Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-33771+1 related CVE | Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild (CVE-2021-33771) | 7.8 | 10% | KEV | KEV |
| CVE-2021-33779 | Windows AD FS Security Feature Bypass Vulnerability | 8.1 | 2% | ||
CVE-2021-34492+1 related CVE | Windows Certificate Spoofing Vulnerability | 8.1 | 2% | ||
| CVE-2021-34448 | Memory Corruption in Microsoft Windows Scripting Engine (In-the-Wild Exploitation) | 6.8 | 40% | KEV | KEV |
| CVE-2021-34458 | Windows Kernel Remote Code Execution Vulnerability | 9.9 | 3% | ||
| CVE-2021-34466 | Windows Hello Security Feature Bypass Vulnerability | 5.7 | <1% | ||
CVE-2021-34473+1 related CVE | SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell) | 9.1 group max | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-34494 | Windows DNS Server Remote Code Execution Vulnerability | 8.8 | 4% | ||
| CVE-2021-34527 | PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler | 8.8 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
3 min read at thehackernews.com
Microsoft rolled out Patch Tuesday updates for the month of July with fixes for a total of 117 security vulnerabilities, including nine zero-day flaws, of which four are said to be under active attacks in the wild, potentially enabling an adversary to take control of affected systems.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.