Weekly briefing
Week 35 · 26 Aug – 1 Sep 2024 UTC · assess the changes, then plan the next dates.
Act on3
-
Google Chromium V8 Type Confusion Vulnerability
CVE-2024-7971
-
[INVESTIGATING] Admins cannot enforce specific settings
Classic Outlook known issues
Coming up4
-
Microsoft Windows Kernel Privilege Escalation Vulnerability
CVE-2024-38106
Same day: CISA KEV deadline: Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Scripting Engine Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Project Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
-
Patch Tuesday, 10 September 2024
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft Windows Installer Improper Privilege Management Vulnerability
CVE-2024-38014
Same day: CISA KEV deadline: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability; CISA KEV deadline: Microsoft Publisher Protection Mechanism Failure Vulnerability
How this list is chosen
Changes from 26 Aug 2024 – 1 Sep 2024 UTC and dates due up to 1 Oct 2024. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.