July 2021 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2021-Jul 2021-Jul Final 1.0 29 2026-10-01T14:51:23 July 2021 Security Updates 2021-07-13T07:00:00 2026-10-01T14:51:23 <h2 id="updates-this-month">Updates this Month</h2> <p>This release consists of security updates for the following products, features and roles.</p> <ul> <li>Common Internet File System</li> <li>Dynamics Business Central Control</li> <li>Microsoft Bing</li> <li>Microsoft Dynamics</li> <li>Microsoft Edge (Chromium-based)</li> <li>Microsoft Exchange Server</li> <li>Microsoft Graphics Component</li> <li>Microsoft Office</li> <li>Microsoft Office Excel</li> <li>Microsoft Office SharePoint</li> <li>Microsoft Scripting Engine</li> <li>Microsoft Windows Codecs Library</li> <li>Microsoft Windows DNS</li> <li>Microsoft Windows Media Foundation</li> <li>OpenEnclave</li> <li>Power BI</li> <li>Role: DNS Server</li> <li>Role: Hyper-V</li> <li>Visual Studio Code</li> <li>Visual Studio Code - .NET Runtime</li> <li>Visual Studio Code - Maven for Java Extension</li> <li>Windows Active Directory</li> <li>Windows Address Book</li> <li>Windows AF_UNIX Socket Provider</li> <li>Windows AppContainer</li> <li>Windows AppX Deployment Extensions</li> <li>Windows Authenticode</li> <li>Windows Cloud Files Mini Filter Driver</li> <li>Windows Console Driver</li> <li>Windows Defender</li> <li>Windows Desktop Bridge</li> <li>Windows Event Tracing</li> <li>Windows File History Service</li> <li>Windows Hello</li> <li>Windows HTML Platform</li> <li>Windows Installer</li> <li>Windows Kernel</li> <li>Windows Key Distribution Center</li> <li>Windows Local Security Authority Subsystem Service</li> <li>Windows MSHTML Platform</li> <li>Windows Partition Management Driver</li> <li>Windows PFX Encryption</li> <li>Windows Print Spooler Components</li> <li>Windows Projected File System</li> <li>Windows Remote Access Connection Manager</li> <li>Windows Remote Assistance</li> <li>Windows Secure Kernel Mode</li> <li>Windows Security Account Manager</li> <li>Windows Shell</li> <li>Windows SMB</li> <li>Windows Storage Spaces Controller</li> <li>Windows TCP/IP</li> <li>Windows Win32K</li> </ul> <p>Please note the following information regarding the security updates:</p> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>February 9, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td> </tr> <tr> <td>January 13, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td> </tr> <tr> <td>December 8, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td> </tr> <tr> <td>November 9, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td> </tr> </tbody> </table> <h2 id="relevant-information">Relevant Information</h2> <ul> <li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="faqs-mitigations-and-workarounds">FAQs, Mitigations, and Workarounds</h2> <p>The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting <strong>FAQs</strong>, <strong>Mitigations</strong> and <strong>Workarounds</strong> columns in the <strong>Edit Columns</strong> panel.</p> <ul> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31206">CVE-2021-31206</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31947">CVE-2021-31947</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31961">CVE-2021-31961</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33749">CVE-2021-33749</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33750">CVE-2021-33750</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33752">CVE-2021-33752</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33753">CVE-2021-33753</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33756">CVE-2021-33756</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33757">CVE-2021-33757</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33760">CVE-2021-33760</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33763">CVE-2021-33763</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33764">CVE-2021-33764</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33767">CVE-2021-33767</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33768">CVE-2021-33768</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33775">CVE-2021-33775</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33776">CVE-2021-33776</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33777">CVE-2021-33777</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33778">CVE-2021-33778</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33783">CVE-2021-33783</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34440">CVE-2021-34440</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34447">CVE-2021-34447</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34451">CVE-2021-34451</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34452">CVE-2021-34452</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34454">CVE-2021-34454</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34457">CVE-2021-34457</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34458">CVE-2021-34458</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34464">CVE-2021-34464</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34469">CVE-2021-34469</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34470">CVE-2021-34470</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34474">CVE-2021-34474</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34491">CVE-2021-34491</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34496">CVE-2021-34496</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34497">CVE-2021-34497</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34500">CVE-2021-34500</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34501">CVE-2021-34501</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34507">CVE-2021-34507</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34509">CVE-2021-34509</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34518">CVE-2021-34518</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34519">CVE-2021-34519</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34521">CVE-2021-34521</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34522">CVE-2021-34522</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34527">CVE-2021-34527</a></li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5001975">5001975</a></td> <td>SharePoint Server 2019</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5001976">5001976</a></td> <td>SharePoint Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5001992">5001992</a></td> <td>Microsoft SharePoint Foundation 2013 Service Pack 1</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004237">5004237</a></td> <td>Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2, Windows 10, Version 21H1</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004238">5004238</a></td> <td>Windows 10, Version 