Reference Name: SAS Security Update for SAS 9.4M9 (TS1M9)
Severity: Critical
History
- 12-19-2025 – SAS security updates available
- 11-09-2025 – SAS security update available and the SAS advisory is no longer in effect
- 10-24-2025 – SAS advisory available
- 10-01-2025 – SAS security update available
Description
The SAS security update for SAS 9.4M9 is a software update that addresses multiple third-party security vulnerabilities within the SAS® product suite. Security updates are cumulative, so you need to apply only the most recent update.
Solution
See SAS Security Updates and Hot Fixes to access the download and documentation for the SAS security update for SAS 9.4M9.
Vulnerabilities Addressed in the 12-19-2025 Release
Vulnerabilities Addressed in the 10-01-2025 Release
- CVE-2025-53506
- CVE-2025-52520
- CVE-2025-49215
- CVE-2025-49146
- CVE-2025-49124
- CVE-2025-48988
- CVE-2025-48976
- CVE-2025-48924
- CVE-2025-48734
- CVE-2025-46701
- CVE-2025-46392
- CVE-2025-41242
- CVE-2025-41234
- CVE-2025-31651
- CVE-2025-31650
- CVE-2025-27820
- CVE-2025-27533
- CVE-2025-22234
- CVE-2025-22233
- CVE-2025-8916
- CVE-2025-8885
- CVE-2024-30171
- CVE-2024-29857
- CVE-2024-21742
- CVE-2024-12801
- CVE-2024-12798
- CVE-2023-44483
- CVE-2023-33202
- CVE-2023-33201
- CVE-2023-2976
- CVE-2022-45787