The September 2024 Security Update Review

Adobe released eight bulletins addressing 28 CVEs (including multiple critical code-execution flaws such as a ColdFusion RCE rated CVSS 9.8), while Microsoft released 79 CVEs across Windows, Office, Azure, SQL Server and related components; several Microsoft bugs are listed as publicly known or under active attack (notably MoTW bypasses, a Windows Installer EoP, and an MSHTML exploit). The report highlights the urgency to test and deploy servicing stack and security updates (e.g., KB5043936 + KB5043083 for the Windows Update RCE) and recommends prioritizing the highest-severity and actively exploited fixes.