Microsoft Fixes 72 Vulnerabilities, Including Exploited Windows CLFS Privilege Escalation
Active Exploitation · 2 sources · Updated 4mo ago · First seen Dec 12, 2024
Microsoft released its December security updates to address 72 vulnerabilities across Windows, Office, SharePoint, Microsoft 365 Apps, System Center Operations Manager, and related platforms, including 31 remote code execution flaws. The most severe issues affect Windows Remote Desktop Services and Client, Windows LDAP, Hyper-V, Microsoft Message Queuing, and LSASS, with multiple bugs rated critical because they could allow remote compromise of affected systems.
The update bundle also fixes CVE-2024-49138, a privilege-escalation flaw in the Windows Common Log File System Driver (CLFS) that was reported as actively exploited in the wild and could let an authenticated attacker gain SYSTEM privileges. Microsoft published the release through its Security Update Guide and Mariner release notes, while defenders were urged to prioritize rapid deployment of the December patches to reduce exposure to both active exploitation and high-impact remote code execution risks.
