Microsoft has published a security advisory to address vulnerabilities affecting the following products on August 13, 2024. It is recommended that you take the necessary precautions to ensure your products are always protected.
- Azure Connected Machine Agent
- Azure CycleCloud – multiple versions and platforms
- Microsoft 365 Apps for Enterprise – multiple platforms
- Microsoft Dynamics 365 (on-premises) – version 9.1
- Microsoft Office – multiple versions and platforms
- Microsoft Project 2016 – multiple platforms
- Microsoft Visual Studio – multiple versions and platforms
- Remote Desktop client for Windows Desktop
- Windows 10 – multiple versions and platforms
- Windows 11 – multiple versions and platforms
- Windows Server – multiple versions and platforms
Microsoft has indicated that CVE-2024-38189, CVE-2024-38107, CVE-2024-38106, CVE-2024-38213, CVE-2024-38193 and CVE-2024-38178 have been exploited.
For more information on these updates and CVEs, you can follow these URLs:
- https://msrc.microsoft.com/update-guide/releaseNote/2024-Aug
- https://msrc.microsoft.com/update-guide/en-us
The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.
PDF Download: Microsoft Security Advisory
References