1
      MORE+
      【漏洞通报】CNNVD关于微软多个安全漏洞的通报
      近日，微软官方发布了多个安全漏洞的公告，其中微软产品本身漏洞75个，影响到微软产品的其他厂商漏洞1个。微软Microsoft Windows、Microsoft Windows Kernel Mode Drivers、Microsoft DNS Server、Microsoft Windows IP Routing Management Snapin等多个产品和系统受漏洞影响。目前，微软官方已经发布了漏洞修复补丁，建议用户及时确认是否受到漏洞影响，尽快采取修补措施。一、 漏洞介绍2024年12月10日，微软发布了2024年12月份安全更新，共76个漏洞的补丁程序，CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows和Windows组件、Microsoft Windows Kernel Mode Drivers、Microsoft DNS Server、Microsoft Windows IP Routing Management Snapin、Microsoft Windows Routing and Remote Access Service、Microsoft Windows Resilient File System等。CNNVD对其危害等级进行了评价，其中超危漏洞1个，高危漏洞35个，中危漏洞40个。微软多个产品和系统版本受漏洞影响，具体影响范围可访问微软官方网站查询：https://portal.msrc.microsoft.com/zh-cn/security-guidance二、漏洞详情此次更新共76个漏洞的补丁程序，包括71个新增漏洞的补丁程序、4个更新漏洞的补丁程序和1个影响微软产品的其他厂商漏洞的补丁程序。 此次更新共包括71个新增漏洞的补丁程序，其中超危漏洞1个，高危漏洞30个，中危漏洞40个。序号漏洞名称CNNVD编号CVE编号危害等级官方链接1Microsoft Lightweight Directory Access Protocol 安全漏洞CNNVD-202412-1333CVE-2024-49112超危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-491122Microsoft Office 安全漏洞CNNVD-202412-1271CVE-2024-43600高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-436003Microsoft Windows Task Scheduler 安全漏洞CNNVD-202412-1284CVE-2024-49072高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-490724Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1288CVE-2024-49075高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-490755Microsoft Input Method Editor 安全漏洞CNNVD-202412-1301CVE-2024-49079高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-490796Microsoft Windows IP Routing Management Snapin 安全漏洞CNNVD-202412-1306CVE-2024-49080高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-490807Microsoft Windows Kernel 安全漏洞CNNVD-202412-1158CVE-2024-49084高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-490848Microsoft Windows Common Log File System Driver 安全漏洞CNNVD-202412-1315CVE-2024-49088高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-490889Microsoft Windows PrintWorkflowUserSvc 安全漏洞CNNVD-202412-1323CVE-2024-49095高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909510Microsoft Message Queuing 安全漏洞CNNVD-202412-1189CVE-2024-49096高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909611Microsoft Windows PrintWorkflowUserSvc 安全漏洞CNNVD-202412-1192CVE-2024-49097高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909712Microsoft Windows Routing and Remote Access Service 安全漏洞CNNVD-202412-1207CVE-2024-49102高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910213Microsoft Remote Desktop Client 安全漏洞CNNVD-202412-1362CVE-2024-49105高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910514Microsoft WmsRepair Service 安全漏洞CNNVD-202412-1220CVE-2024-49107高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910715Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1223CVE-2024-49108高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910816Microsoft Lightweight Directory Access Protocol 安全漏洞CNNVD-202412-1336CVE-2024-49113高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911317Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞CNNVD-202412-1340CVE-2024-49114高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911418Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1342CVE-2024-49116高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911619Microsoft Message Queuing 安全漏洞CNNVD-202412-1345CVE-2024-49118高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911820Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1236CVE-2024-49119高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911921Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1238CVE-2024-49120高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912022Microsoft Lightweight Directory Access Protocol 安全漏洞CNNVD-202412-1241CVE-2024-49121高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912123Microsoft Message Queuing 安全漏洞CNNVD-202412-1246CVE-2024-49122高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912224Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1244CVE-2024-49123高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912325Microsoft Lightweight Directory Access Protocol 安全漏洞CNNVD-202412-1250CVE-2024-49124高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912426Microsoft Windows Routing and Remote Access Service 安全漏洞CNNVD-202412-1252CVE-2024-49125高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912527Microsoft Lightweight Directory Access Protocol 安全漏洞CNNVD-202412-1349CVE-2024-49127高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912728Microsoft Windows Remote Desktop Gateway 安全漏洞CNNVD-202412-1260CVE-2024-49129高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912929Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1261CVE-2024-49132高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4913230Microsoft Windows Common Log File System Driver 安全漏洞CNNVD-202412-1357CVE-2024-49138高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4913831Microsoft Office 安全漏洞CNNVD-202412-1266CVE-2024-49142高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4914232Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1294CVE-2024-49077中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4907733Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1307CVE-2024-49081中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908134Microsoft Windows File Explorer 安全漏洞CNNVD-202412-1310CVE-2024-49082中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908235Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1317CVE-2024-49083中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908336Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1200CVE-2024-49099中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909937Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1203CVE-2024-49101中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910138Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1327CVE-2024-49109中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910939Microsoft