Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

Summary: Microsoft's December 2024 Patch Tuesday covers 72 vulnerabilities, four of which Microsoft marked "critical" and the rest "important." The most serious is CVE-2024-49112, a Windows LDAP flaw with a CVSS score of 9.8 that allows arbitrary code execution in the context of the LDAP service, while CVE-2024-49138, an elevation of privilege flaw in the Windows Common Log File System Driver rated 7.8, has been actively exploited in the wild.
Why it matters: Microsoft rated all four critical flaws as "less likely" to be exploited, yet the one vulnerability confirmed under active attack in this release carries only an "important" rating and a 7.8 score - a reminder that severity labels and real-world exploitation do not line up.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-49105 CVE-2024-49106 CVE-2024-49108 CVE-2024-49112 CVE-2024-49115 CVE-2024-49116 CVE-2024-49117 CVE-2024-49118 CVE-2024-49119 CVE-2024-49120 CVE-2024-49122 CVE-2024-49123 CVE-2024-49124 CVE-2024-49126 CVE-2024-49127 CVE-2024-49128 CVE-2024-49132 CVE-2024-49138
Related: Patch Tuesday, December 2024 Edition Cyber Risks ·
CVE-2024-49138: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Dec 10, 2024
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026