Microsoft Patch Tuesday · November 2024

    MicrosoftScheduled

    101

    Total

    Deduplicated CVEs in this cycle. For Microsoft, only CVEs first published on Patch Tuesday itself count, excluding browser updates, late additions and cloud fixes.

    3

    Critical

    CVEs with CVSS 9.0 or higher (critical per NVD scale).

    2

    Zero-day

    Actively exploited at time of disclosure (CISA KEV or vendor-confirmed).

    2

    KEV

    Listed in CISA's Known Exploited Vulnerabilities catalog: mandatory for US agencies, best practice for everyone.

    2 zero-days / actively exploited

    These vulnerabilities were exploited before or at the time the patch was released. Install the related updates first.

    2 zero-days / actively exploited
    HighCVE-2024-49039

    Windows Task Scheduler Elevation of Privilege Vulnerability

    Listed in CISA KEV

    		KB50466178.8
    MediumCVE-2024-43451

    NTLM Hash Disclosure Spoofing Vulnerability

    Listed in CISA KEVPublicly disclosed

    		KB50466176.5

    By product family

    Unassigned78 CVEs
    Unassigned
    CriticalCVE-2024-43639

    Windows KDC Proxy Remote Code Execution Vulnerability

    		KB50466179.8
    HighCVE-2024-38255

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-43459

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-43462

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468608.8
    HighCVE-2024-43620

    Windows Telephony Service Remote Code Execution Vulnerability

    		KB50466158.8
    HighCVE-2024-43621

    Windows Telephony Service Remote Code Execution Vulnerability

    		KB50466178.8
    HighCVE-2024-43622

    Windows Telephony Service Remote Code Execution Vulnerability

    		KB50466158.8
    HighCVE-2024-43624

    Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

    		KB50466158.8
    HighCVE-2024-43627

    Windows Telephony Service Remote Code Execution Vulnerability

    		KB50466158.8
    HighCVE-2024-43628

    Windows Telephony Service Remote Code Execution Vulnerability

    		KB50466158.8
    HighCVE-2024-43635

    Windows Telephony Service Remote Code Execution Vulnerability

    		KB50466158.8
    HighCVE-2024-48993

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-48994

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-48995

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-48996

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-48997

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-48998

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-48999

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49000

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49001

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468608.8
    HighCVE-2024-49002

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49003

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468608.8
    HighCVE-2024-49004

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49005

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49006

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49007

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49008

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49009

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49010

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49011

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49012

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49013

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49014

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49015

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468608.8
    HighCVE-2024-49016

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49017

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49018

    SQL Server Native Client Remote Code Execution Vulnerability

    		KB50468578.8
    HighCVE-2024-49050

    Visual Studio Code Python Extension Remote Code Execution Vulnerability

    		—8.8
    HighCVE-2024-43447

    Windows SMBv3 Server Remote Code Execution Vulnerability

    		KB50466168.1
    HighCVE-2024-43598

    LightGBM Remote Code Execution Vulnerability

    		—8.1
    HighCVE-2024-43625

    Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

    		KB50466168.1
    HighCVE-2024-49048

    TorchGeo Remote Code Execution Vulnerability

    		—8.1
    HighCVE-2024-43530

    Windows Update Stack Elevation of Privilege Vulnerability

    		KB50466167.8
    HighCVE-2024-43623

    Windows NT OS Kernel Elevation of Privilege Vulnerability

    		KB50466157.8
    HighCVE-2024-43626

    Windows Telephony Service Elevation of Privilege Vulnerability

    		KB50466157.8
    HighCVE-2024-43629

    Windows DWM Core Library Elevation of Privilege Vulnerability

    		KB50466177.8
    HighCVE-2024-43630

    Windows Kernel Elevation of Privilege Vulnerability

    		KB50466167.8
    HighCVE-2024-43636

    Win32k Elevation of Privilege Vulnerability

    		KB50466157.8
    HighCVE-2024-43640

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    		KB50466167.8
    HighCVE-2024-43641

