Microsoft Patch Tuesday, January 2021 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8514 | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime… | 5.5 | 2% | ||
| CVE-2019-1409 | An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows… | 5.5 | 1% | ||
| CVE-2019-1458 | Win32k Object-Handling Flaw Enables Local Privilege Escalation in Microsoft Windows | 7.8 | 74% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-1660 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets… | 9.9 | <1% | ||
| CVE-2021-1647 | Remote Code Execution Vulnerability in Microsoft Defender Antimalware Engine | 7.8 | 40% | KEV | KEV |
CVE-2021-1648+1 related CVE | Microsoft splwow64 Elevation of Privilege Vulnerability | 7.8 group max | 1% |
From the original article
4 min read at krebsonsecurity.comMicrosoft today released updates to plug more than 80 security holes in its Windows operating systems and other software, including one that is actively being exploited and another which was disclosed prior to today.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.