Microsoft patches spoofing vulnerability exploited by Emotet (CVE-2021-43890)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-41379 | Local Privilege Escalation in Microsoft Windows Installer (CVE-2021-41379) | 5.5 | 19% | KEVRansomware | KEV |
CVE-2021-43215+1 related CVE | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution | 9.8 group max | 3% | ||
| CVE-2021-43890 | Spoofing Vulnerability in Microsoft Windows AppX Installer Actively Exploited | 7.1 | 11% | KEVRansomwarePoC | KEV |
| CVE-2021-43905 | Microsoft Office app Remote Code Execution Vulnerability | 9.6 | 3% |
From the original article
3 min read at helpnetsecurity.com
It’s the final Patch Tuesday of 2021 and Microsoft has delivered fixes for 67 vulnerabilities, including a spoofing vulnerability (CVE-2021-43890) actively exploited to deliver Emotet/Trickbot /Bazaloader malware family. Of the 67 CVE-numbered flaws, CVE-2021-43890 – a Windows AppX Installer spoofing vulnerability – will, understandably, be a patching priority.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.