SECUFOCUSNOW
Home›CVE index›CVE-2024-49039
CISA KEV · Known exploitedHigh

CVE-2024-49039

Microsoft Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809

CVE-2024-49039 affects Microsoft Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

CVSS
8.8
EPSS
13.7%
96.1% percentile
CISA KEV
Listed
Published
2024.11.13
PRIORITY ASSESSMENT

Immediate review

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.

Known exploitationConfirmed by CISA KEV
Exploit probability13.7%
Technical severityCVSS 8.8

Vulnerability overview

CVE-2024-49039 affects Microsoft Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

Affected product and versions

Product
Microsoft Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809
Affected versions
>= 10.0.26100.0 < 10.0.26100.2314, >= 10.0.17763.0 < 10.0.17763.6532, >= 10.0.20348.0 < 10.0.20348.2849, >= 10.0.19043.0 < 10.0.19044.5131, >= 10.0.22621.0 < 10.0.22621.4460, >= 10.0.19045.0 < 10.0.19045.5131, >= 10.0.22631.0 < 10.0.22631.4460, >= 10.0.25398.0 < 10.0.25398.1251, >= 10.0.10240.0 < 10.0.10240.20826, >= 10.0.14393.0 < 10.0.14393.7515
Fixed versions
10.0.10240.20826, 10.0.14393.7515, 10.0.17763.6532, 10.0.19044.5131, 10.0.19045.5131, 10.0.22621.4460, 10.0.22631.4460, 10.0.26100.2314, 10.0.20348.2849, 10.0.25398.1251

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Due date: 2024.12.03
  1. 1
    Identify

    Confirm that Microsoft Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809 and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE
CWE-287
KEV added
2024.11.12
Ransomware use
확인됨