Microsoft Server security updates, September 2024 (Patch Tuesday 2024-09-10)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in September 2024, including the Patch Tuesday release on 2024-09-10 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 43
Critical: 0
High: 33
In CISA KEV: 3
CVEs: 43

Microsoft server CVEs, September 2024

Sep 10, 2024
High [CVE-2024-37980] Microsoft SQL Server Elevation of Privilege Vulnerability
High8.8
Sep 10, 2024
High [CVE-2024-43495] Windows libarchive Remote Code Execution Vulnerability
High7.3
Sep 10, 2024
High [CVE-2024-30073] Windows Security Zone Mapping Security Feature Bypass Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-43475] Microsoft Windows Admin Center Information Disclosure Vulnerability
High7.3
Sep 10, 2024
High [CVE-2024-43461] Windows MSHTML Platform Spoofing Vulnerability
High8.8ExploitedCISA KEV
Sep 10, 2024
High [CVE-2024-43458] Windows Networking Information Disclosure Vulnerability
High7.7
Sep 10, 2024
High [CVE-2024-43455] Windows Remote Desktop Licensing Service Spoofing Vulnerability
High8.8
Sep 10, 2024
High [CVE-2024-43454] Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
High7.1
Sep 10, 2024
High [CVE-2024-38119] Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
High7.5
Sep 10, 2024
High [CVE-2024-38045] Windows TCP/IP Remote Code Execution Vulnerability
High8.1
Sep 10, 2024
High [CVE-2024-38260] Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
High8.8
Sep 10, 2024
High [CVE-2024-38259] Microsoft Management Console Remote Code Execution Vulnerability
High8.8
Sep 10, 2024
High [CVE-2024-38257] Microsoft AllJoyn API Information Disclosure Vulnerability
High7.5
Sep 10, 2024
High [CVE-2024-38248] Windows Storage Elevation of Privilege Vulnerability
High7.0
Sep 10, 2024
High [CVE-2024-38247] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38246] Win32k Elevation of Privilege Vulnerability
High7.0
Sep 10, 2024
High [CVE-2024-38245] Kernel Streaming Service Driver Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38244] Kernel Streaming Service Driver Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38239] Windows Kerberos Elevation of Privilege Vulnerability
High7.2
Sep 10, 2024
High [CVE-2024-38237] Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38233] Windows Networking Denial of Service Vulnerability
High7.5
Sep 10, 2024
High [CVE-2024-38228] Microsoft SharePoint Server Remote Code Execution Vulnerability
High7.2
Sep 10, 2024
High [CVE-2024-38046] PowerShell Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38014] Windows Installer Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
Sep 10, 2024
High [CVE-2024-37341] Microsoft SQL Server Elevation of Privilege Vulnerability
High8.8
Sep 10, 2024
High [CVE-2024-43474] Microsoft SQL Server Information Disclosure Vulnerability
High7.6
Sep 10, 2024
High [CVE-2024-38253] Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38252] Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38250] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Sep 10, 2024
High [CVE-2024-38240] Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High8.1
Sep 10, 2024
High [CVE-2024-38236] DHCP Server Service Denial of Service Vulnerability
High7.5
Sep 10, 2024
High [CVE-2024-26191] Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
High8.8
Sep 10, 2024
High [CVE-2024-37342] Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
High7.1
Sep 10, 2024
Medium [CVE-2024-43487] Windows Mark of the Web Security Feature Bypass Vulnerability
Medium6.5
Sep 10, 2024
Medium [CVE-2024-43466] Microsoft SharePoint Server Denial of Service Vulnerability
Medium6.5
Sep 10, 2024
Medium [CVE-2024-38258] Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Medium6.5
Sep 10, 2024
Medium [CVE-2024-38235] Windows Hyper-V Denial of Service Vulnerability
Medium6.5
Sep 10, 2024
Medium [CVE-2024-38234] Windows Networking Denial of Service Vulnerability
Medium6.5
Sep 10, 2024
Medium [CVE-2024-38231] Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Medium6.5
Sep 10, 2024
Medium [CVE-2024-38217] Windows Mark of the Web Security Feature Bypass Vulnerability
Medium5.4ExploitedCISA KEV
Sep 10, 2024
Medium [CVE-2024-38256] Windows Kernel-Mode Driver Information Disclosure Vulnerability
Medium5.5
Sep 10, 2024
Medium [CVE-2024-38254] Windows Authentication Information Disclosure Vulnerability
Medium5.5
Sep 10, 2024
Medium [CVE-2024-38230] Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Medium6.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.