This September, Microsoft addressed a total of 79 vulnerabilities, including 4 Zero-Days: CVE-2024-43491, CVE-2024-38014, CVE-2024-38226, and CVE-2024-38217, all of which were actively being exploited. These affect various products such as Microsoft SharePoint Server, Azure Stack, and Windows Installer. Of the vulnerabilities published by Microsoft in their Monthly Patch Tuesday (Microsoft September 2024 Patch Tuesday fixes), 7 were classified as critical, with several of them being remote code execution (RCE) vulnerabilities.
You can view the complete list of CVEs published by Microsoft at the following link: Microsoft September 2024 Patch Tuesday.