{"id":22138,"date":"2024-09-10T19:07:36","date_gmt":"2024-09-10T23:07:36","guid":{"rendered":"https:\/\/msftnewsnow.com\/?p=22138"},"modified":"2025-06-19T06:23:47","modified_gmt":"2025-06-19T13:23:47","slug":"september-2024-patch-tuesday-updates-4-zero-days","status":"publish","type":"post","link":"https:\/\/msftnewsnow.com\/september-2024-patch-tuesday-updates-4-zero-days\/","title":{"rendered":"September 2024 Patch Tuesday updates addressed a total of 79 vulnerabilities, including four zero-day vulnerabilities, here’s the comprehensive breakdown"},"content":{"rendered":"

Microsoft<\/a> has released its September 2024 Patch Tuesday updates, addressing a total of 79 vulnerabilities across various Microsoft products. This includes four zero-day vulnerabilities that were actively exploited and one that was publicly disclosed. The September 2024 Patch Tuesday updates aim to strengthen the security of Windows systems by patching critical and important vulnerabilities.<\/p>\n

Microsoft’s September 2024 Patch Tuesday updates<\/h2>\n

\"September<\/a><\/p>\n

Vulnerability breakdown<\/strong><\/h3>\n
    \n
  1. Total vulnerabilities: 79<\/li>\n
  2. Critical vulnerabilities: 6<\/li>\n
  3. Important vulnerabilities: 71<\/li>\n
  4. Zero-day vulnerabilities: 4<\/li>\n
  5. Publicly disclosed vulnerabilities: 1<\/li>\n<\/ol>\n

    4 Zero-Day vulnerabilities<\/strong><\/h3>\n
      \n
    1. CVE-2024-38014<\/strong><\/a>: Windows Installer Elevation of Privilege Vulnerability, allowing attackers to gain SYSTEM privileges on Windows systems.<\/li>\n
    2. CVE-2024-38217<\/strong><\/a>: Windows Mark of the Web Security Feature Bypass Vulnerability, enabling attackers to bypass Smart App Control and Mark of the Web security warnings using a technique called LNK stomping.<\/li>\n
    3. CVE-2024-38226<\/strong><\/a>: Microsoft Publisher Security Feature Bypass Vulnerability, allowing attackers to bypass Office macro policies used to block untrusted or malicious files.<\/li>\n
    4. CVE-2024-43491<\/strong><\/a>: Microsoft Windows Update Remote Code Execution Vulnerability, a servicing stack flaw that allows remote code execution, primarily affecting Windows 10, version 1507, and certain LTSB editions.<\/li>\n<\/ol>\n

      Windows 11 and Windows 10 updates<\/strong><\/h3>\n

      \"September<\/a><\/p>\n

        \n
      1. Windows 11 updates<\/strong>: KB5043076<\/a> for versions 23H2 and 22H2, and KB5043080<\/a> for version 24H2, which include various improvements and bug fixes, including:\n