Exploit / PoCcriticalExploited in the wild

Microsoft Patches Six Zero-Day Security Holes

Krebs on SecurityJun 8, 2021 · 21:23 UTC (Jun 8, 2021)3 min read2 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-33742 CVE-2021-31955 CVE-2021-31956 CVE-2021-33739 CVE-2021-31201 CVE-2021-31199 CVE-2021-31959 CVE-2021-31963 CVE-2021-28550

Tags: cve-2021-33742 cve-2021-31955 cve-2021-31956 cve-2021-33739 cve-2021-31201 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-28550	Use-After-Free RCE in Adobe Acrobat and Reader	8.8	52%	KEV	Sep 2, 2021 KEV Nov 3, 2021
CVE-2021-31199 +1 related CVE CVE-2021-31201	Elevation of Privilege in Microsoft Enhanced Cryptographic Provider (Windows)	5.2	3%	KEV	Jun 8, 2021 KEV Nov 3, 2021
CVE-2021-33739 +3 related CVEs CVE-2021-33742 CVE-2021-31956 CVE-2021-31955	Privilege Escalation in Microsoft Windows Desktop Window Manager (DWM) Core Library	8.4 group max	7%	KEV	Jun 8, 2021 KEV Nov 3, 2021
CVE-2021-31959	Scripting Engine Memory Corruption Vulnerability	6.4	9%		Jun 8, 2021
CVE-2021-31963	Microsoft SharePoint Server Remote Code Execution Vulnerability	7.1	2%		Jun 8, 2021

From the original article

3 min read at krebsonsecurity.com

Microsoft today released another round of security updates for Windows operating systems and supported software, including fixes for six zero-day bugs that malicious hackers already are exploiting in active attacks. June’s Patch Tuesday addresses just 49 security holes — about half the normal number of vulnerabilities lately.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.