Microsoft Patch Tuesday, November 2024: the CVEs

Microsoft Patch Tuesday November 2024: the CVEs Microsoft published on 12 November 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.2CVE-2024-49042EPSS 1.2%2024-11-12

   Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

2. 7.2CVE-2024-43613EPSS 1.2%2024-11-12

   Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

3. 8.8CVE-2024-49056EPSS 1.1%2024-11-12

   Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.

4. 7.8CVE-2024-49051EPSS 0.6%2024-11-12

   Microsoft PC Manager Elevation of Privilege Vulnerability

5. 8.8CVE-2024-49050EPSS 1.3%2024-11-12

   Visual Studio Code Python Extension Remote Code Execution Vulnerability

6. 7.1CVE-2024-49049EPSS 0.4%2024-11-12

   Visual Studio Code Remote Extension Elevation of Privilege Vulnerability

7. 8.1CVE-2024-49048EPSS 1.2%2024-11-12

   TorchGeo Remote Code Execution Vulnerability

8. 7.8CVE-2024-49046EPSS 0.4%2024-11-12

   Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

9. 6.7CVE-2024-49044EPSS 0.8%2024-11-12

   Visual Studio Elevation of Privilege Vulnerability

10. 7.8CVE-2024-49043EPSS 0.6%2024-11-12

    Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

11. 7.5CVE-2024-49040EPSS 8.5%2024-11-12

    Microsoft Exchange Server Spoofing Vulnerability

12. 8.8CVE-2024-49039KEVEPSS 14%2024-11-12

    Windows Task Scheduler Elevation of Privilege Vulnerability

13. 7.5CVE-2024-49033EPSS 2.1%2024-11-12

    Microsoft Word Security Feature Bypass Vulnerability

14. 7.8CVE-2024-49032EPSS 0.9%2024-11-12

    Microsoft Office Graphics Remote Code Execution Vulnerability

15. 7.8CVE-2024-49031EPSS 0.8%2024-11-12

    Microsoft Office Graphics Remote Code Execution Vulnerability

16. 7.8CVE-2024-49030EPSS 0.8%2024-11-12

    Microsoft Excel Remote Code Execution Vulnerability

17. 7.8CVE-2024-49029EPSS 0.8%2024-11-12

    Microsoft Excel Remote Code Execution Vulnerability

18. 7.8CVE-2024-49028EPSS 0.8%2024-11-12

    Microsoft Excel Remote Code Execution Vulnerability

19. 7.8CVE-2024-49027EPSS 0.8%2024-11-12

    Microsoft Excel Remote Code Execution Vulnerability

20. 7.8CVE-2024-49026EPSS 1.0%2024-11-12

    Microsoft Excel Remote Code Execution Vulnerability

21. 7.8CVE-2024-49021EPSS 0.8%2024-11-12

    Microsoft SQL Server Remote Code Execution Vulnerability

22. 7.8CVE-2024-49019EPSS 2.0%2024-11-12

    Active Directory Certificate Services Elevation of Privilege Vulnerability

23. 8.8CVE-2024-49018EPSS 1.6%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

24. 8.8CVE-2024-49017EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

25. 8.8CVE-2024-49016EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

26. 8.8CVE-2024-49015EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

27. 8.8CVE-2024-49014EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

28. 8.8CVE-2024-49013EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

29. 8.8CVE-2024-49012EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

30. 8.8CVE-2024-49011EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

31. 8.8CVE-2024-49010EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

32. 8.8CVE-2024-49009EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

33. 8.8CVE-2024-49008EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

34. 8.8CVE-2024-49007EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

35. 8.8CVE-2024-49006EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

36. 8.8CVE-2024-49005EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

37. 8.8CVE-2024-49004EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

38. 8.8CVE-2024-49003EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

39. 8.8CVE-2024-49002EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

40. 8.8CVE-2024-49001EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

41. 8.8CVE-2024-49000EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

42. 8.8CVE-2024-48999EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

43. 8.8CVE-2024-48998EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

44. 8.8CVE-2024-48997EPSS 1.5%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

