SenPatch tracker / CVE reference / CVE-2024-49040
CVE-2024-49040
High severity Microsoft vulnerability, CVSS 7.5. Fixed by 1 Microsoft security update.
Risk summary
Exploitation and severity
Not in the CISA KEV catalog. EPSS exploit probability 7.8%. CVSS 7.5 (High).
This CVE is among the lower half of tracked Microsoft CVEs by EPSS exploit probability.
What to do
Moderate priority: schedule it in your normal patch cycle. In Intune or Defender, confirm whether the fixing update KB5049233 are installed across the affected products. Senserva does this automatically across your tenant and flags every missing patch.
Official patch for CVE-2024-49040
Apply the Microsoft security update below to fix CVE-2024-49040. Each KB page links to the Microsoft Update Catalog download for every affected product.
Affected products
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 14
Authoritative references
Want every Microsoft CVE and the patches that fix it, ranked by real-world risk? See the Microsoft Patch Tracker.