Microsoft Releases September 2024 Security Updates

Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft...

September 10, 2024—KB5043092 (Security-only update)

None None...

September 10, 2024—KB5043129 (Monthly Rollup)

None None...

KB5043049: Cumulative security update for Internet Explorer: September 10, 2024

None None...

September 10, 2024—KB5043135 (Monthly Rollup)

None None...

September 10, 2024—KB5043076 (OS Builds 22621.4169 and 22631.4169)

None None...

September 10, 2024—KB5043064 (OS Builds 19044.4894 and 19045.4894) - EXPIRED

None None...

September 10, 2024—KB5043067 (OS Build 22000.3197)

None None...

PT-2024-6158

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to a Windows MSHTML platform spoofing vulnerability, which allows attackers to execute arbitrary code remotely. This vulnerability has been exploited by the...

Fedora 39 : firefox (2024-1304d7f338)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1304d7f338 advisory. - New upstream update 130.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

KB5043124: Servicing stack update for Windows 10, version 1607 and Server 2016: September 10, 2024

None None...

XenServer Security

Introduction We work hard to keep our product secure and endeavour to remediate any exploitable issues. To this end, we regularly release Security Bulletins for vulnerabilites that might affect Citrix Hypervisor and XenServer and software updates that address these vulnerabilities. Overview of th...

KB5044412: Servicing stack update for Windows Server 2012: September 10, 2024

None None...

Security Updates for Microsoft SharePoint Server 2016 (September 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application...

Security Updates for Microsoft SharePoint Server 2019 (September 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application...

KB5044410: Servicing stack update for Windows Server 2012 R2: September 10, 2024

None None...

Siemens Third-Party Component in SICAM and SITIPE Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Security Updates for Microsoft Office Products (September 2024) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by a vulnerability as referenced in the september-10-2024 advisory. - Microsoft Excel Elevation of Privilege Vulnerability CVE-2024-43465 Note that Nessus has not tested for this issue but has instead relied only on...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or...

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Progress Software has released security updates for a maximum-severity flaw in LoadMaster and Multi-Tenant MT hypervisor that could result in the execution of arbitrary operating system commands. Tracked as CVE-2024-7591 CVSS score: 10.0, the vulnerability has been described as an improper input...