What was in the September 2024 Microsoft Patch Tuesday?

Microsoft released 45 updates fixing 80 CVEs in September 2024, of which 4 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › September 2024

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, September 2024

Released September 10, 2024 · data last refreshed 2026-07-12

Microsoft's September 2024 security release, published September 10, 2024: 45 updates fixing 80 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Updates (KBs)

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2024-43461Windows MSHTML Platform Spoofing VulnerabilityCVSS 8.8Exploited

CVE-2024-38014Windows Installer Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2024-38226Microsoft Publisher Security Feature Bypass VulnerabilityCVSS 7.3Exploited

CVE-2024-38217Windows Mark of the Web Security Feature Bypass VulnerabilityCVSS 5.4Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2024-38063Windows TCP/IP Remote Code Execution VulnerabilityCVSS 9.8

CVE-2024-43491Microsoft Windows Update Remote Code Execution VulnerabilityCVSS 9.8

CVE-2024-38260Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43455Windows Remote Desktop Licensing Service Spoofing VulnerabilityCVSS 8.8

CVE-2024-38259Microsoft Management Console Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-38018Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-37338Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-37335Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-37340Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-37339Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-26186Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-26191Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2019 (16)Microsoft SQL Server 2017 for x64-based Systems (GDR) (15)Microsoft SQL Server 2019 for x64-based Systems (GDR) (15)Windows Server 2019 (Server Core installation) (11)Windows Server 2022 (11)Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) (9)Windows 10 Version 1809 for 32-bit Systems (6)Microsoft SQL Server 2017 for x64-based Systems (CU 31) (6)Windows 10 Version 1809 for x64-based Systems (5)Microsoft Office 2019 for 32-bit editions (4)

Take this release to your AI

Composed from the September 2024 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the September 2024 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2024-09, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 45 updates (KBs) fixing 80 CVEs, 4 actively exploited (CISA KEV), 0 ransomware-linked, 4 Critical updates.
Actively exploited CVEs: CVE-2024-43461 (CVSS 8.8), CVE-2024-38014 (CVSS 7.8), CVE-2024-38226 (CVSS 7.3), CVE-2024-38217 (CVSS 5.4).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← August 2024 October 2024 →