Microsoft Patch Tuesday, December 2021 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-41379 | Local Privilege Escalation in Microsoft Windows Installer (CVE-2021-41379) | 5.5 | 19% | KEVRansomware | KEV |
| CVE-2021-43883 | Windows Installer Elevation of Privilege Vulnerability | 7.8 | 12% | ||
| CVE-2021-43890 | Spoofing Vulnerability in Microsoft Windows AppX Installer Actively Exploited | 7.1 | 11% | KEVRansomwarePoC | KEV |
| CVE-2021-43905 | Microsoft Office app Remote Code Execution Vulnerability | 9.6 | 3% |
From the original article
5 min read at krebsonsecurity.comMicrosoft , Adobe , and Google all issued security updates to their products today. The Microsoft patches include six previously disclosed security flaws, and one that is already being actively exploited. But this month’s Patch Tuesday is overshadowed by the “ Log4Shell ” 0-day exploit in a popular Java library that web server administrators are now racing to find and patch amid widespread exploitation of the flaw.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.