Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

Microsoft's September Patch Tuesday fixed 79 vulnerabilities, including multiple actively exploited issues: two zero-days (CVE-2024-38226 in Publisher and CVE-2024-38014 in Windows Installer), a high-severity Windows Update RCE (CVE-2024-43491, CVSS 9.8), and several SharePoint RCEs that can be abused with low privileges; Cisco Talos released Snort rules to detect exploitation attempts and Microsoft published patches and guidance.