Patch Tuesday - September 2024

🗓️ 10 Sep 2024 20:49:21Reported by Adam BarnettType

Microsoft addressing 79 vulnerabilities, in-the-wild exploitation, critical RCE patches, servicing stack rollback zero-day RCE, Mark-of-the-Web security feature bypas

Reporter	Title	Published	Views	Family All 1016
Vulnrichment	CVE-2024-43474 Microsoft SQL Server Information Disclosure Vulnerability	10 Sep 202416:53	–	vulnrichment
Vulnrichment	CVE-2024-43475 Microsoft Windows Admin Center Information Disclosure Vulnerability	10 Sep 202416:54	–	vulnrichment
Vulnrichment	CVE-2024-43476 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	10 Sep 202416:54	–	vulnrichment
Vulnrichment	CVE-2024-43479 Microsoft Power Automate Desktop Remote Code Execution Vulnerability	10 Sep 202416:54	–	vulnrichment
Vulnrichment	CVE-2024-43482 Microsoft Outlook for iOS Information Disclosure Vulnerability	10 Sep 202416:53	–	vulnrichment
Vulnrichment	CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability	10 Sep 202416:54	–	vulnrichment
Vulnrichment	CVE-2024-43491 Microsoft Windows Update Remote Code Execution Vulnerability	10 Sep 202416:54	–	vulnrichment
Vulnrichment	CVE-2024-43492 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability	10 Sep 202416:53	–	vulnrichment
Vulnrichment	CVE-2024-43495 Windows libarchive Remote Code Execution Vulnerability	10 Sep 202416:54	–	vulnrichment
Vulnrichment	CVE-2024-21416 Windows TCP/IP Remote Code Execution Vulnerability	10 Sep 202416:54	–	vulnrichment

10 Sep 2024 20:49Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8 - 9.9

EPSS0.8399

SSVC