VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, November 2021 Edition

Krebs on SecurityNov 10, 2021 · 01:43 UTC (Nov 10, 2021)3 min read2

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-42292 CVE-2021-42321 CVE-2021-38631 CVE-2021-41371 CVE-2021-38666

Tags: cve-2021-42292 cve-2021-42321 cve-2021-38631 cve-2021-41371 cve-2021-38666 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-38666 +2 related CVEs CVE-2021-38631 CVE-2021-41371	Remote Desktop Client Remote Code Execution Vulnerability	8.8 group max	15%		Nov 10, 2021
CVE-2021-42292	Security Feature Bypass in Microsoft Excel Enables Arbitrary Code Execution	7.8	43%	KEV	Nov 10, 2021 KEV Nov 17, 2021
CVE-2021-42321	Authenticated RCE via Insecure Deserialization in Microsoft Exchange Server	8.8	92%	KEVRansomwarePoC ×2	Nov 10, 2021 KEV Nov 17, 2021

From the original article

3 min read at krebsonsecurity.com

Microsoft Corp. today released updates to quash at least 55 security bugs in its Windows operating systems and other software. Two of the patches address vulnerabilities that are already being used in active attacks online, and four of the flaws were disclosed publicly before today — potentially giving adversaries a head start in figuring out how to exploit them.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.