Home › Microsoft Patch Tuesday › November 2024

Microsoft Patch Tuesday, November 2024

·

Microsoft's November 2024 security release, published November 12, 2024: 35 updates fixing 78 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 1 CVE from this release is on the Senserva hot list today (as of 2026-09-18), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.
35
Updates (KBs)
78
CVEs fixed
2
On the CISA KEV list
1
Ransomware-linked
9
Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2024-49039Windows Task Scheduler Elevation of Privilege VulnerabilityCVSS 8.8ExploitedRansomware Hot now
CVE-2024-43451NTLM Hash Disclosure Spoofing VulnerabilityCVSS 6.5Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2024-43639Windows KDC Proxy Remote Code Execution VulnerabilityCVSS 9.8
CVE-2024-43627Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43628Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43620Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43621Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43622Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43624Windows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityCVSS 8.8
CVE-2024-43635Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-38255SQL Server Native Client Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43459SQL Server Native Client Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-43462SQL Server Native Client Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-48994SQL Server Native Client Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows 10 Version 1809 for 32-bit Systems (13)Windows 10 Version 1809 for x64-based Systems (12)Windows Server 2019 (12)Microsoft SQL Server 2017 for x64-based Systems (GDR) (9)Microsoft SQL Server 2019 for x64-based Systems (GDR) (9)Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) (9)Windows Server 2022 (4)Windows Server 2022 (Server Core installation) (4)Windows 10 Version 21H2 for 32-bit Systems (4)Microsoft Office 2019 for 32-bit editions (4)

Every update in this release

All 34 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5046616 Exploited RansomwareCritical9.837Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit SystemsSupport · Catalog
KB5046698 Exploited RansomwareCritical9.837Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit SystemsSupport · Catalog
KB5046615 Exploited RansomwareCritical9.831Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046618 Exploited RansomwareCritical9.835Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046617 Exploited RansomwareCritical9.833Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046696 Exploited RansomwareCritical9.836Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046612 Exploited RansomwareCritical9.827Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046682 ExploitedCritical9.822Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046613 Exploited RansomwareHigh8.831Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit SystemsSupport · Catalog
KB5046633 Exploited RansomwareHigh8.834Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit SystemsSupport · Catalog
KB5046665 Exploited RansomwareHigh8.823Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046661 ExploitedHigh8.819Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046639 ExploitedHigh8.819Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046687 ExploitedHigh8.820Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046705 ExploitedHigh8.820Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046630 ExploitedMedium6.51Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809 for 32-bit SystemsSupport · Catalog
KB5046697Critical9.820Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5046857High8.831Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046859High8.831Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046855High8.830Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046856High8.830Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046858High8.831Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046860High8.831Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046062High8.81Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5002648High7.81Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office Online ServerSupport · Catalog
KB5002653High7.85Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft Office Online ServerSupport · Catalog
KB5002642High7.82Microsoft Office LTSC for Mac 2024, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editionsSupport · Catalog
KB5046861High7.82Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5046862High7.82Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5049233High7.51Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 23Support · Catalog
KB5002619High7.51Microsoft Office LTSC for Mac 2024, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editionsSupport · Catalog
KB5002654High1Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002650High1Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002651High1Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription EditionSupport · Catalog
Take this release to your AI

Composed from the November 2024 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

See every Patch Tuesday, all months  |  The live Microsoft patch tracker

← October 2024December 2024 →

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it
Start my free patch auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.