Microsoft Patches Four More Critical Exchange Server Bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-27091 | RPC Endpoint Mapper Service Elevation of Privilege Vulnerability | 7.8 | <1% | ||
| CVE-2021-28310 | Out-of-Bounds Write in Microsoft Win32k Allows Local Privilege Escalation on Windows 10 | 7.8 | 8% | KEV | KEV |
CVE-2021-28480+3 related CVEs | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.8 group max | 71% |
From the original article
1 min read at infosecurity-magazine.com
Microsoft released patches for over 100 flaws for the first time this year yesterday, including one being actively exploited in the wild and four new critical Exchange Server bugs reported by the NSA. The haul of 110 CVEs will keep sysadmins busy, with experts highlighting the zero-day elevation of privilege flaw in Win32k ( CVE-2021-28310 ) as worthy of attention.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.