VulnerabilitycriticalExploited in the wild

Log4j Looms Large Over Patch Tuesday

Infosecurity Magazineby Phil MuncasterDec 15, 2021 · 09:00 UTC (Dec 15, 2021)2 min read2 · 1 read

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-43890 CVE-2021-43893 CVE-2021-43883 CVE-2021-43880 CVE-2021-41333 CVE-2021-43240 CVE-2021-43215

Tags: cve-2021-43890 cve-2021-43893 cve-2021-43883 cve-2021-43880 cve-2021-41333 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-43215 +4 related CVEs CVE-2021-43883 CVE-2021-41333 CVE-2021-43240 CVE-2021-43893	iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution	9.8 group max	3%		Dec 15, 2021
CVE-2021-43880	Windows Mobile Device Management Elevation of Privilege Vulnerability	5.5	<1%		Dec 15, 2021
CVE-2021-43890	Spoofing Vulnerability in Microsoft Windows AppX Installer Actively Exploited	7.1	11%	KEVRansomwarePoC	Dec 15, 2021 KEV Dec 15, 2021

From the original article

2 min read at infosecurity-magazine.com

IT teams knocked for six by a newly disclosed Log4j bug were forced to tackle a new patch load from Microsoft released yesterday, containing 67 new flaws including six zero-days. The monthly Patch Tuesday release from the computing giant couldn’t have come at a worse time for sysadmins already struggling to find and patch the Apache logging utility instances across their environments.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.