VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, September 2021 Edition

Krebs on SecuritySep 15, 2021 · 00:00 UTC (Sep 15, 2021)4 min read2 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-40444 CVE-2021-36965 CVE-2021-28316 CVE-2021-38647 CVE-2021-38639 CVE-2021-36975 CVE-2021-30860

Tags: cve-2021-40444 cve-2021-36965 cve-2021-28316 cve-2021-38647 cve-2021-38639 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-28316	Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability	4.2	1%		Apr 13, 2021
CVE-2021-30860	Integer Overflow in Apple PDF Processing Enables Arbitrary Code Execution (CVE-2021-30860)	7.8	76%	KEV	Aug 24, 2021 KEV Nov 3, 2021
CVE-2021-36965 +2 related CVEs CVE-2021-38639 CVE-2021-36975	Windows WLAN AutoConfig Service Remote Code Execution Vulnerability	8.8 group max	5%		Sep 15, 2021
CVE-2021-38647	Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI)	9.8	100%	KEVRansomwarePoC	Sep 15, 2021 KEV Nov 3, 2021
CVE-2021-40444	Remote Code Execution via MSHTML Rendering Engine in Microsoft Windows/Office (CVE-2021-40444)	8.8	98%	KEVRansomwarePoC ×2	Sep 15, 2021 KEV Nov 3, 2021

From the original article

4 min read at krebsonsecurity.com

Microsoft today pushed software updates to plug dozens of security holes in Windows and related products, including a vulnerability that is already being exploited in active attacks. Also, Apple has issued an emergency update to fix a flaw that’s reportedly been abused to install spyware on iOS products, and Google ‘s got a new version of Chrome that tackles two zero-day flaws.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.