Microsoft holds last Patch Tuesday of the year with 72 gifts for admins

Microsoft issued 72 fixes this Patch Tuesday, including an actively exploited Windows Common Log File System Driver elevation-of-privilege (CVE-2024-49138) affecting Windows 10/11 and Server 2019+, and a high-severity LDAP remote code execution (CVE-2024-49112, CVSS 9.8) described as difficult to exploit; several other elevation-of-privilege and RCE flaws were flagged as likely exploitation targets. Adobe released 167 fixes, with 91 for Adobe Experience Manager and multiple critical RCE and access-control flaws across Connect, Media Encoder, Substance 3D products, and others, and administrators are advised to prioritize patching and apply workarounds where available.