November’s (2024) Patch Tuesday Damage Report

** 2 Weeks After Patch Tuesday **

Seemingly nothing systemic reported for this month’s updates. Just onesie, twosie reports of miscellaneous disruptions. Nothing catastrophic, but annoying to be sure.

Y’all still waiting to patch?

Server 2022

• Standard OS print drivers and fslogix drivers causing instability with respective services

Server 2016

• Programs with unknown/no publisher requiring User Account Control (UAC) prompts not loading/blocked until cryptsvc service is restarted 

Windows 11

• Users locked up with minimal OS interaction, requires restart to alleviate

Office 2019

• Miscellaneous errors opening files from network shares, email reply all, persistent macro errors – Repair causes “access denied to installation source” error

---

** 72 Hours After Patch Tuesday **

Plus a few hours… 😬

Yesterday was a confluence of crazy (personally and at trackd) and posting this completely slipped my mind! My apologies, patchers. Let’s dig in…

Thankfully, my delayed posting wasn’t too critical as it looks like mostly just updates taking longer than usual and some fail to download. Some minor disruptions to mail flows and possibly SMB network shares with the German language pack.

Exchange Server 2019

• Mail flow rules not working (r/sysadmin, microsoft)

Server 2016

• Server Message Block (SMB) network share inaccessible with German language pack

---

I’m back on the mainland of the United States, so let’s dig in on November’s Patch Tuesday more punctually than last month!

89 vulnerabilities are fixed with this month’s update with 4 Criticals, 3 Zero Days (2 with Functional and 1 with Proof of Concept exploit code maturity), two of these are actively being exploited.

Zero Days:

• CVE-2024-49040 – Microsoft Exchange Server Spoofing 
• CVE-2024-49039 – Windows Task Scheduler Elevation of Privilege
• CVE-2024-43451 – NTLM Hash Disclosure Spoofing