What is the severity of CVE-2024-49093?

CVE-2024-49093 is rated as a critical elevation of privilege vulnerability in the Windows Resilient File System.

How do I fix CVE-2024-49093?

To fix CVE-2024-49093, apply the latest security updates provided by Microsoft for affected Windows versions.

Which versions of Windows are affected by CVE-2024-49093?

CVE-2024-49093 affects Windows 11 version 24H2 and Windows Server 2025 in specific configurations.

What kind of exploit does CVE-2024-49093 enable?

CVE-2024-49093 enables attackers to elevate their privileges on a compromised system.

Is there a workaround for CVE-2024-49093?

Currently, there are no known workarounds for CVE-2024-49093, so applying the patch is the recommended action.

Vulnerability/
CVE-2024-49093

high

8.8

CWE

681

10/12/2024

11/3/2025

CVE-2024-49093: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

First published: Tue Dec 10 2024(Updated: )

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows Server 2025		fix available externally fix available externally
Microsoft Windows Server 2025		fix available externally fix available externally
Windows 11	=24H2	fix available externally fix available externally
Windows 11	=24H2	fix available externally fix available externally
Windows 11	<10.0.26100.2605
Microsoft Windows Server 2025	<10.0.26100.2605

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-49093?
CVE-2024-49093 is rated as a critical elevation of privilege vulnerability in the Windows Resilient File System.
How do I fix CVE-2024-49093?
To fix CVE-2024-49093, apply the latest security updates provided by Microsoft for affected Windows versions.
Which versions of Windows are affected by CVE-2024-49093?
CVE-2024-49093 affects Windows 11 version 24H2 and Windows Server 2025 in specific configurations.
What kind of exploit does CVE-2024-49093 enable?
CVE-2024-49093 enables attackers to elevate their privileges on a compromised system.
Is there a workaround for CVE-2024-49093?
Currently, there are no known workarounds for CVE-2024-49093, so applying the patch is the recommended action.

collector/msrc-cve
source/Microsoft
agent/title
agent/type
agent/first-publish-date
agent/description
collector/msrc
collector/the-register
source/The Register
alias/CVE-2024-49138
alias/CVE-2024-49112
alias/CVE-2024-49093
alias/CVE-2024-49088
alias/CVE-2024-49090
alias/CVE-2024-49114
alias/CVE-2024-49070
alias/CVE-2024-49122
agent/references
agent/author
agent/severity
agent/weakness
agent/event
agent/software-canonical-lookup
agent/trending
agent/source
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
vendor/microsoft
canonical/microsoft windows server 2025
canonical/windows 11
version/windows 11/24h2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.