Windows Task Scheduler Elevation of Privilege Vulnerability
Windows · KB5046617 KB5046696 KB5046615 KB5046616
Patch Tuesday
Patch Tuesday November 2024 – known issues, zero-days and what to do
On 12 Nov 2024 Microsoft fixed 97 vulnerabilities – critical: 7, already exploited (zero-days): 3. Known issues with the updates: none known.
97vulnerabilities
7critical
3zero-days
0known issues
What to do now
- Zero-days first: 3 vulnerabilities are already being exploited (CVE-2024-49039, CVE-2024-49035, CVE-2024-43451) – install the updates as soon as possible, starting with servers and exposed systems.
- 7 critical vulnerabilities (mainly Windows, SQL Server, Microsoft Office) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Partner.Microsoft.Com Elevation of Privilege Vulnerability
Azure
NTLM Hash Disclosure Spoofing Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5046617 KB5046696 KB5046615 KB5046616
Critical vulnerabilities (6)
.NET and Visual Studio Remote Code Execution Vulnerability
Developer tools (.NET, Visual Studio …)
Windows KDC Proxy Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5046617 KB5046696 KB5046615 KB5046616
Microsoft Copilot Studio Elevation Of Privilege Vulnerability
Microsoft Office
Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability
Azure
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Windows · KB5046616 KB5046698 KB5046633 KB5046618
Airlift.microsoft.com Elevation of Privilege Vulnerability
Azure
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5046616 | Windows | 34 | none known |
| KB5046698 | Windows | 34 | none known |
| KB5046857 | SQL Server | 31 | none known |
| KB5046859 | SQL Server | 31 | none known |
| KB5046858 | SQL Server | 31 | none known |
| KB5046855 | SQL Server | 30 | none known |
| KB5046856 | SQL Server | 30 | none known |
| KB5046860 | SQL Server | 29 | none known |
| KB5046615 | Windows | 28 | none known |
| KB5046613 | Windows | 28 | none known |
| KB5046633 | Windows | 21 | none known |
| KB5046618 | Windows | 21 | none known |
Show 17 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5046617 | Windows | 18 | none known |
| KB5046696 | Windows | 16 | none known |
| KB5002653 | Microsoft Office | 5 | none known |
| KB5046612 | Windows | 3 | none known |
| KB5046861 | SQL Server | 2 | none known |
| KB5002642 | Microsoft Office | 2 | none known |
| KB5002654 | Microsoft Office | 1 | none known |
| KB5002650 | Microsoft Office | 1 | none known |
| KB5002651 | Microsoft Office | 1 | none known |
| KB5046665 | Windows | 1 | none known |
| KB5046687 | Windows | 1 | none known |
| KB5049233 | Server software (Exchange, SharePoint …) | 1 | none known |
| KB5046661 | Windows | 1 | none known |
| KB5002648 | Microsoft Office | 1 | none known |
| KB5002619 | Microsoft Office | 1 | none known |
| KB5058718 | SQL Server | 1 | none known |
| KB5046062 | SQL Server | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.