May 2021 Patch Tuesday: Adobe fixes exploited Reader 0-day, Microsoft patches 55 holes
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-24587 | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a… | 2.6 | 3% | PoC | |
| CVE-2021-21084 | AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site… | 6.1 | 2% | ||
| CVE-2021-26419 | Scripting Engine Memory Corruption Vulnerability | 7.5 | 23% | PoC | |
| CVE-2021-27068 | Visual Studio Remote Code Execution Vulnerability | 8.8 | 54% | ||
| CVE-2021-28476 | Windows Hyper-V Remote Code Execution Vulnerability | 9.9 | 39% | ||
| CVE-2021-28550 | Use-After-Free RCE in Adobe Acrobat and Reader | 8.8 | 52% | KEV | KEV |
| CVE-2021-31166 | Use-After-Free RCE in Microsoft Windows HTTP Protocol Stack (http.sys) | 9.8 | 100% | KEV | KEV |
From the original article
3 min read at helpnetsecurity.com
Adobe has fixed a Reader flaw exploited in attacks in the wild, as well as delivered security updates for eleven other products, including Magento, Adobe InDesign, Adobe After Effects, Adobe Creative Cloud Desktop Application, and others Microsoft has plugged 55 security holes, none actively exploited Adobe has released security updates for 12 of its products, fixing a total of 44 CVE-numbered flaws.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.