CRITICAL Published December 12, 2024

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS base score
9.8 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-190
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

microsoft windows 10 1507 microsoft windows 10 1607 microsoft windows 10 1809 microsoft windows 10 21h2 microsoft windows 10 22h2 microsoft windows 11 22h2 microsoft windows 11 24h2 microsoft windows server 2008 microsoft windows server 2012 microsoft windows server 2016

References

View full NVD advisory →

More microsoft vulnerabilities

Published the same day

Related reading

← Back to CVE watch