VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday fixes CVE-2021-40444 MSHTML zero

Security Affairsby @securityaffairsSep 15, 2021 · 05:03 UTC (Sep 15, 2021)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-40444 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-40444 CVE-2021-36965 CVE-2021-38647

Tags: cve-2021-40444 cve-2021-36965 cve-2021-38647 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-36965	Windows WLAN AutoConfig Service Remote Code Execution Vulnerability	8.8	5%		Sep 15, 2021
CVE-2021-38647	Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI)	9.8	100%	KEVRansomwarePoC	Sep 15, 2021 KEV Nov 3, 2021
CVE-2021-40444	Remote Code Execution via MSHTML Rendering Engine in Microsoft Windows/Office (CVE-2021-40444)	8.8	98%	KEVRansomwarePoC ×2	Sep 15, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Microsoft Patch Tuesday security updates for September 2021 addressed a high severity zero-day flaw actively exploited in targeted attacks. Microsoft Patch Tuesday security updates for September 2021 addressed a high severity zero-day RCE actively exploited in targeted attacks aimed at Microsoft Office and Office 365 on Windows 10 computers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.