July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-0144 | Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local… | 6.7 | <1% | ||
CVE-2021-21994+1 related CVE | SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability | 9.8 group max | 1% | ||
CVE-2021-33771+1 related CVE | Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild (CVE-2021-33771) | 7.8 | 10% | KEV | KEV |
| CVE-2021-34448 | Memory Corruption in Microsoft Windows Scripting Engine (In-the-Wild Exploitation) | 6.8 | 40% | KEV | KEV |
| CVE-2021-34458 | Windows Kernel Remote Code Execution Vulnerability | 9.9 | 3% | ||
| CVE-2021-34466 | Windows Hello Security Feature Bypass Vulnerability | 5.7 | <1% | ||
| CVE-2021-34527 | PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler | 8.8 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
4 min read at helpnetsecurity.com
Microsoft has fixed 117 CVEs, 4 of which are actively exploited Adobe has delivered security updates for Acrobat and Reader, Bridge, Framemaker, Illustrator, and Dimension VMware has fixed two vulnerabilities in VMware ESXi and VMware Cloud Foundation
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.