Published on: 11 December 2024
Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. The list of security updates can be found at:
This link will open in a new windowhttps://msrc.microsoft.com/update-guide/releaseNote/2024-Dec
Reports indicated that the elevation of privilege vulnerability (CVE-2024-49138) in Microsoft Windows and Server is being exploited in the wild, with its technical details publicly disclosed. In addition, multiple remote code execution vulnerabilities (CVE-2024-49112, CVE-2024-49117 and CVE-2024-49122) in Microsoft Windows and Server are also at a high risk of exploitation. System administrators and users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure or spoofing on an affected system.
Patches for affected systems are available from the Windows Update / Microsoft Update Catalog. System administrators and users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.
