Microsoft Patch Tuesday · December 2024

    MicrosoftScheduled

    77

    Total

    Deduplicated CVEs in this cycle. For Microsoft, only CVEs first published on Patch Tuesday itself count, excluding browser updates, late additions and cloud fixes.

    2

    Critical

    CVEs with CVSS 9.0 or higher (critical per NVD scale).

    1

    Zero-day

    Actively exploited at time of disclosure (CISA KEV or vendor-confirmed).

    1

    KEV

    Listed in CISA's Known Exploited Vulnerabilities catalog: mandatory for US agencies, best practice for everyone.

    1 zero-day / actively exploited

    These vulnerabilities were exploited before or at the time the patch was released. Install the related updates first.

    1 zero-day / actively exploited
    HighCVE-2024-49138

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Listed in CISA KEVPublicly disclosed

    		KB50486617.8

    By product family

    Unassigned64 CVEs
    Unassigned
    CriticalCVE-2024-49112

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    		KB50486619.8
    CriticalCVE-2024-49147

    Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.

    		—9.3
    HighCVE-2024-49080

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

    		KB50486618.8
    HighCVE-2024-49085

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    		KB50486618.8
    HighCVE-2024-49086

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    		KB50486618.8
    HighCVE-2024-49093

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

    		KB50486678.8
    HighCVE-2024-49102

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    		KB50486618.8
    HighCVE-2024-49104

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    		KB50486618.8
    HighCVE-2024-49117

    Windows Hyper-V Remote Code Execution Vulnerability

    		KB50486548.8
    HighCVE-2024-49125

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    		KB50486618.8
    HighCVE-2024-49063

    Microsoft/Muzic Remote Code Execution Vulnerability

    		—8.4
    HighCVE-2024-49105

    Remote Desktop Client Remote Code Execution Vulnerability

    		KB50486618.4
    HighCVE-2024-49106

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49108

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49115

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49116

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50535968.1
    HighCVE-2024-49118

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49119

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49120

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50500088.1
    HighCVE-2024-49122

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49123

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49124

    Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49126

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49127

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    		KB50486618.1
    HighCVE-2024-49128

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

    		KB50583928.1
    HighCVE-2024-49132

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    		KB50950518.1
    HighCVE-2024-49069

    Microsoft Excel Remote Code Execution Vulnerability

    		KB50026607.8
    HighCVE-2024-49072

    Windows Task Scheduler Elevation of Privilege Vulnerability

    		KB50486617.8
    HighCVE-2024-49074

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    		KB50486617.8
    HighCVE-2024-49076

    Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

    		KB50486617.8
    HighCVE-2024-49079

    Input Method Editor (IME) Remote Code Execution Vulnerability

    		KB50486617.8
    HighCVE-2024-49088

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    		KB50486617.8
    HighCVE-2024-49090

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    		KB50486677.8
    HighCVE-2024-49114

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    		KB50486617.8
    HighCVE-2024-49142

    Microsoft Access Remote Code Execution Vulnerability

    		KB50026417.8
    HighCVE-2024-49075

    Windows Remote Desktop Services Denial of Service Vulnerability

    		KB50486617.5
    HighCVE-2024-49096

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    		KB50486617.5
    HighCVE-2024-49113

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    		KB50486617.5
    HighCVE-2024-49121

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

    		KB50486617.5
    HighCVE-2024-49129

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

    		KB50486617.5
    HighCVE-2024-43594

    Microsoft System Center Elevation of Privilege Vulnerability

    		—7.3
    HighCVE-2024-49107

    WmsRepair Service Elevation of Privilege Vulnerability

    		KB50486617.3
    HighCVE-2024-49089

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    		KB50486617.2
    HighCVE-2024-49091

    Windows Domain Name Service Remote Code Execution Vulnerability

    		KB50486617.2
    HighCVE-2024-49084

    Windows Kernel Elevation of Privilege Vulnerability

    		KB50486617.0
    HighCVE-2024-49095

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

    		KB50486617.0
    HighCVE-2024-49097

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

    		KB50486617.0
    MediumCVE-2024-49073

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    		KB50486616.8
    MediumCVE-2024-49077

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    		KB50486616.8
    MediumCVE-2024-49078

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    		KB50486616.8
    MediumCVE-2024-49082

    Windows File Explorer Information Disclosure Vulnerability

    		KB50486616.8
    MediumCVE-2024-49083

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    		KB50486616.8
    MediumCVE-2024-49092

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    		KB50486616.8
    MediumCVE-2024-49110

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    		KB50486616.8
    MediumCVE-2024-49081

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

    		KB50486616.6
    MediumCVE-2024-49094

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

    		KB50486616.6
    MediumCVE-2024-49101

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

    		KB50486616.6
    MediumCVE-2024-49109

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

    		KB50486616.6
    MediumCVE-2024-49111

    Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

    		KB50486616.6
    MediumCVE-2024-49071

    Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.

    		—6.5
    MediumCVE-2024-49087

    Windows Mobile Broadband Driver Information Disclosure Vulnerability

    		KB50486614.6
    MediumCVE-2024-49098

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

    		KB50486614.3
    MediumCVE-2024-49099

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

    		KB50486614.3
    MediumCVE-2024-49103

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

    		KB50486614.3
    SharePoint4 CVEs
    SharePoint
    HighCVE-2024-49068

    Microsoft SharePoint Elevation of Privilege Vulnerability

    		KB50026598.2
    HighCVE-2024-49070

    Microsoft SharePoint Remote Code Execution Vulnerability

    		KB50026597.4
    MediumCVE-2024-49062

    Microsoft SharePoint Information Disclosure Vulnerability

    		KB50026596.5
    MediumCVE-2024-49064

    Microsoft SharePoint Information Disclosure Vulnerability

    		KB50026596.5
    Office3 CVEs
    Office
    HighCVE-2024-43600

    Microsoft Office Elevation of Privilege Vulnerability

    		KB50026617.8
    HighCVE-2024-49059

    Microsoft Office Elevation of Privilege Vulnerability

    		KB44755877.0
    MediumCVE-2024-49065

    Microsoft Office Remote Code Execution Vulnerability

    		KB50026595.5
    Chromium3 CVEs
    Chromium
    HighCVE-2024-12053

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

    		—8.8
    HighCVE-2024-12381

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    		—8.8
    HighCVE-2024-12382

    Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    		—8.8
    Defender1 CVE
    Defender
    HighCVE-2024-49057

    Microsoft Defender for Endpoint on Android Spoofing Vulnerability

    		—8.1
    Edge1 CVE
    Edge
    MediumCVE-2024-49041

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    		—4.3