Vulnerabilitycritical

Patch Tuesday, October 2021 Edition

Krebs on SecurityOct 15, 2021 · 00:00 UTC (Oct 15, 2021)4 min read5 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30883 CVE-2021-38672 CVE-2021-40461 CVE-2021-40449 CVE-2021-36970 CVE-2021-26427

Tags: cve-2021-30883 cve-2021-38672 cve-2021-40461 cve-2021-40449 cve-2021-36970 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26427	Microsoft Exchange Server Remote Code Execution Vulnerability	9.0	<1%		Oct 13, 2021
CVE-2021-30883	Kernel Memory Corruption Zero-Day in Apple iOS, iPadOS, macOS, tvOS, watchOS	7.8	15%	KEV	Aug 24, 2021 KEV May 23, 2022
CVE-2021-36970 +1 related CVE CVE-2021-40461	Windows Print Spooler Spoofing Vulnerability	8.8 group max	3%		Oct 13, 2021
CVE-2021-38672	Windows Hyper-V Remote Code Execution Vulnerability	8.0	1%		Oct 13, 2021
CVE-2021-40449	Use-After-Free Local Privilege Escalation in Microsoft Windows Win32k	7.8	82%	KEVRansomwarePoC	Oct 13, 2021 KEV Nov 17, 2021

From the original article

4 min read at krebsonsecurity.com

Microsoft today issued updates to plug more than 70 security holes in its Windows operating systems and other software, including one vulnerability that is already being exploited. This month’s Patch Tuesday also includes security fixes for the newly released Windows 11 operating system. Separately, Apple has released updates for iOS and iPadOS to address a flaw that is being actively attacked.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.