Weekly briefing
Week 41 · 7 Oct – 13 Oct 2024 UTC · assess the changes, then plan the next dates.
All dated changes in this period
15 source records · 14 groupsSecurityFortinet
Fortinet Multiple Products Format String Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2024-23113
Assessment context
CISA lists it as exploited
SecurityGitLab
GitLab Critical Patch Release: 17.4.2, 17.3.5, 17.2.9
Security advisory · GitLab patch releases
Assessment context
The vendor rates it critical
Updates and guidanceIntune
Diagnostics logs automatically available in Windows Autopilot device preparation deployment status report
Product change · Windows Autopilot device preparation changes
ReleasesMicrosoft Entra
Microsoft Entra Connect 2.4.21.0
Entra Connect release · Microsoft Entra Connect releases and retirements
ReleasesVMware vCenter Server
VMware vCenter Server · 8.0: 8.0.3.00300 (8.0 Update 3c · build 24305161)
New version · VMware vCenter Server releases
SecuritySQL Server
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-0618
Assessment context
CISA deadline passed 746 days ago
ReleasesWindows
KB5044280 · Windows 11, version 21H2
Security release
Windows 11, version 21H2
Assessment context
Monthly security release
SecurityMicrosoft Security Update Guide
October 2024 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
SecurityWindows2 source records
Added to CISA KEV · 2 entries
- Microsoft Windows MSHTML Platform Spoofing Vulnerability
Added to CISA KEV
CVE-2024-43573
Assessment context
CISA lists it as exploited
- Microsoft Windows Management Console Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2024-43572
Assessment context
CISA lists it as exploited
Updates and guidanceWindows Server
PPTP and L2TP deprecation: A new era of secure connectivity
Windows news · Windows Server Blog
ReleasesAzure CLI
ReleasesMicrosoft Entra
Microsoft Entra Connect 2.4.18.0
Entra Connect release · Microsoft Entra Connect releases and retirements
SecurityWindows
Microsoft Windows MSHTML Platform Spoofing Vulnerability
CISA KEV deadline
CVE-2024-43461
Assessment context
CISA deadline passed 748 days ago
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.