Critical Windows Update RCE and Other Zero-Days Fixed in Microsoft Patches
Active Exploitation · 3 sources · Updated 4mo ago · First seen Sep 12, 2024
Microsoft released security updates addressing 79 vulnerabilities across its product portfolio, including 19 remote code execution flaws and several issues already under active exploitation. The most severe bug, CVE-2024-43491, is a Windows Update use-after-free vulnerability with a CVSS 9.8 rating that can allow unauthenticated remote code execution. Critical vulnerabilities were also reported in Microsoft SharePoint Server, Azure Web Apps, Azure Stack Hub, and Windows Network Address Translation, expanding the risk beyond endpoint systems to server and cloud-connected environments.
Microsoft and third-party reporting said attackers were already exploiting CVE-2024-38014 in Windows Installer, CVE-2024-38217 in Mark of the Web, CVE-2024-38226 in Microsoft Publisher, and CVE-2024-43491 in Windows Update. The updates were published through Microsoft’s Security Update Guide and release notes, including related Mariner release information, and organizations were urged to prioritize deployment because the exploited flaws span privilege escalation and remote code execution paths across multiple supported Windows versions and Microsoft products.
