Microsoft Releases Patch for Actively Exploited Windows Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-36965 | Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | 8.8 group max | 5% | ||
| CVE-2021-36952 | Visual Studio Remote Code Execution Vulnerability | 7.8 | 51% | ||
| CVE-2021-36968 | Windows DNS Elevation of Privilege Vulnerability | 7.8 | <1% | ||
| CVE-2021-38647 | Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI) | 9.8 | 100% | KEVRansomwarePoC | KEV |
CVE-2021-38656+1 related CVE | Microsoft Word Remote Code Execution Vulnerability | 7.8 | 7% | ||
| CVE-2021-40444 | Remote Code Execution via MSHTML Rendering Engine in Microsoft Windows/Office (CVE-2021-40444) | 8.8 | 98% | KEVRansomwarePoC ×2 | KEV |
From the original article
2 min read at thehackernews.com
A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively exploited zero-day in its MSHTML Platform that came to light last week.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.