January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCE
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8514 | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime… | 5.5 | 2% | ||
| CVE-2019-1409 | An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows… | 5.5 | 1% | ||
| CVE-2020-1660 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets… | 9.9 | <1% | ||
| CVE-2021-1647 | Remote Code Execution Vulnerability in Microsoft Defender Antimalware Engine | 7.8 | 40% | KEV | KEV |
| CVE-2021-1667 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 group max | 4% | ||
| CVE-2021-1677 | Azure Active Directory Pod Identity Spoofing Vulnerability | 5.5 | 1% |
From the original article
4 min read at helpnetsecurity.com
Microsoft has plugged 83 CVEs, including a Microsoft Defender zero-day Adobe has delivered security updates for a variety of products SAP has released 10 security notes and updated 7 previously released ones
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.