Microsoft patches six Windows zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-28550 | Use-After-Free RCE in Adobe Acrobat and Reader | 8.8 | 52% | KEV | KEV |
CVE-2021-31199+1 related CVE | Elevation of Privilege in Microsoft Enhanced Cryptographic Provider (Windows) | 5.2 | 3% | KEV | KEV |
CVE-2021-33742+2 related CVEs | Out-of-Bounds Write RCE in Microsoft Windows MSHTML Engine (CVE-2021-33742) | 7.5 group max | 59% | KEV | KEV |
| CVE-2021-31962 | Kerberos AppContainer Security Feature Bypass Vulnerability | 9.4 | 4% |
From the original article
3 min read at therecord.media
Microsoft has released today its monthly batch of security updates, known in the industry as Patch Tuesday. This month's security patches fix 50 vulnerabilities , including six actively exploited Windows zero-days, representing the largest batch of actively exploited zero-days patched in one go in the company's recent history. CVE-2021-33742 - Windows MSHTML Platform Remote Code Execution Vulnerability
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.