    Windows Registry Elevation of Privilege Vulnerability

    		KB50466177.8
    HighCVE-2024-43644

    Windows Client-Side Caching Elevation of Privilege Vulnerability

    		KB50466177.8
    HighCVE-2024-49019

    Active Directory Certificate Services Elevation of Privilege Vulnerability

    Publicly disclosed

    		KB50466157.8
    HighCVE-2024-49026

    Microsoft Excel Remote Code Execution Vulnerability

    		KB50026487.8
    HighCVE-2024-49027

    Microsoft Excel Remote Code Execution Vulnerability

    		KB50026537.8
    HighCVE-2024-49028

    Microsoft Excel Remote Code Execution Vulnerability

    		KB50026537.8
    HighCVE-2024-49029

    Microsoft Excel Remote Code Execution Vulnerability

    		KB50026537.8
    HighCVE-2024-49030

    Microsoft Excel Remote Code Execution Vulnerability

    		KB50026537.8
    HighCVE-2024-49043

    Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

    		KB50468577.8
    HighCVE-2024-49046

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    		KB50466157.8
    HighCVE-2024-49051

    Microsoft PC Manager Elevation of Privilege Vulnerability

    		—7.8
    HighCVE-2024-43450

    Windows DNS Spoofing Vulnerability

    		KB50466157.5
    HighCVE-2024-43452

    Windows Registry Elevation of Privilege Vulnerability

    		KB50466157.5
    HighCVE-2024-43642

    Windows SMB Denial of Service Vulnerability

    		KB50466177.5
    HighCVE-2024-49033

    Microsoft Word Security Feature Bypass Vulnerability

    		KB50026197.5
    HighCVE-2024-49056

    Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.

    		—7.3
    HighCVE-2024-49049

    Visual Studio Code Remote Extension Elevation of Privilege Vulnerability

    		—7.1
    MediumCVE-2024-43449

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

    		KB50466176.8
    MediumCVE-2024-43634

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

    		KB50466156.8
    MediumCVE-2024-43637

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

    		KB50466156.8
    MediumCVE-2024-43638

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

    		KB50466156.8
    MediumCVE-2024-43643

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

    		KB50466176.8
    MediumCVE-2024-43631

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

    		KB50466166.7
    MediumCVE-2024-43645

    Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

    		KB50466156.7
    MediumCVE-2024-43646

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

    		KB50466176.7
    MediumCVE-2024-49044

    Visual Studio Elevation of Privilege Vulnerability

    		—6.7
    MediumCVE-2024-43633

    Windows Hyper-V Denial of Service Vulnerability

    		KB50466336.5
    MediumCVE-2024-38203

    Windows Package Library Manager Information Disclosure Vulnerability

    		KB50466176.2
    MediumCVE-2024-38264

    Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

    		KB50466175.9
    Chromium10 CVEs
    Chromium
    HighCVE-2024-10826

    Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    		—8.8
    HighCVE-2024-10827

    Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    		—8.8
    HighCVE-2024-11112

    Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    		—8.8
    HighCVE-2024-11113

    Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

    		—8.8
    HighCVE-2024-11115

    Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures.

    		—8.8
    HighCVE-2024-11114

    Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

    		—8.3
    MediumCVE-2024-11110

    Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.

    		—6.5
    MediumCVE-2024-11111

    Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

    		—4.3
    MediumCVE-2024-11116

    Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

    		—4.3
    MediumCVE-2024-11117

    Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

    		—4.3
    Azure4 CVEs
    Azure
    CriticalCVE-2024-43602

    Azure CycleCloud Remote Code Execution Vulnerability

    		—9.9
    HighCVE-2024-49060

    Azure Stack HCI Elevation of Privilege Vulnerability

    		—8.8
    HighCVE-2024-43613

    Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

    		—7.2
    HighCVE-2024-49042

    Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

    		—7.2
    .NET2 CVEs
    .NET
    CriticalCVE-2024-43498

    .NET and Visual Studio Remote Code Execution Vulnerability

    		—9.8
    HighCVE-2024-43499

    .NET and Visual Studio Denial of Service Vulnerability

    		—7.5
    Office2 CVEs
    Office
    HighCVE-2024-49031

    Microsoft Office Graphics Remote Code Execution Vulnerability

    		KB50026427.8
    HighCVE-2024-49032

    Microsoft Office Graphics Remote Code Execution Vulnerability

    		KB50026427.8
    SQL Server1 CVE
    SQL Server
    HighCVE-2024-49021

    Microsoft SQL Server Remote Code Execution Vulnerability

    		KB50468577.8
    Exchange1 CVE
    Exchange
    HighCVE-2024-49040

    Microsoft Exchange Server Spoofing Vulnerability

    Publicly disclosed

    		KB50492337.5
    Edge1 CVE
    Edge
    MediumCVE-2024-49025

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    		—5.4