VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday for April 2021 — Snort rules and prominent vulnerabilities

Cisco TalosApr 13, 2021 · 17:37 UTC (Apr 13, 2021)3 min read3 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-28480 CVE-2021-28481 CVE-2021-28482 CVE-2021-28483 CVE-2021-27095 CVE-2021-28315 CVE-2021-28460 CVE-2021-28445 CVE-2021-27072 CVE-2021-28310

Tags: cve-2021-28480 cve-2021-28481 cve-2021-28482 cve-2021-28483 cve-2021-27095 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-28445 +3 related CVEs CVE-2021-27095 CVE-2021-28315 CVE-2021-27072	Windows Network File System Remote Code Execution Vulnerability	8.1 group max	3%		Apr 13, 2021
CVE-2021-28310	Out-of-Bounds Write in Microsoft Win32k Allows Local Privilege Escalation on Windows 10	7.8	8%	KEV	Apr 13, 2021 KEV Nov 3, 2021
CVE-2021-28460	Azure Sphere Unsigned Code Execution Vulnerability	8.1	<1%		Apr 13, 2021
CVE-2021-28480 +3 related CVEs CVE-2021-28481 CVE-2021-28482 CVE-2021-28483	Microsoft Exchange Server Remote Code Execution Vulnerability	9.8 group max	71%		Apr 13, 2021

From the original article

3 min read at blog.talosintelligence.com

Microsoft released its monthly security update Tuesday, disclosing 108 vulnerabilities across its suite of products, the most in any month so far this year. Four new remote code execution vulnerabilities in Microsoft Exchange Server are included in today's security update. Microsoft disclosed multiple zero-day vulnerabilities in Exchange Server earlier this year that attackers were exploiting in the wild.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.