Ref# ADV2024_321 | Date: Sep 12th 2024

---

Microsoft has published a security advisory to address vulnerabilities affecting the following products between September 10th 2024. It is recommended that you take the necessary precautions to ensure your products are always protected. 

 

• Azure Connected Machine Agent 

• Azure CycleCloud – multiple versions and platforms 

• Azure Health Bot 

• Azure Network Watcher VM Extension for Windows 

• Azure Stack Hub 

• Azure Web Apps 

• Microsoft 365 Apps for Enterprise – multiple platforms 

• Microsoft AutoUpdate for Mac 

• Microsoft Dynamics 365 (on-premises) – version 9.1 

• Microsoft Dynamics 365 Business Central 2023 Release Wave 1 

• Microsoft Excel 2016 

• Microsoft Office – multiple versions and platforms 

• Microsoft Outlook 2016 – multiple platforms 

• Microsoft Project 2016 – multiple platforms 

• Microsoft Publisher 2016 

• Microsoft SharePoint Enterprise Server 2016 

• Microsoft SQL Server – multiple versions and platforms 

• Microsoft Teams for iOS 

• Microsoft Visio 2016 multiple platforms 

• Microsoft Visual Studio 2022 – multiple versions 

• .NET – version 8.0 

• Power Automate for Desktop 

• Remote Desktop client for Windows Desktop 

• Windows 10 – multiple versions and platforms 

• Windows 11 – multiple versions and platforms 

• Windows Server – multiple versions and platforms 

 

For more information on these updates, you can follow these URLs: 

1. https://msrc.microsoft.com/update-guide/releaseNote/2024-Sep 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary. 

References 

• Microsoft Security Advisories Guide (2024, September 10). Retrieved from Microsoft. https://msrc.microsoft.com/update-guide/en-us 

• Microsoft security advisory. (2024, September 10th ). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-september-2024-monthly-rollup-av24-510