CVE intelligence

CVE-2024-49123

Vulnerability intelligence

Published Dec 12, 2024Sources checked Oct 3, 2026

8.1HIGHCVSS out of 10

What this means

Review the available evidence

CVE-2024-49123 and is rated High severity with a CVSS score of 8.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Install KB5048661. Install KB5048654. Install KB5048800. Install KB5048652. Install KB5048685. Install KB5048667. Install KB5048794. Install KB5048653. Install KB5095051.

Vendor-listed releases

10.0.17763.6659
10.0.20348.2966
10.0.20348.2908
10.0.19044.5247
10.0.22621.4602
10.0.19045.5247
10.0.26100.2605
10.0.26100.2528
10.0.22631.4602
10.0.25398.1308
10.0.28000.2269

CISA KEVNot listedBased on the latest collected catalog

EPSS1.1%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2024-49123?

Windows Remote Desktop Services Remote Code Execution Vulnerability