Microsoft Patch Tuesday, September 2024: the CVEs

Microsoft Patch Tuesday September 2024: the CVEs Microsoft published on 10 September 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.3CVE-2024-43495EPSS 0.9%2024-09-10

   Windows libarchive Remote Code Execution Vulnerability

2. 7.8CVE-2024-43492EPSS 0.5%2024-09-10

   Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

3. 9.8CVE-2024-43491EPSS 13%2024-09-10

   Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker co…

4. 6.5CVE-2024-43487EPSS 1.2%2024-09-10

   Windows Mark of the Web Security Feature Bypass Vulnerability

5. 6.5CVE-2024-43482EPSS 1.1%2024-09-10

   Microsoft Outlook for iOS Information Disclosure Vulnerability

6. 8.5CVE-2024-43479EPSS 0.9%2024-09-10

   Microsoft Power Automate Desktop Remote Code Execution Vulnerability

7. 5.4CVE-2024-43476EPSS 0.9%2024-09-10

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

8. 7.3CVE-2024-43475EPSS 1.8%2024-09-10

   Microsoft Windows Admin Center Information Disclosure Vulnerability

9. 7.5CVE-2024-43474EPSS 1.3%2024-09-10

   Microsoft SQL Server Information Disclosure Vulnerability

10. 7.3CVE-2024-43470EPSS 0.9%2024-09-10

    Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

11. 8.8CVE-2024-43469EPSS 1.6%2024-09-10

    Azure CycleCloud Remote Code Execution Vulnerability

12. 7.5CVE-2024-43467EPSS 1.1%2024-09-10

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

13. 7.5CVE-2024-43466EPSS 4.5%2024-09-10

    Microsoft SharePoint Server Denial of Service Vulnerability

14. 7.8CVE-2024-43465EPSS 0.8%2024-09-10

    Microsoft Excel Elevation of Privilege Vulnerability

15. 7.2CVE-2024-43464EPSS 36%2024-09-10

    Microsoft SharePoint Server Remote Code Execution Vulnerability

16. 7.8CVE-2024-43463EPSS 0.9%2024-09-10

    Microsoft Office Visio Remote Code Execution Vulnerability

17. 8.8CVE-2024-43461KEVEPSS 54%2024-09-10

    Windows MSHTML Platform Spoofing Vulnerability

18. 7.7CVE-2024-43458EPSS 1.8%2024-09-10

    Windows Networking Information Disclosure Vulnerability

19. 7.8CVE-2024-43457EPSS 0.6%2024-09-10

    Windows Setup and Deployment Elevation of Privilege Vulnerability

20. 9.8CVE-2024-43455EPSS 1.7%2024-09-10

    Windows Remote Desktop Licensing Service Spoofing Vulnerability

21. 7.1CVE-2024-43454EPSS 22%2024-09-10

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

22. 7.5CVE-2024-38263EPSS 1.2%2024-09-10

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

23. 8.8CVE-2024-38260EPSS 1.6%2024-09-10

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

24. 8.8CVE-2024-38259EPSS 1.9%2024-09-10

    Microsoft Management Console Remote Code Execution Vulnerability

25. 7.5CVE-2024-38258EPSS 4.7%2024-09-10

    Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

26. 7.5CVE-2024-38257EPSS 4.5%2024-09-10

    Microsoft AllJoyn API Information Disclosure Vulnerability

27. 5.5CVE-2024-38256EPSS 0.7%2024-09-10

    Windows Kernel-Mode Driver Information Disclosure Vulnerability

28. 6.2CVE-2024-38254EPSS 0.7%2024-09-10

    Windows Authentication Information Disclosure Vulnerability

29. 7.8CVE-2024-38253EPSS 0.6%2024-09-10

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

30. 7.8CVE-2024-38252EPSS 0.6%2024-09-10

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

31. 7.8CVE-2024-38250EPSS 0.7%2024-09-10

    Windows Graphics Component Elevation of Privilege Vulnerability

32. 7.8CVE-2024-38249EPSS 0.9%2024-09-10

    Windows Graphics Component Elevation of Privilege Vulnerability

33. 7.0CVE-2024-38248EPSS 0.6%2024-09-10

    Windows Storage Elevation of Privilege Vulnerability

34. 7.8CVE-2024-38247EPSS 0.7%2024-09-10

    Windows Graphics Component Elevation of Privilege Vulnerability

35. 7.0CVE-2024-38246EPSS 0.6%2024-09-10

    Win32k Elevation of Privilege Vulnerability

36. 7.8CVE-2024-38245EPSS 0.9%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

