CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

75vulnerabilities fixed (CVEs)

19of them critical

1exploited (zero-day)

1publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday December 2024

75 vulnerabilities

CVE-2024-49138ImportantCVSS 7.8Exploited (zero-day)Publicly disclosedElevation of privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49112CriticalCVSS 9.8Remote code execution

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49147CriticalCVSS 9.3Elevation of privilege

Microsoft Update Catalog Elevation of Privilege Vulnerability

Apps · MSRC

CVE-2024-49117CriticalCVSS 8.8Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048654 KB5048800 KB5048685 KB5048667 · MSRC

CVE-2024-49105CriticalCVSS 8.4Remote code execution

Remote Desktop Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49106CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49108CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49115CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49116CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows · KB5053596 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49118CriticalCVSS 8.1Remote code execution

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49119CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49120CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5048800 KB5050009 · MSRC

CVE-2024-49122CriticalCVSS 8.1Remote code execution

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49123CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49124CriticalCVSS 8.1Remote code execution

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49126CriticalCVSS 8.1Remote code execution

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49127CriticalCVSS 8.1Remote code execution

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49128CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5058392 KB5058385 KB5058500 KB5058411 · MSRC

CVE-2024-49132CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5095051 KB5048661 KB5048654 KB5048800 · MSRC

CVE-2024-49071CriticalCVSS 6.5Information disclosure

Windows Defender Information Disclosure Vulnerability

System Center and Defender · MSRC

CVE-2024-49080ImportantCVSS 8.8Remote code execution

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49085ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49086ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49093ImportantCVSS 8.8Elevation of privilege

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Windows · KB5048667 KB5048794 · MSRC

CVE-2024-49102ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49104ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49125ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49063ImportantCVSS 8.4Remote code execution

Microsoft/Muzic Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2024-49068ImportantCVSS 8.2Elevation of privilege

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft Office · KB5002659 KB5002544 KB5002657 KB5002664 · MSRC

CVE-2024-49057ImportantCVSS 8.1Spoofing

Microsoft Defender for Endpoint on Android Spoofing Vulnerability

System Center and Defender · MSRC

CVE-2024-43600ImportantCVSS 7.8Elevation of privilege

Microsoft Office Elevation of Privilege Vulnerability

Microsoft Office · KB5002661 KB4475587 KB2920716 · MSRC

CVE-2024-49069ImportantCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002660 · MSRC

CVE-2024-49072ImportantCVSS 7.8Elevation of privilege

Windows Task Scheduler Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49074ImportantCVSS 7.8Elevation of privilege

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048652 · MSRC

CVE-2024-49076ImportantCVSS 7.8Elevation of privilege

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49079ImportantCVSS 7.8Remote code execution

Input Method Editor (IME) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49088ImportantCVSS 7.8Elevation of privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49090ImportantCVSS 7.8Elevation of privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048667 KB5048794 KB5048661 KB5048654 · MSRC

CVE-2024-49114ImportantCVSS 7.8Elevation of privilege

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49142ImportantCVSS 7.8Remote code execution

Microsoft Access Remote Code Execution Vulnerability

Microsoft Office · KB5002641 · MSRC

CVE-2024-49075ImportantCVSS 7.5Denial of service

Windows Remote Desktop Services Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49096ImportantCVSS 7.5Denial of service

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49113ImportantCVSS 7.5Denial of service

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49121ImportantCVSS 7.5Denial of service

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49129ImportantCVSS 7.5Denial of service

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

CVE-2024-49070ImportantCVSS 7.4Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office · KB5002659 KB5002544 KB5002657 KB5002664 · MSRC

CVE-2024-43594ImportantCVSS 7.3Elevation of privilege

Microsoft System Center Elevation of Privilege Vulnerability

System Center and Defender · MSRC

CVE-2024-49107ImportantCVSS 7.3Elevation of privilege

WmsRepair Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49089ImportantCVSS 7.2Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048652 · MSRC

CVE-2024-49091ImportantCVSS 7.2Remote code execution

Windows Domain Name Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5048667 · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed