Microsoft Patch Tuesday September 2024: Fix 79 vulnerabilities

Microsoft released the September 2024 Patch Tuesday, which includes fixes for 79 security vulnerabilities. Four of them are zero-days.

Seven of the 79 vulnerabilities have been rated critical, as they allow remote code execution or elevation of privilege on vulnerable systems.

In the list below, you can see the types of vulnerabilities being fixed this month:

• 30 vulnerabilities that allow for elevation of privilege
• 23 vulnerabilities that allow remote code execution
• 11 vulnerabilities that allow information disclosure
• 8 vulnerabilities that allow Denial of Service attacks
• 4 vulnerabilities that allow bypassing security features
• 3 vulnerabilities that allow spoofing

See also: SonicWall: Critical vulnerability exploited by ransomware gangs

Microsoft Patch Tuesday September: Four zero-days

This month's Patch Tuesday fixes four zero-day vulnerabilities: three that have been used in attacks and one that has been publicly disclosed.

CVE -2024-38014 – Windows Installer Vulnerability

This vulnerability allows attackers to gain SYSTEM privileges on Windows systems. Microsoft has not released details on how to exploit it.

The vulnerability was discovered by Michael Baer of the SEC Consult Vulnerability Lab.

CVE-2024-38217 – Security Bypass Vulnerability

This flaw was publicly disclosed last month by Joe Desimone of Elastic Security. It is believed to have been used in attacks.

It allows bypassing Smart App Control and Mark of the Web warnings, through a special technique.

CVE-2024-38226 – Security Bypass Vulnerability in Microsoft Publisher

With September's Patch Tuesday, Microsoft fixed a Microsoft Publisher bug that bypasses security protections against embedded macros in downloaded documents.

See also: LiteSpeed ​​Cache Vulnerability: 6 million WordPress sites at risk

CVE-2024-43491 – Remote Code Execution Vulnerability in Microsoft Windows Update

“Microsoft is aware of a vulnerability in the Servicing Stack, which has rolled back fixes for certain vulnerabilities affecting Optional Components in Windows 10, version 1507 (original release July 2015),” Microsoft explains.

“This means that an attacker could exploit these previously fixed vulnerabilities in Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) that have installed the Windows security update released on March 12 — 128K58B302 Build 10240.20526) or other updates released through August 2024. All newer versions of Windows 10 are not affected by this vulnerability.“.

“This vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.

The vulnerability affects Windows 10, version 1507, which stopped being supported in 2017, but also affects Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB.

See also: Veeam fixes vulnerabilities in Backup & Replication (VBR)

Microsoft Patch Tuesday September: All the vulnerabilities fixed

Below is the full list of vulnerabilities fixed this month:

Microsoft Patch Tuesday is a practice followed by Microsoft, where on the second Tuesday of each month it releases updates and fixes for its operating systems, programs, and applications. These updates typically include security, performance improvements, and new features.

The purpose of Microsoft Patch Tuesday is to provide Microsoft users with the best possible user experience by fixing issues and ensuring the security of their systems. Security updates help protect systems from security vulnerabilities and malware. These updates fix known security issues and strengthen the resilience of systems against attacks.

Source: www.bleepingcomputer.com