Vulnerabilitycritical
Microsoft Patch Tuesday for Jan. 2021 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1643 | HEVC Video Extensions Remote Code Execution Vulnerability | 7.8 | 4% | ||
| CVE-2021-1647 | Remote Code Execution Vulnerability in Microsoft Defender Antimalware Engine | 7.8 | 40% | KEV | KEV |
CVE-2021-1648+1 related CVE | Microsoft splwow64 Elevation of Privilege Vulnerability | 7.8 group max | 1% | ||
| CVE-2021-1677 | Azure Active Directory Pod Identity Spoofing Vulnerability | 5.5 | 1% | ||
| CVE-2021-1705 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability | 4.2 | 2% | ||
| CVE-2021-1707 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 4% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across its suite of products to kick-off 2021. There are only 10 critical vulnerabilities as part of this release, while there are two moderate-severity exploits, and the remainder is considered “important.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.