Vulnerabilitycritical
Microsoft Patch Tuesday for May 2021 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-31166 | Use-After-Free RCE in Microsoft Windows HTTP Protocol Stack (http.sys) | 9.8 | 100% | KEV | KEV |
CVE-2021-31194+1 related CVE | OLE Automation Remote Code Execution Vulnerability | 8.8 group max | 2% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 55 vulnerabilities across its suite of products, the fewest in any month since January 2020. There are only three critical vulnerabilities patched in this month, while two are of “moderate” severity and the rest are “important.” All three critical vulnerabilities, however, are considered "more likely” to be exploited, according to Microsoft.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.