System Center Operations Manager 安全漏洞CNNVD-202412-1187CVE-2024-43594中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4359440Microsoft Defender 安全漏洞CNNVD-202412-1131CVE-2024-49057中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4905741Microsoft Office 安全漏洞CNNVD-202412-1133CVE-2024-49059中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4905942Microsoft Office Sharepoint Server 安全漏洞CNNVD-202412-1276CVE-2024-49062中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4906243Microsoft Muzic 安全漏洞CNNVD-202412-1278CVE-2024-49063中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4906344Microsoft SharePoint 安全漏洞CNNVD-202412-1138CVE-2024-49064中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4906445Microsoft Office 安全漏洞CNNVD-202412-1280CVE-2024-49065中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4906546Microsoft SharePoint 安全漏洞CNNVD-202412-1140CVE-2024-49068中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4906847Microsoft Excel 安全漏洞CNNVD-202412-1145CVE-2024-49069中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4906948Microsoft SharePoint 安全漏洞CNNVD-202412-1147CVE-2024-49070中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4907049Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1152CVE-2024-49073中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4907350Microsoft Windows Kernel Mode Drivers 安全漏洞CNNVD-202412-1154CVE-2024-49074中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4907451Microsoft Windows Virtualization-Based Security (VBS) Enclave 安全漏洞CNNVD-202412-1290CVE-2024-49076中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4907652Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1298CVE-2024-49078中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4907853Microsoft Windows Routing and Remote Access Service 安全漏洞CNNVD-202412-1162CVE-2024-49085中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908554Microsoft Windows Routing and Remote Access Service 安全漏洞CNNVD-202412-1165CVE-2024-49086中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908655Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1168CVE-2024-49087中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908756Microsoft Windows Routing and Remote Access Service 安全漏洞CNNVD-202412-1172CVE-2024-49089中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4908957Microsoft Windows Common Log File System Driver 安全漏洞CNNVD-202412-1320CVE-2024-49090中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909058Microsoft DNS Server 安全漏洞CNNVD-202412-1174CVE-2024-49091中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909159Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1179CVE-2024-49092中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909260Microsoft Windows Resilient File System 安全漏洞CNNVD-202412-1181CVE-2024-49093中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909361Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1184CVE-2024-49094中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909462Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1197CVE-2024-49098中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4909863Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1212CVE-2024-49103中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910364Microsoft Windows Routing and Remote Access Service 安全漏洞CNNVD-202412-1214CVE-2024-49104中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910465Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1217CVE-2024-49106中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4910666Microsoft Windows Mobile Broadband Driver 安全漏洞CNNVD-202412-1330CVE-2024-49110中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911067Microsoft Windows Wireless Wide Area Network Service 安全漏洞CNNVD-202412-1227CVE-2024-49111中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911168Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1229CVE-2024-49115中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911569Microsoft Hyper-V 安全漏洞CNNVD-202412-1232CVE-2024-49117中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4911770Microsoft Windows Local Security Authority Subsystem Service 安全漏洞CNNVD-202412-1256CVE-2024-49126中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4912671Microsoft Windows Remote Desktop Services 安全漏洞CNNVD-202412-1354CVE-2024-49128中危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49128 此次更新共包括4个更新漏洞的补丁程序，其中高危漏洞4个。序号漏洞名称CNNVD编号CVE编号危害等级官方链接1Microsoft QUIC 安全漏洞CNNVD-202310-806CVE-2023-36435高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-364352Microsoft QUIC 安全漏洞CNNVD-202310-726CVE-2023-38171高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-381713Microsoft Windows PowerShell 安全漏洞CNNVD-202407-770CVE-2024-38033高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-380334Microsoft Winlogon 安全漏洞CNNVD-202410-755CVE-2024-43583高危https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43583 此次更新共包括1个影响微软产品的其他厂商漏洞的补丁程序，其中高危漏洞1个。序号漏洞名称CNNVD编号CVE编号危害等级厂商官方链接1Apache HTTP/2 资源管理错误漏洞CNNVD-202310-667CVE-2023-44487高危Apache基金会https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q三、修复建议目前，微软官方已经发布补丁修复了上述漏洞，建议用户及时确认漏洞影响，尽快采取修补措施。微软官方补丁下载地址：https://msrc.microsoft.com/update-guide/en-us

      【2024-12-17】

      MORE+
      MORE+

      海南科技职业大学©2023

      地址：海南省海口市美兰区琼山大道18号海南科技职业大学,邮编：571126

      联系电话：0898-65969889 0898-65969887 0898-65959918

      E-MAIL：service@hvust.edu.cn

      琼ICP备号：15001472号-2

      琼公网安备：46010802000596号