Reference Name: SAS Security Update for SAS 9.4M9 (TS1M9)
Severity: Critical
History
- 10-24-2025 - SAS advisory available
- 10-01-2025 – SAS security update available
Description
The SAS security update for SAS 9.4M9 is a software update that addresses multiple third-party security vulnerabilities within the SAS® product suite. Security updates are cumulative, so you need to apply only the most recent update.
Solution
See SAS Security Updates and Hot Fixes to access the download and documentation for the SAS security update for SAS 9.4M9.
Advisory for SAS 9.4M9 Deployments with SAS Risk Solutions
Users who have SAS 9.4M9 deployments with SAS Risk Solutions should not install the Security Updates. For additional information, see SAS KB0043379, "Alert for SAS® Risk Solutions on SAS® 9.4M9 (TS1M9)."
Vulnerabilities Addressed in the 10-01-2025 Release
- CVE-2025-53506
- CVE-2025-52520
- CVE-2025-49215
- CVE-2025-49146
- CVE-2025-49124
- CVE-2025-48988
- CVE-2025-48976
- CVE-2025-48924
- CVE-2025-48734
- CVE-2025-46701
- CVE-2025-46392
- CVE-2025-41242
- CVE-2025-41234
- CVE-2025-31651
- CVE-2025-31650
- CVE-2025-27820
- CVE-2025-27533
- CVE-2025-22234
- CVE-2025-22233
- CVE-2025-8916
- CVE-2025-8885
- CVE-2024-30171
- CVE-2024-29857
- CVE-2024-21742
- CVE-2024-12801
- CVE-2024-12798
- CVE-2023-44483
- CVE-2023-33202
- CVE-2023-33201
- CVE-2023-2976
- CVE-2022-45787