Microsoft February 2021 Patch Tuesday fixes 56 bugs, including an actively exploited Windows zero
- CVEs
- CVE-2021-1732CVE-2021-24078CVE-2021-24074CVE-2021-26701CVE-2021-1721CVE-2021-1733CVE-2021-1727CVE-2021-24098CVE-2021-24106CVE-2021-24094CVE-2021-24086CVE-2021-24112CVE-2021-24111CVE-2021-24087CVE-2021-24105CVE-2021-24109CVE-2021-24101CVE-2021-1724CVE-2021-24100CVE-2021-24085CVE-2021-1730CVE-2021-24093CVE-2021-24067CVE-2021-24068CVE-2021-24069CVE-2021-24070CVE-2021-24071CVE-2021-1726CVE-2021-24066CVE-2021-24072CVE-2021-24114CVE-2021-24081CVE-2021-24091CVE-2021-24076CVE-2021-24077CVE-2021-1722CVE-2021-24073CVE-2021-24099CVE-2021-1728CVE-2021-1639CVE-2021-26700CVE-2021-24083CVE-2021-24079CVE-2021-24092CVE-2021-24102CVE-2021-24103CVE-2021-24096CVE-2021-1698CVE-2021-24084CVE-2021-24075CVE-2021-1731
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1639 | Visual Studio Code Remote Code Execution Vulnerability | 7.0 | 2% | ||
| CVE-2021-24074 | Windows TCP/IP Remote Code Execution Vulnerability | 9.8 group max | 26% | ||
CVE-2021-26701+2 related CVEs | .NET Core Remote Code Execution Vulnerability | 8.1 group max | 30% | ||
| CVE-2021-1724 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | 6.1 | 1% | ||
| CVE-2021-1728 | System Center Operations Manager Elevation of Privilege Vulnerability | 8.8 | 2% | ||
CVE-2021-24085+1 related CVE | Microsoft Exchange Server Spoofing Vulnerability | 6.5 group max | 5% | ||
| CVE-2021-1732 | Out-of-Bounds Write Local Privilege Escalation in Microsoft Win32k (CVE-2021-1732) | 7.8 | 78% | KEVRansomwarePoC ×2 | KEV |
| CVE-2021-1733 | Sysinternals PsExec Elevation of Privilege Vulnerability | 7.8 | <1% | ||
CVE-2021-24066+2 related CVEs | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 group max | 6% | ||
CVE-2021-24069+3 related CVEs | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | 2% | ||
CVE-2021-24099+1 related CVE | Skype for Business and Lync Denial of Service Vulnerability | 6.5 | 3% | ||
| CVE-2021-24078 | Windows DNS Server Remote Code Execution Vulnerability | 9.8 | 11% | ||
| CVE-2021-24087 | Azure IoT CLI extension Elevation of Privilege Vulnerability | 7.0 | <1% | ||
| CVE-2021-24092 | Microsoft Defender Elevation of Privilege Vulnerability | 7.8 | <1% | ||
| CVE-2021-24100 | Microsoft Edge for Android Information Disclosure Vulnerability | 5.0 | 3% | ||
| CVE-2021-24101 | Microsoft Dataverse Information Disclosure Vulnerability | 6.5 | 3% | ||
| CVE-2021-24105 | Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which… | 8.4 | 2% | ||
| CVE-2021-24109 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | 6.8 | 2% | ||
| CVE-2021-24111 | .NET Framework Denial of Service Vulnerability | 7.5 | 4% | ||
| CVE-2021-24114 | Microsoft Teams iOS Information Disclosure Vulnerability | 5.7 | 3% | ||
| CVE-2021-26700 | Visual Studio Code npm-script Extension Remote Code Execution Vulnerability | 7.8 | 6% |
From the original article
5 min read at securityaffairs.com
Microsoft February 2021 Patch Tuesday addresses 56 vulnerabilities, including a flaw that is known to be actively exploited in the wild. Microsoft February 2021 Patch Tuesday security updates address 56 CVEs in multiple products, including Windows components, .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.