KB5048667 is the cumulative update for Windows Server 2025 version 24H2. It was released on 10 December, 2024.
Salient points
- KB5048667 supersedes November 2024 cumulative update KB5046617.
- KB5048667 also includes changes that are part of the preview update KB5046740 released on 21 November 2024. If you did not install the preview update KB5046740, you can skip its installation. Installing KB5048667 will take care of the preview update.
- KB5048667 corresponds to server build 26100.2605.
- Windows Server 2025 is impacted by a zero-day vulnerability CVE-2024-49132.
- 58 security vulnerabilities have been reported in December security bulletin for Windows Server 2025.
- 17 of these 58 vulnerabilities have CRITICAL severity.
- There is a CRITICAL vulnerability with CVSS score of 9.8. CVE-2024-49112 impacts Windows Lightweight Directory Access Protocol (LDAP) and could lead to Remote Code Execution attacks.
- Windows Server 2025 is impacted by a zero-day vulnerability CVE-2024-49132. This is a ‘Remote Code Execution’ vulnerability impacting the Remote Desktop Services.
- The Servicing Stack Update corresponding to KB5048667 is KB5049685 (26100.2592). It is in-built in the main cumulative update. Separate installation of the SSU or Servicing Stack is not needed.
Download KB5048667
You may download the offline installer file for KB5048667 from the catalog site link shared below:
Upon installation of KB5048667, the server would restart.
Changelog – KB5048667
The following changes or improvements are part of KB5048667 for Windows Server 2025:
- This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release.
- This update addresses security issues for your Windows operating system.
Known issues
Microsoft has confirmed a known issue affecting Roblox.
Issue description – We’re aware of an issue where players on Arm devices are unable to download and play Roblox via the Microsoft Store on Windows.
Workaround – Players on Arm devices can play Roblox by downloading the title directly from www.Roblox.com.
Rajesh Dhawan is a technology professional who loves to write about Cyber-security events and stories, Cloud computing and Microsoft technologies. He loves to break complex problems into manageable chunks of meaningful information.