Microsoft Patch Tuesday for July 2021 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-33771+1 related CVE | Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild (CVE-2021-33771) | 7.8 | 10% | KEV | KEV |
| CVE-2021-33780 | Windows DNS Server Remote Code Execution Vulnerability | 8.8 | 3% | ||
| CVE-2021-34448 | Memory Corruption in Microsoft Windows Scripting Engine (In-the-Wild Exploitation) | 6.8 | 40% | KEV | KEV |
| CVE-2021-34449 | Win32k Elevation of Privilege Vulnerability | 7.0 | 3% | ||
| CVE-2021-34464 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | 3% | ||
| CVE-2021-34467 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 7.1 | 7% | ||
CVE-2021-34520+1 related CVE | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.1 group max | 4% | ||
| CVE-2021-34473 | SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell) | 9.1 | 100% | KEVRansomwarePoC | KEV |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 117 vulnerabilities across its suite of products, by far the most in a month this year. Today’s Patch Tuesday includes three vulnerabilities that Microsoft states are being exploited in the wild, which we will cover in more detail.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.