CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

97vulnerabilities fixed (CVEs)

7of them critical

3exploited (zero-day)

3publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday November 2024

97 vulnerabilities

CVE-2024-49035CriticalCVSS 8.7Exploited (zero-day)Elevation of privilege

Partner.Microsoft.Com Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2024-49039ImportantCVSS 8.8Exploited (zero-day)Elevation of privilege

Windows Task Scheduler Elevation of Privilege Vulnerability

Windows · KB5046617 KB5046696 KB5046615 KB5046616 · MSRC

CVE-2024-43451ImportantCVSS 6.5Exploited (zero-day)Publicly disclosedSpoofing

NTLM Hash Disclosure Spoofing Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046617 KB5046696 KB5046615 KB5046616 · MSRC

CVE-2024-43498CriticalCVSS 9.8Remote code execution

.NET and Visual Studio Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2024-43639CriticalCVSS 9.8Remote code execution

Windows KDC Proxy Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046617 KB5046696 KB5046615 KB5046616 · MSRC

CVE-2024-49038CriticalCVSS 9.3Elevation of privilege

Microsoft Copilot Studio Elevation Of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2024-49052CriticalCVSS 8.2Elevation of privilege

Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2024-43625CriticalCVSS 8.1Elevation of privilege

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Windows · KB5046616 KB5046698 KB5046633 KB5046618 · MSRC

CVE-2024-49056CriticalCVSS 7.3Elevation of privilege

Airlift.microsoft.com Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2024-43602ImportantCVSS 9.9Remote code execution

Azure CycleCloud Remote Code Execution Vulnerability

Azure · MSRC

CVE-2024-38255ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-43459ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-43462ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046860 KB5046857 KB5046859 KB5046855 · MSRC

CVE-2024-43620ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5046613 · MSRC

CVE-2024-43621ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046617 KB5046696 KB5046615 KB5046616 · MSRC

CVE-2024-43622ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5046613 · MSRC

CVE-2024-43624ImportantCVSS 8.8Elevation of privilege

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

Windows · KB5046615 KB5046616 KB5046698 KB5046613 · MSRC

CVE-2024-43627ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5046613 · MSRC

CVE-2024-43628ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5046613 · MSRC

CVE-2024-43635ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5046613 · MSRC

CVE-2024-48993ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-48994ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-48995ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-48996ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-48997ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-48998ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-48999ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49000ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5058718 KB5046062 · MSRC

CVE-2024-49001ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046860 KB5046857 KB5046859 KB5046855 · MSRC

CVE-2024-49002ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49003ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046860 KB5046857 KB5046859 KB5046855 · MSRC

CVE-2024-49004ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49005ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49006ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49007ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49008ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49009ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49010ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49011ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49012ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49013ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49014ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49015ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046860 KB5046857 KB5046859 KB5046855 · MSRC

CVE-2024-49016ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49017ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49018ImportantCVSS 8.8Remote code execution

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server · KB5046857 KB5046859 KB5046855 KB5046856 · MSRC

CVE-2024-49050ImportantCVSS 8.8Remote code execution

Visual Studio Code Python Extension Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2024-49060ImportantCVSS 8.8Elevation of privilege

Azure Stack HCI Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2024-43447ImportantCVSS 8.1Remote code execution

Windows SMBv3 Server Remote Code Execution Vulnerability

Windows · KB5046616 KB5046698 · MSRC

CVE-2024-43598ImportantCVSS 8.1Remote code execution

LightGBM Remote Code Execution Vulnerability

Open source software · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed