
EPSS 1.3%

High51 Show

High 7.8
CVE-2024-49138 Zero-day Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 26%
High 8.8
CVE-2024-49117 Public exploit Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1%
High 8.8
CVE-2024-49080 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-49085 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-49086 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-49093 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High 8.8
CVE-2024-49102 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-49104 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-49125 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 8.4
CVE-2024-49063 Microsoft/Muzic Remote Code Execution Vulnerability
EPSS 1.7%
High 8.4
CVE-2024-49105 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.5%
High 8.2
CVE-2024-49068 Microsoft SharePoint Elevation of Privilege Vulnerability
EPSS 1.6%
High 8.1
CVE-2024-49057 Microsoft Defender for Endpoint on Android Spoofing Vulnerability
EPSS 1.7%
High 8.1
CVE-2024-49106 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2024-49108 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2024-49115 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.1%
High 8.1
CVE-2024-49116 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 10%
High 8.1
CVE-2024-49118 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.1
CVE-2024-49119 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2024-49120 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.1%
High 8.1
CVE-2024-49122 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 21%
High 8.1
CVE-2024-49123 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.1%
High 8.1
CVE-2024-49124 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
EPSS 1.4%
High 8.1
CVE-2024-49126 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2024-49127 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2024-49128 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2024-49132 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-43600 Microsoft Office Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-49069 Microsoft Excel Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability
High 7.8
CVE-2024-49074 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-49076 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-49079 Input Method Editor (IME) Remote Code Execution Vulnerability
High 7.8
CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 1%
High 7.8
CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-49114 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-49142 Microsoft Access Remote Code Execution Vulnerability
EPSS 1.1%
High 7.5
CVE-2024-49113 Public exploit Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
EPSS 84%
High 7.5
CVE-2024-49075 Windows Remote Desktop Services Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2024-49096 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.9%
High 7.5
CVE-2024-49121 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2024-49129 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
High 7.4
CVE-2024-49070 Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 2.3%
High 7.3
CVE-2024-43594 Microsoft System Center Elevation of Privilege Vulnerability
EPSS 1.7%
High 7.3
CVE-2024-49107 WmsRepair Service Elevation of Privilege Vulnerability
EPSS 1.9%
High 7.2
CVE-2024-49089 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 2.1%
High 7.2
CVE-2024-49091 Windows Domain Name Service Remote Code Execution Vulnerability
EPSS 1.7%
High 7.0
CVE-2024-49059 Microsoft Office Elevation of Privilege Vulnerability
High 7.0
CVE-2024-49084 Windows Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2024-49095 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
High 7.0
CVE-2024-49097 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Medium20 Show

Medium 6.8
CVE-2024-49073 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-49077 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-49078 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-49082 Windows File Explorer Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.8
CVE-2024-49083 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-49092 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2024-49110 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Medium 6.6
CVE-2024-49081 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Medium 6.6
CVE-2024-49094 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Medium 6.6
CVE-2024-49101 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Medium 6.6
CVE-2024-49109 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Medium 6.6
CVE-2024-49111 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
Medium 6.5
CVE-2024-49062 Microsoft SharePoint Information Disclosure Vulnerability
EPSS 3.2%
Medium 6.5
CVE-2024-49064 Microsoft SharePoint Information Disclosure Vulnerability
EPSS 2.5%
Medium 6.5
CVE-2024-49071 Windows Defender Information Disclosure Vulnerability
EPSS 1.1%
Medium 5.5
CVE-2024-49065 Microsoft Office Remote Code Execution Vulnerability
EPSS 1.1%
Medium 4.6
CVE-2024-49087 Windows Mobile Broadband Driver Information Disclosure Vulnerability
Medium 4.3
CVE-2024-49098 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Medium 4.3
CVE-2024-49099 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Medium 4.3
CVE-2024-49103 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Most affected products

Windows Server 2025 58 · 1 crit.
Windows Server 2025 (Server Core installation) 58 · 1 crit.
Windows Server 2019 57 · 1 crit.
Windows Server 2019 (Server Core installation) 57 · 1 crit.
Windows Server 2022, 23H2 Edition (Server Core installation) 57 · 1 crit.
Windows 11 Version 24H2 46 · 1 crit.
Windows 10 Version 1809 45 · 1 crit.
Windows 10 Version 21H2 45 · 1 crit.
Windows 10 Version 22H2 45 · 1 crit.
Windows 11 version 23H2 45 · 1 crit.
Windows 11 version 22H2 45 · 1 crit.
Windows Server 2022 42 · 1 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (10 Dec). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →