https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more CVE-2024-38014: Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges. CVE-2024-38217: Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging. CVE-2024-38226: Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files. Added to the CISA KEV catalog on 2024-09-10. en Tue, 10 Sep 2024 00:00:00 GMT https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more#2024-09-10-9e8b812b Tue, 10 Sep 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-38014">Source</a></p> https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more#2024-09-10-042539e4 Tue, 10 Sep 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-38217">Source</a></p> https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more#2024-09-10-57ca4b2c Tue, 10 Sep 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-38226">Source</a></p> https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more#2024-09-10-67e3142e Tue, 10 Sep 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more#2024-09-10-db9c4ae3 Tue, 10 Sep 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more https://pwn.watch/i/microsoft-zero-days-september-2024-38014-38217-and-1-more#2024-09-10-0044713b Tue, 10 Sep 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>