Start with Identity
Subscribe
Identity CVE · LDAP

CVE-2024-49112Windows LDAP critical remote-code-execution class flaw

critical · CVSS 9.8
Product: Windows LDAPVendor: MicrosoftDisclosed: 2024-12-10Status: PatchedNVD ↗

What broke

CVE-2024-49112 is the critical Windows LDAP flaw that shipped next to LDAPNightmare. CVSS 9.8. Same December 2024 patch train. Public discussion has treated it as RCE-class on the LDAP stack.

Why it matters

A critical LDAP bug on a DC is a domain-compromise candidate, not a "directory availability" ticket. Take it with 49113, not after.

What to do

  • Verify the December 2024 LDAP updates by KBN, not by "we patched that month."
  • Keep LDAPS-only where you can, and do not let DCs chase LDAP referrals to untrusted hosts.

Sources

Related identity CVEs

Know a primary source we should add, or a patch status that has changed? Email [email protected]. See all briefs in the identity CVE catalog, or volunteer as a CVE Analyst.
Compiled from vendor advisories, NVD, CISA KEV, and public research. CVSS figures can disagree across NVD and the CNA. Confirm affected versions against the vendor advisory before you patch. Independent, community-driven analysis. See the disclaimer.