Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

Summary: Microsoft's September Patch Tuesday covered 79 vulnerabilities, seven of them critical, including four that were already being exploited in the wild. The most severe is CVE-2024-43491, a Windows Update remote code execution flaw scored 9.8 out of 10 that Microsoft rates as more likely to be exploited.
Key Takeaway: Two of the actively exploited zero-days need no special access to matter: CVE-2024-38226 bypasses the Office macro policies meant to block malicious files, and CVE-2024-38014 gives an attacker SYSTEM-level privileges on Windows 11 24H2 and older Windows 10 and 11 systems.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-38014 CVE-2024-38018 CVE-2024-38217 CVE-2024-38226 CVE-2024-38227 CVE-2024-38228 CVE-2024-38257 CVE-2024-43464 CVE-2024-43491
Related: Bug Left Some Windows PCs Dangerously Unpatched Cyber Risks ·
CVE-2024-38226: Microsoft Publisher Protection Mechanism Failure Vulnerability Known Exploited Vulnerabilities · Sep 10, 2024
CVE-2024-38014: Microsoft Windows Installer Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Sep 10, 2024