Microsoft Patch Tuesday, September 2024: the CVEs

Microsoft Patch Tuesday September 2024: the CVEs Microsoft published on 10 September 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 8.8CVE-2024-43461KEVEPSS 54%2024-09-10

   Windows MSHTML Platform Spoofing Vulnerability

2. 7.3CVE-2024-38226KEVEPSS 2.7%2024-09-10

   Microsoft Publisher Security Feature Bypass Vulnerability

3. 5.4CVE-2024-38217KEVEPSS 10%2024-09-10

   Windows Mark of the Web Security Feature Bypass Vulnerability

4. 7.8CVE-2024-38014KEVEPSS 6.3%2024-09-10

   Windows Installer Elevation of Privilege Vulnerability