VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, July 2021 Edition

Krebs on SecurityJul 15, 2021 · 00:00 UTC (Jul 15, 2021)3 min read2

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-34527 CVE-2021-34448 CVE-2021-33771 CVE-2021-31979 CVE-2021-34458 CVE-2021-34494 CVE-2021-34473 CVE-2021-34523

Tags: cve-2021-34527 cve-2021-34448 cve-2021-33771 cve-2021-31979 cve-2021-34458 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-33771 +1 related CVE CVE-2021-31979	Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild (CVE-2021-33771)	7.8	10%	KEV	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-34448	Memory Corruption in Microsoft Windows Scripting Engine (In-the-Wild Exploitation)	6.8	40%	KEV	Jul 16, 2021 KEV Nov 3, 2021
CVE-2021-34458	Windows Kernel Remote Code Execution Vulnerability	9.9	3%		Jul 16, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-34494	Windows DNS Server Remote Code Execution Vulnerability	8.8	4%		Jul 14, 2021
CVE-2021-34527	PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler	8.8	100%	KEVRansomwarePoC ×3	Jul 2, 2021 KEV Nov 3, 2021

From the original article

3 min read at krebsonsecurity.com

Microsoft today released updates to patch at least 116 security holes in its Windows operating systems and related software. At least four of the vulnerabilities addressed today are under active attack, according to Microsoft.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.