Microsoft Patch Tuesday for Oct. 2021 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-26427 | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | <1% | ||
CVE-2021-36970+2 related CVEs | Windows Print Spooler Spoofing Vulnerability | 8.8 group max | 3% | ||
| CVE-2021-38672 | Windows Hyper-V Remote Code Execution Vulnerability | 8.0 | 1% | ||
| CVE-2021-40449 | Use-After-Free Local Privilege Escalation in Microsoft Windows Win32k | 7.8 | 82% | KEVRansomwarePoC | KEV |
CVE-2021-40450+1 related CVE | Local Privilege Escalation in Microsoft Win32k (Windows 10/11 and Windows Server) | 7.8 | 2% | KEV | KEV |
| CVE-2021-40474 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | 2% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 78 vulnerabilities in the company’s various software, hardware and firmware offerings. This month’s release is particularly notable because there are only two critical vulnerabilities included, with the rest being important. This is the fewest number of critical vulnerabilities disclosed as part of a Patch Tuesday in at least a year.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.