Windows December 2024 Security Patches Audit Script

This PowerShell script checks whether the required KB updates for specific security vulnerabilities (CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122) announced in the December 2024 Microsoft security bulletins are installed on your system. The script detects the operating system version to determine which patches need to be applied and first displays the detected operating system on the screen.

Features

• CVE Check:
  Checks the relevant KB updates for the following CVEs:

  • CVE-2024-49124
  • CVE-2024-49117
  • CVE-2024-49118
  • CVE-2024-49122

• Operating System Detection:
  The script uses Win32_OperatingSystem information to detect your operating system and version number and displays on the screen:

  Detected operating system:

  in this format.

• Update Check:
  It checks the KB updates installed on the system via the Get-HotFix command. If a suitable KB is found, it informs that the CVE has been remediated.

Requirements

• Windows 10, Windows 11, or relevant Windows Server versions.
• PowerShell 5.1 or later.
• Appropriate Execution Policy settings (see section below).

Usage

1. Clone this repository to your computer or download the ps1 script.
2. Open PowerShell as Administrator.
3. Navigate to the directory containing the script: powershell cd C:\path\to\script
4. If necessary, adjust the Execution Policy.
5. Run the script: .\MS-2024-Dec-Control.ps1

The script will detect your operating system and display it on the screen, then check whether the relevant KBs for the CVEs are installed and show the results in color.

Execution Policy Settings

If you encounter the following error when running the script:

-File cannot be loaded because running scripts is disabled on this system...

You can use one of the following methods:

• Temporary Bypass

• Set-ExecutionPolicy Bypass -Scope Process .\MS-2024-Dec-Control.ps1

• Making it RemoteSigned Permanently: (RemoteSigned: Allows locally created scripts to run. Scripts downloaded from remote sources must be signed or have their block removed with Unblock-File.)

• Set-ExecutionPolicy RemoteSigned .\MS-2024-Dec-Control.ps1

• Remove Script Block (For Remotely Downloaded Scripts):

• Unblock-File .\MS-2024-Dec-Control.ps1

Example Output

Detected operating system: Microsoft Windows 10 Enterprise 10.0.19045 Update KB5048652 addressing CVE-2024-49124 is INSTALLED ON THE SYSTEM. Update KB5048685 addressing CVE-2024-49117 is NOT FOUND ON THE SYSTEM! Update KB5048667 addressing CVE-2024-49118 is INSTALLED ON THE SYSTEM. Update KB5048703 addressing CVE-2024-49122 is NOT FOUND ON THE SYSTEM!

##Disclaimer

•	This script is for demonstration purposes. It is recommended to verify the CVE-KB mappings from Microsoft's official documentation in real deployments.
•	The operating system version detection is done with a simplified logic. You may need to customize it for your enterprise environment.
•	Test the script before using it on production systems.