45. 8.8CVE-2024-48996EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

46. 8.8CVE-2024-48995EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

47. 8.8CVE-2024-48994EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

48. 8.8CVE-2024-48993EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

49. 7.8CVE-2024-43646EPSS 0.5%2024-11-12

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

50. 7.8CVE-2024-43645EPSS 0.5%2024-11-12

    Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

51. 7.8CVE-2024-43644EPSS 0.5%2024-11-12

    Windows Client-Side Caching Elevation of Privilege Vulnerability

52. 6.8CVE-2024-43643EPSS 0.7%2024-11-12

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

53. 7.5CVE-2024-43642EPSS 63%2024-11-12

    Windows SMB Denial of Service Vulnerability

54. 7.8CVE-2024-43641EPSS 0.7%2024-11-12

    Windows Registry Elevation of Privilege Vulnerability

55. 7.8CVE-2024-43640EPSS 0.6%2024-11-12

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

56. 9.8CVE-2024-43639EPSS 8.9%2024-11-12

    Windows KDC Proxy Remote Code Execution Vulnerability

57. 6.8CVE-2024-43638EPSS 0.7%2024-11-12

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

58. 6.8CVE-2024-43637EPSS 0.7%2024-11-12

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

59. 7.8CVE-2024-43636EPSS 0.7%2024-11-12

    Win32k Elevation of Privilege Vulnerability

60. 8.8CVE-2024-43635EPSS 1.7%2024-11-12

    Windows Telephony Service Remote Code Execution Vulnerability

61. 6.8CVE-2024-43634EPSS 0.7%2024-11-12

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

62. 6.5CVE-2024-43633EPSS 0.6%2024-11-12

    Windows Hyper-V Denial of Service Vulnerability

63. 7.8CVE-2024-43631EPSS 0.5%2024-11-12

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

64. 7.8CVE-2024-43630EPSS 3.8%2024-11-12

    Windows Kernel Elevation of Privilege Vulnerability

65. 7.8CVE-2024-43629EPSS 4.4%2024-11-12

    Windows DWM Core Library Elevation of Privilege Vulnerability

66. 8.8CVE-2024-43628EPSS 1.7%2024-11-12

    Windows Telephony Service Remote Code Execution Vulnerability

67. 8.8CVE-2024-43627EPSS 1.7%2024-11-12

    Windows Telephony Service Remote Code Execution Vulnerability

68. 7.8CVE-2024-43626EPSS 0.7%2024-11-12

    Windows Telephony Service Elevation of Privilege Vulnerability

69. 8.1CVE-2024-43625EPSS 0.7%2024-11-12

    Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

70. 8.8CVE-2024-43624EPSS 1.8%2024-11-12

    Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

71. 7.8CVE-2024-43623EPSS 4.5%2024-11-12

    Windows NT OS Kernel Elevation of Privilege Vulnerability

72. 8.8CVE-2024-43622EPSS 1.6%2024-11-12

    Windows Telephony Service Remote Code Execution Vulnerability

73. 8.8CVE-2024-43621EPSS 1.6%2024-11-12

    Windows Telephony Service Remote Code Execution Vulnerability

74. 8.8CVE-2024-43620EPSS 1.6%2024-11-12

    Windows Telephony Service Remote Code Execution Vulnerability

75. 9.9CVE-2024-43602EPSS 2.3%2024-11-12

    Azure CycleCloud Remote Code Execution Vulnerability

76. 8.1CVE-2024-43598EPSS 1.4%2024-11-12

    LightGBM Remote Code Execution Vulnerability

77. 7.8CVE-2024-43530EPSS 0.5%2024-11-12

    Windows Update Stack Elevation of Privilege Vulnerability

78. 7.5CVE-2024-43499EPSS 2.6%2024-11-12

    .NET and Visual Studio Denial of Service Vulnerability

79. 9.8CVE-2024-43498EPSS 3.6%2024-11-12

    .NET and Visual Studio Remote Code Execution Vulnerability

80. 8.8CVE-2024-43462EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

81. 8.8CVE-2024-43459EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

82. 7.5CVE-2024-43452EPSS 30%2024-11-12

    Windows Registry Elevation of Privilege Vulnerability

83. 6.5CVE-2024-43451KEVEPSS 84%2024-11-12

    NTLM Hash Disclosure Spoofing Vulnerability

84. 7.5CVE-2024-43450EPSS 0.6%2024-11-12

    Windows DNS Spoofing Vulnerability

85. 6.8CVE-2024-43449EPSS 0.7%2024-11-12

    Windows USB Video Class System Driver Elevation of Privilege Vulnerability

86. 8.1CVE-2024-43447EPSS 1.5%2024-11-12

    Windows SMBv3 Server Remote Code Execution Vulnerability

87. 5.9CVE-2024-38264EPSS 1.3%2024-11-12

    Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability

88. 8.8CVE-2024-38255EPSS 1.7%2024-11-12

    SQL Server Native Client Remote Code Execution Vulnerability

89. 5.5CVE-2024-38203EPSS 0.7%2024-11-12

    Windows Package Library Manager Information Disclosure Vulnerability