37. 7.8CVE-2024-38244EPSS 6.2%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

38. 7.8CVE-2024-38243EPSS 0.8%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

39. 7.8CVE-2024-38242EPSS 3.4%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

40. 7.8CVE-2024-38241EPSS 6.0%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

41. 9.8CVE-2024-38240EPSS 1.5%2024-09-10

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

42. 7.2CVE-2024-38239EPSS 1.7%2024-09-10

    Windows Kerberos Elevation of Privilege Vulnerability

43. 7.8CVE-2024-38238EPSS 0.8%2024-09-10

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

44. 7.8CVE-2024-38237EPSS 3.4%2024-09-10

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

45. 7.5CVE-2024-38236EPSS 2.3%2024-09-10

    DHCP Server Service Denial of Service Vulnerability

46. 6.5CVE-2024-38235EPSS 0.7%2024-09-10

    Windows Hyper-V Denial of Service Vulnerability

47. 6.5CVE-2024-38234EPSS 0.9%2024-09-10

    Windows Networking Denial of Service Vulnerability

48. 7.5CVE-2024-38233EPSS 2.4%2024-09-10

    Windows Networking Denial of Service Vulnerability

49. 7.5CVE-2024-38232EPSS 2.3%2024-09-10

    Windows Networking Denial of Service Vulnerability

50. 7.5CVE-2024-38231EPSS 1.9%2024-09-10

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

51. 7.5CVE-2024-38230EPSS 2.4%2024-09-10

    Windows Standards-Based Storage Management Service Denial of Service Vulnerability

52. 7.2CVE-2024-38228EPSS 4.2%2024-09-10

    Microsoft SharePoint Server Remote Code Execution Vulnerability

53. 7.2CVE-2024-38227EPSS 8.2%2024-09-10

    Microsoft SharePoint Server Remote Code Execution Vulnerability

54. 7.3CVE-2024-38226KEVEPSS 2.7%2024-09-10

    Microsoft Publisher Security Feature Bypass Vulnerability

55. 9.8CVE-2024-38225EPSS 1.4%2024-09-10

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

56. 9.0CVE-2024-38220EPSS 1.0%2024-09-10

    Azure Stack Hub Elevation of Privilege Vulnerability

57. 5.4CVE-2024-38217KEVEPSS 10%2024-09-10

    Windows Mark of the Web Security Feature Bypass Vulnerability

58. 9.0CVE-2024-38216EPSS 0.9%2024-09-10

    Azure Stack Hub Elevation of Privilege Vulnerability

59. 9.9CVE-2024-38194EPSS 1.3%2024-09-10

    An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

60. 7.1CVE-2024-38188EPSS 0.6%2024-09-10

    Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

61. 7.5CVE-2024-38119EPSS 0.8%2024-09-10

    Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

62. 7.8CVE-2024-38046EPSS 0.7%2024-09-10

    PowerShell Elevation of Privilege Vulnerability

63. 8.1CVE-2024-38045EPSS 1.4%2024-09-10

    Windows TCP/IP Remote Code Execution Vulnerability

64. 8.8CVE-2024-38018EPSS 51%2024-09-10

    Microsoft SharePoint Server Remote Code Execution Vulnerability

65. 7.8CVE-2024-38014KEVEPSS 6.3%2024-09-10

    Windows Installer Elevation of Privilege Vulnerability

66. 9.8CVE-2024-37980EPSS 1.4%2024-09-10

    Microsoft SQL Server Elevation of Privilege Vulnerability

67. 7.1CVE-2024-37966EPSS 2.2%2024-09-10

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

68. 8.8CVE-2024-37965EPSS 1.7%2024-09-10

    Microsoft SQL Server Elevation of Privilege Vulnerability

69. 4.3CVE-2024-37342EPSS 1.7%2024-09-10

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

70. 9.8CVE-2024-37341EPSS 1.4%2024-09-10

    Microsoft SQL Server Elevation of Privilege Vulnerability

71. 8.8CVE-2024-37340EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

72. 8.8CVE-2024-37339EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

73. 8.8CVE-2024-37338EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

74. 4.3CVE-2024-37337EPSS 1.7%2024-09-10

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

75. 8.8CVE-2024-37335EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

76. 7.8CVE-2024-30073EPSS 0.9%2024-09-10

    Windows Security Zone Mapping Security Feature Bypass Vulnerability

77. 8.8CVE-2024-26191EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

78. 8.8CVE-2024-26186EPSS 1.6%2024-09-10

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

79. 9.8CVE-2024-21416EPSS 1.4%2024-09-10

    Windows TCP/IP Remote Code Execution Vulnerability