Microsoft Patch Tuesday : 71 Vulnerabilities Fixed

Microsoft’s final Patch Tuesday of 2024 addresses 71 vulnerabilities, including 16 critical ones and a zero-day. This update highlights Microsoft’s commitment to improving product security and safeguarding users from cyber threats.

Critical Zero-Day Exploited: CVE-2024-49138

CVE-2024-49138, a critical Elevation of Privilege vulnerability in the Windows Common Log File System Driver, was actively exploited before being patched in Microsoft’s December 2024 update.

Discovered by CrowdStrike’s Advanced Research Team, this flaw allows attackers to gain SYSTEM-level privileges, giving them full control over compromised systems.

While exploitation in the wild has been confirmed, specific methods remain undisclosed. Microsoft urges users to apply the patch immediately to secure their systems.

Vulnerabilities Patched

This month’s update addresses 16 critical flaws in Windows Remote Desktop Services, Hyper-V, and LDAP Client, which could enable remote code execution and full system control if exploited.

Key Vulnerabilities and Updates

Microsoft’s December update addresses several severe vulnerabilities:

• CVE-2024-49106, CVE-2024-49108, CVE-2024-49115: Remote Code Execution flaws in Windows Remote Desktop Services.
• CVE-2024-49117: Remote Code Execution in Windows Hyper-V.
• CVE-2024-49124: Remote Code Execution in the LDAP Client.

Administrators are urged to apply these patches immediately to reduce the risk of exploitation.

CISA has also added CVE-2024-43451 to its Known Exploited Vulnerabilities Catalog, further highlighting the need for prompt action.

Beyond critical and zero-day fixes, Microsoft resolved:

• 30 Remote Code Execution vulnerabilities.
• 28 Elevation of Privilege flaws.
• 4 Denial of Service issues.
• 7 Information Disclosure vulnerabilities.
• 1 Spoofing flaw and 1 Defense in Depth update.

Prompt patching is essential to safeguard systems from potential threats.

Microsoft December Patch Tuesday: 72 Vulnerabilities Fixed, Critical Updates for Enterprise Systems

Microsoft has introduced a hotpatching preview for Windows 11 Enterprise 24H2 and Windows 365 Enterprise, reducing annual reboots from twelve to four to minimize downtime.

As 2024 ends, Microsoft advances its Secure Future Initiative, preparing for a 2025 OS launch featuring a secure kernel, stricter app controls, and enhanced AI, as Windows 10 transitions to Extended Security Updates.

The December 2024 Patch Tuesday highlights the importance of timely updates, urging users to apply patches promptly to safeguard systems against evolving cyber threats.