Microsoft Fixes Exchange Server Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-31166 | Use-After-Free RCE in Microsoft Windows HTTP Protocol Stack (http.sys) | 9.8 | 100% | KEV | KEV |
| CVE-2021-31181 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | 29% | PoC | |
| CVE-2021-31200 | Common Utilities Remote Code Execution Vulnerability | 7.2 | 2% | ||
| CVE-2021-31204 | .NET and Visual Studio Elevation of Privilege Vulnerability | 7.3 | 1% | ||
| CVE-2021-31207 | Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE | 6.6 | 100% | KEVRansomwarePoC | KEV |
From the original article
1 min read at infosecurity-magazine.com
Microsoft fixed 55 vulnerabilities yesterday including three zero-days not thought to have been exploited in the wild, one of which affected the under-fire Exchange Server. This month’s Patch Tuesday is lighter than many have been in recent months, but there were four critical CVEs for admins to address, alongside the three publicly disclosed bugs.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.