Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1675 | Remote Code Execution in Microsoft Windows Print Spooler (PrintNightmare) | 7.8 | 85% | KEVRansomwarePoC | KEV |
| CVE-2021-26427 | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | <1% | ||
CVE-2021-36970+1 related CVE | Windows Print Spooler Spoofing Vulnerability | 8.8 group max | 3% | ||
| CVE-2021-38672 | Windows Hyper-V Remote Code Execution Vulnerability | 8.0 | 1% | ||
| CVE-2021-40449 | Use-After-Free Local Privilege Escalation in Microsoft Windows Win32k | 7.8 | 82% | KEVRansomwarePoC | KEV |
| CVE-2021-40454 | Rich Text Edit Control Information Disclosure Vulnerability | 5.5 | <1% | ||
| CVE-2021-40486 | Microsoft Word Remote Code Execution Vulnerability | 7.8 | 6% |
From the original article
3 min read at helpnetsecurity.com
On October 2021 Patch Tuesday, Microsoft has fixed 71 CVE-numbered vulnerabilities. Of those, only one was a zero-day exploited in attacks in the wild (CVE-2021-40449) and three were publicly known before the release of the patches. Let’s start with CVE-2021-40449 , a Windows bug that may be used to escalate privileges on an already compromised system.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.