CVEs have been published or revised in the Security Update Guide November 18, 2024 These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide: CVE-2024-43639 · Title: Windows KDC Proxy Remote Code Execution Vulnerability · Version: 1.2 · Reason for revision: Added FAQs to explain the mitigating circumstances for this vulnerability. KPSSVC is an additional feature Microsoft has been providing since Windows Server 2012. If customers do not have it configured in their environment, then this vulnerability is not exploitable. This is an informational change only. · Originally released: November 12, 2024 · Last updated: November 18, 2024 · Aggregate CVE severity rating: Critical Customer action required: Yes
November 21, 2024—KB5046740 (OS Build 26100.2454) Preview Windows 11 version 24H2, all editions https://support.microsoft.com/en-us...-preview-2040f716-b719-482a-8aff-f7f02c79b147 ----- November 21, 2024—KB5046714 (OS Build 19045.518 ) Preview Windows 10, version 22H2, all editions https://support.microsoft.com/en-us...-preview-30ea2771-f721-4a42-b899-469ba20e5561
CVEs have been published or revised in the Security Update Guide November 22, 2024 These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide: CVE-2024-11395 · Title: Chromium: CVE-2024-11395 Type Confusion in V8 · Version: 1.0 · Reason for revision: Information published. · Originally released: November 21, 2024 · Last updated: November 21, 2024 · Aggregate CVE severity rating: · Customer action required: Yes CVE-2024-49054 · Title: Microsoft Edge (Chromium-based) Spoofing Vulnerability · Version: 1.0 · Reason for revision: Information published. · Originally released: November 21, 2024 · Last updated: November 21, 2024 · Aggregate CVE severity rating: Low · Customer action required: Yes