[Zero-day] Microsoft's December 2024 Patch Tuesday fixes 1 zero-day vulnerability

Hello folks,

This is to notify you that 1 zero-day vulnerability have been fixed in this month's Patch Tuesday. Below, you can find the CVE and Patch ID details.

VULNERABLE COMPONENT	IMPACT	CVE ID
Windows Common Log File System Driver	Elevation of Privilege	CVE-2024-49138

This patch can be deployed to your endpoints seamlessly, using one of the following methods:

Note: Kindly ensure that a Vulnerability DB sync has been initiated and completed successfully before proceeding.

Method 1:

a. On the console, navigate to Patches > Missing Patches and create a filter.

b. The criterion for the filter should be: CVE ID - equal - <CVE ID of the respective vulnerability>.

c. Once done, the missing patches in your network, corresponding to the particular CVE ID will be listed below.

Method 2:

a. Navigate to Patches > Top-Priority Patches.

b. Select the required patches via the Patch ID.

c. Click on Install/Publish Patches to deploy them.

Here is a list of the patch IDs corresponding to the vulnerabilities:

CVE-2024-49138

PATCH_ID	BULLETIN_ID	PATCH_DESCRIPTION
40270	MS24-DEC2	2024-12 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5048676) (ESU) (CVE-2024-49138)
40271	MS24-DEC2	2024-12 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5048744) (ESU) (CVE-2024-49138)
40272	MS24-DEC2	2024-12 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5048744) (ESU) (CVE-2024-49138)
40273	MS24-DEC6	2024-12 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5048695) (ESU) (CVE-2024-49138)
40274	MS24-DEC6	2024-12 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB5048710) (ESU) (CVE-2024-49138)
40275	MS24-DEC6	2024-12 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB5048710) (ESU) (CVE-2024-49138)
40276	MS24-DEC6	2024-12 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB5048735) (ESU) (CVE-2024-49138)
40277	MS24-DEC6	2024-12 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB5048699) (ESU) (CVE-2024-49138)
40278	MS24-DEC3	2024-12 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5048685) (CVE-2024-49138)
40280	MS24-DEC3	2024-12 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5048685) (CVE-2024-49138)
40282	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5048652) (CVE-2024-49138)
40283	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5048652) (CVE-2024-49138)
40284	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5048652) (CVE-2024-49138)
40285	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5048652) (CVE-2024-49138)
40286	MS24-DEC3	2024-12 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5048654) (CVE-2024-49138)
40287	MS24-DEC3	2024-12 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5048661) (CVE-2024-49138)
40288	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5048661) (CVE-2024-49138)
40289	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5048661) (CVE-2024-49138)
40290	MS24-DEC3	2024-12 Cumulative Update for Microsoft server operating system version 24H2 for x64-based Systems (KB5048667)
40291	MS24-DEC3	2024-12 Cumulative Update for Windows 11 Version 24H2 for x64-based Systems (KB5048667) (CVE-2024-49138)
40293	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5048671) (CVE-2024-49138)
40294	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5048671) (CVE-2024-49138)
40295	MS24-DEC3	2024-12 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5048671) (CVE-2024-49138)
40296	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5048703) (CVE-2024-49138)
40297	MS24-DEC3	2024-12 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5048703) (CVE-2024-49138