Microsoft Patch Tuesday for Sept. 2021 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-36965+1 related CVE | Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | 8.8 group max | 5% | ||
| CVE-2021-36955 | Local Privilege Escalation in Microsoft Windows CLFS Driver | 7.8 | 4% | KEVRansomware | KEV |
| CVE-2021-36956 | Azure Sphere Information Disclosure Vulnerability | 4.4 | <1% | ||
| CVE-2021-38647 | Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI) | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-40444 | Remote Code Execution via MSHTML Rendering Engine in Microsoft Windows/Office (CVE-2021-40444) | 8.8 | 98% | KEVRansomwarePoC ×2 | KEV |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 85 vulnerabilities across the company’s firmware and software. This month’s release is headlined by an official patch for the critical remote code execution vulnerability disclosed earlier this month in MSHTML .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.