Exploit / PoCcriticalExploited in the wild

Microsoft patches actively exploited zero-day (CVE-2021-36948), more Print Spooler flaws

Help Net Securityby @zeljkazorzAug 10, 2021 · 00:00 UTC (Aug 10, 2021)2 min read2

Read at helpnetsecurity.com

Analyze CVE-2021-36948 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-36948 CVE-2021-36936 CVE-2021-34483 CVE-2021-36947 CVE-2021-36942 CVE-2021-34535

Tags: cve-2021-36948 cve-2021-36936 cve-2021-34483 cve-2021-36947 cve-2021-36942 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-36947 +2 related CVEs CVE-2021-36936 CVE-2021-34483	Windows Print Spooler Remote Code Execution Vulnerability	8.8 group max	7%		Aug 12, 2021
CVE-2021-34535	Remote Desktop Client Remote Code Execution Vulnerability	8.8	22%		Aug 12, 2021
CVE-2021-36942 +1 related CVE CVE-2021-36948	Unauthenticated LSA Spoofing (PetitPotam NTLM Relay) in Microsoft Windows	7.5 group max	66%	KEVRansomwarePoC	Aug 12, 2021 KEV Nov 3, 2021

From the original article

2 min read at helpnetsecurity.com

Microsoft’s August 2021 Patch Tuesday is pretty lightweight, through it covers a wide variety of Microsoft solutions. 44 CVE-numbered security holes have been plugged, seven of which are critical, and one is actively exploited (CVE-2021-36948). Let’s start with the zero-day.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.