# MA-861.092022: MyCERT Advisory - Microsoft Releases September 2022 Security Updates

**Date:** 15 Sep 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-861.092022  
**Advisory ID:** MA-861.092022

---

**1.0 Introduction**
Recently, Microsoft has released updates to address multiple vulnerabilities in Microsoft software packaged in their September 2022 Security Updates package. This month’s security update notification presents 104 newly reported vulnerabilities.
**2.0 Impact**
An attacker could exploit some of these vulnerabilities to take control of an affected device.
**3.0 Affected Products**
The affected Microsoft products are:
• SharePoint Enterprise Server 2016
• SharePoint Foundation 2013
• SharePoint Server 2019
• SharePoint Server 2019
• SharePoint Foundation 2013
• SharePoint Enterprise Server 2016
• SharePoint Server Subscription Edition Language Pack
• SharePoint Server Subscription Edition Core
• Windows 10, version 1607, Windows Server 2016
• Windows 10, version 20H2, Windows Server, version 20H2, Windows 10, version 21H1, Windows 10, version 21H2
• Windows Server 2019
• Windows Server 2022
• Windows 10
• Windows 11
• Windows Server 2008 (Monthly Rollup)
• Windows 7, Windows Server 2008 R2 (Monthly Rollup)
• Windows 8.1, Windows Server 2012 R2 (Security-only update)
• Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
• Windows Server 2012 (Monthly Rollup)
• Windows Server 2008 (Security-only update)
• Windows 7, Windows Server 2008 R2 (Security-only update)
• Windows Server 2012 (Security-only update)
**4.0 Recommendations**
Users and administrators to review Microsoft’s September 2022 Security Update Guide and Deployment Information and apply the necessary updates. Kindly refer to the following URLs:
• <https://msrc.microsoft.com/update-guide/releaseNote/2022-Sep>
• <https://msrc.microsoft.com/update-guide/deployments>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
• <https://www.cisa.gov/uscert/ncas/current-activity/2022/09/13/microsoft-releases-september-2022-security-updates>
• <https://msrc.microsoft.com/update-guide/releaseNote/2022-Sep>
• <https://msrc.microsoft.com/update-guide/deployments>