September 2024 Monthly Patch

11 September 2024

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

The vulnerabilities that have been classified as Critical in severity are listed in the table below.

For the full list of security patches released by Microsoft, please refer to

Critical Vulnerabilities

CVE Number	CVE Name	Base Score	Reference
CVE-2024-43491	Microsoft Windows Update Remote Code Execution Vulnerability	9.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-43491
CVE-2024-38220	Azure Stack Hub Elevation of Privilege Vulnerability	9.0	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38220
CVE-2024-38018	Microsoft SharePoint Server Remote Code Execution Vulnerability	8.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38018
CVE-2024-38194	Azure Web Apps Elevation of Privilege Vulnerability	8.4	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38194
CVE-2024-38216	Azure Stack Hub Elevation of Privilege Vulnerability	8.2	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38216
CVE-2024-38119	Windows Network Address Translation (NAT) Remote Code Execution Vulnerability	7.5	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-38119
CVE-2024-43464	Microsoft SharePoint Server Remote Code Execution Vulnerability	7.2	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-43464

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.