VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, April 2021 Edition

Krebs on SecurityApr 15, 2021 · 00:00 UTC (Apr 15, 2021)3 min read3 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-28480 CVE-2021-28481 CVE-2021-28482 CVE-2021-28483 CVE-2021-28310 CVE-2021-28454 CVE-2021-28451 CVE-2021-28453 CVE-2021-28449

Tags: cve-2021-28480 cve-2021-28481 cve-2021-28482 cve-2021-28483 cve-2021-28310 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-28310	Out-of-Bounds Write in Microsoft Win32k Allows Local Privilege Escalation on Windows 10	7.8	8%	KEV	Apr 13, 2021 KEV Nov 3, 2021
CVE-2021-28453 +3 related CVEs CVE-2021-28454 CVE-2021-28449 CVE-2021-28451	Microsoft Word Remote Code Execution Vulnerability	7.8	4%		Apr 13, 2021
CVE-2021-28480 +3 related CVEs CVE-2021-28481 CVE-2021-28482 CVE-2021-28483	Microsoft Exchange Server Remote Code Execution Vulnerability	9.8 group max	71%		Apr 13, 2021

From the original article

3 min read at krebsonsecurity.com

Microsoft today released updates to plug at least 110 security holes in its Windows operating systems and other products. The patches include four security fixes for Microsoft Exchange Server — the same systems that have been besieged by attacks on four separate (and zero-day) bugs in the email software over the past month. Redmond also patched a Windows flaw that is actively being exploited in the wild.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.