Ref# ADV2024_351 | Date: Oct 15th 2024

---

Microsoft has published a security advisory highlighting vulnerabilities in the following products on October 8th, 2024. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• .NET 6.0 

• .NET 8.0 

• Azure CLI 

• Azure Monitor Agent 

• Azure Service Connector 

• Azure Service Fabric 

• Azure Stack HCI 22H2 

• Azure Stack HCI 23H2 

• DeepSpeed 

• Microsoft .NET Framework – multiple versions 

• Microsoft .NET Framework 

• Microsoft 365 Apps for Enterprise 

• Microsoft Configuration Manager – multiple versions 

• Microsoft Defender 

• Microsoft Excel 2016 

• Microsoft Office 2016 

• Microsoft Office 2019 

• Microsoft Office LTSC 

• Microsoft Outlook for Android 

• Microsoft SharePoint Enterprise Server 2016 

• Microsoft SharePoint Server 2019 

• Microsoft SharePoint Server 

• Microsoft Visual Studio 2015 

• Microsoft Visual Studio 2017 

• Microsoft Visual Studio 2019 

• Microsoft Visual Studio 2022 – multiple versions 

• Power BI Report Server 

• Remote Desktop client for Windows Desktop 

• Visual C++ Redistributable Installer 

• Visual Studio Code 

• Windows 10 – multiple versions 

• Windows 11 – multiple versions 

• Windows Server 2008 – multiple versions 

• Windows Server 2012 – multiple versions 

• Windows Server 2016 – multiple versions 

• Windows Server 2019 – multiple versions 

• Windows Server 2022 – multiple versions 

For more information on these updates, you can follow these URLs: 

• October 2024 Release Notes 

• Security Update Guide 

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary. 

PDF Download: Microsoft Security Advisory

References 

• Security Update Guide. (October 8th, 2024). Retrieved from Microsoft. https://msrc.microsoft.com/update-guide/en-us

• Microsoft Security Advisory. (October 8th, 2024). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2024-monthly-rollup-av24-574