Detections
Analytics
CVE-2024-49039
high
Description
Windows Task Scheduler Elevation of Privilege Vulnerability
From the Tenable Blog
Microsoft’s November 2024 Patch Tuesday Addresses 87 CVEs (CVE-2024-43451, CVE-2024-49039)
Published: 2024-11-12
Microsoft addresses 87 CVEs and one advisory (ADV240001) in its November 2024 Patch Tuesday release, with four critical vulnerabilities and four zero-day vulnerabilities, including two that were exploited in the wild.
References
https://www.tenable.com/blog/microsoft-patch-tuesday-2024-year-in-review
https://www.helpnetsecurity.com/2024/11/26/romcom-backdoor-cve-2024-9680-cve-2024-49039/
https://thehackernews.com/2024/11/romcom-exploits-zero-day-firefox-and.html
https://securityaffairs.com/170851/hacking/microsoft-patch-tuesday-november-2024.html
https://www.securityweek.com/microsoft-confirms-zero-day-exploitation-of-task-scheduler-flaw/
https://www.helpnetsecurity.com/2024/11/12/cve-2024-43451-cve-2024-49039/
https://www.darkreading.com/cloud-security/2-zero-day-bugs-microsoft-nov-update-active-exploit
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49039