Here’s what Microsoft fixed in September’s Patch Tuesday
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-38014+1 related CVE | Local Privilege Escalation in Microsoft Windows Installer (Actively Exploited) | 7.8 group max | 6% | KEV | KEV |
| CVE-2024-38226 | Actively Exploited Security Feature Bypass in Microsoft Publisher | 7.3 | 3% | KEV | KEV |
| CVE-2024-43491 | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10… | 9.8 | 12% |
From the original article
3 min read at cyberscoop.com
The tech giant's regular vulnerability list includes new vulnerabilities for Windows Updater and Installer. Microsoft Romania headquarters in City Gate Towers situated in Free Press Square, in Bucharest, Romania. (Getty Images) Vulnerabilities released in Microsoft’s Patch Tuesday report include several zero-days impacting versions of several Windows products, including Windows Installer and Windows Updater software.
By @chrismvasq · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.