1607, Windows Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004244">5004244</a></td> <td>Windows 10, Version 1809, Windows Server 2019</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004245">5004245</a></td> <td>Windows 10, Version 1909</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004285">5004285</a></td> <td>Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004289">5004289</a></td> <td>Windows 7 SP1, Windows Server 2008 R2 SP1 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004294">5004294</a></td> <td>Windows Server 2012 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004298">5004298</a></td> <td>Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004299">5004299</a></td> <td>Windows Server 2008 SP2 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004302">5004302</a></td> <td>Windows Server 2012 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004305">5004305</a></td> <td>Windows Server 2008 SP2 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004307">5004307</a></td> <td>Windows 7 SP1, Windows Server 2008 R2 SP1(Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004778">5004778</a></td> <td>Exchange Server 2013</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004779">5004779</a></td> <td>Exchange Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5004780">5004780</a></td> <td>Exchange Server 2019</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Microsoft Exchange Server 2019 Cumulative Update 9 Microsoft Exchange Server 2016 Cumulative Update 20 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8 Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for 32-bit Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server, version 2004 (Server Core installation) Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 HEVC Video Extensions Windows Server, version 1909 (Server Core installation) Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Power BI Desktop Microsoft Bing Search for Android Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for Mac Microsoft Office Online Server Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2019 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Office 2013 RT Service Pack 1 Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Open Enclave SDK Visual Studio Code .NET Education Bundle SDK Install Tool .NET Install Tool for Extension Authors Microsoft Edge (Chromium-based) Microsoft Malware Protection Engine cm1 rubygem-addressable 2.8.0-1 on CBL Mariner 1.0 cm1 golang 1.16.7-1 on CBL Mariner 1.0 cm1 systemd 239-38 on CBL Mariner 1.0 Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.14 Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.8 Microsoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.3 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 R2 (Server Core installation) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 RT Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Windows Server 2016 Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for Mac Microsoft SharePoint Server 2019 Microsoft Office Online Server Visual Studio Code Open Enclave SDK Microsoft Edge (Chromium-based) Microsoft Exchange Server 2013 Cumulative Update 23 Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation) Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server, version 2004 (Server Core installation) Microsoft Bing Search for Android Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) HEVC Video Extensions Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2019 Cumulative Update 9 Microsoft Exchange Server 2016 Cumulative Update 20 Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for 32-bit Systems Microsoft Malware Protection Engine Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10 .NET Education Bundle SDK Install Tool .NET Install Tool for Extension Authors Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.14 Microsoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.3 Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.8 Power BI Desktop Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems cm1 nodejs 14.17.2-1 on CBL Mariner 1.0 cm1 kernel 5.10.60.1-1 on CBL Mariner 1.0 cbl2 kernel 5.10.78.1-1 on CBL Mariner 2.0 cm1 krb5 1.18.4-1 on CBL Mariner 1.0 cbl2 httpd 2.4.52-1 on CBL Mariner 2.0 cbl2 aspell 0.60.8-7 on CBL Mariner 2.0 cbl2 aspell 0.60.8-5 on CBL Mariner 2.0 azl3 rpm-ostree 2024.4-1 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.5.0-4 on Azure Linux 3.0 cm1 kernel 5.10.131.1-1 on CBL Mariner 1.0 cbl2 mysql 8.0.28-1 on CBL Mariner 2.0 azl3 rpm-ostree 2022.1-7 on Azure Linux 3.0 cbl2 kernel 5.15.2.1-1 on CBL Mariner 2.0 cm1 rubygem-elasticsearch 8.2.0-1 on CBL Mariner 1.0 cbl2 moby-containerd 1.4.4+azure-4 on CBL Mariner 2.0 cbl2 krb5 1.19.2-1 on CBL Mariner 2.0 cm1 redis 5.0.14-1 on CBL Mariner 1.0 cm1 golang 1.16.7-1 on CBL Mariner 1.0 cm1 util-linux 2.32.1-5 on CBL Mariner 1.0 cm1 glibc 2.28-19 on CBL Mariner 1.0 cbl2 redis 6.2.5-1 on CBL Mariner 2.0 cm1 rubygem-addressable 2.8.0-1 on CBL Mariner 1.0 cm1 systemd 239-38 on CBL Mariner 1.0 cm1 openvswitch 2.15.1-1 on CBL Mariner 1.0 cbl2 openvswitch 2.17.0-1 on CBL Mariner 2.0 cm1 moby-containerd 1.4.4+azure-2 on CBL Mariner 1.0 cm1 mysql 8.0.26-1 on CBL Mariner 1.0 cm1 ant 1.10.11-1 on CBL Mariner 1.0 cbl2 javapackages-bootstrap 1.5.0-6 on CBL Mariner 2.0 azl3 javapackages-bootstrap 1.14.0-2 on Azure Linux 3.0 azl3 pytorch 2.2.2-4 on Azure Linux 3.0 azl3 pytorch 2.2.2-7 on Azure Linux 3.0 cbl2 terraform 1.3.2-1 on CBL Mariner 2.0 cbl2 wireshark 3.4.14-1 on CBL Mariner 2.0 cbl2 fetchmail 6.4.22-1 on CBL Mariner 2.0 cbl2 linuxptp on CBL Mariner 2.0 azl3 golang 1.27.1-1 on Azure Linux 3.0 azl3 golang 1.26.7-1 on Azure Linux 3.0 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2019-25051 Out-of-bounds Write 17055-16823 17056-16823 17055-16823 17056-16823 Important 17055-16823 Important 17056-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17055-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17056-16823 CBL-Mariner Releases 17055-16823 No Security Update 0.60.8-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17055-16823 CBL-Mariner Releases CBL-Mariner Releases 17056-16823 No Security Update 0.60.8-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17056-16823 CBL-Mariner Releases 1.0 2022-10-30T00:00:00 <p>Information published.</p> In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner elastic Yes CVE-2021-22144 Uncontrolled Recursion 18957-16820 18957-16820 Moderate 18957-16820 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18957-16820 CBL-Mariner Releases 18957-16820 No Security Update 8.2.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18957-16820 CBL-Mariner Releases 1.0 2021-12-01T00:00:00 <p>Information published.</p> Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-22235 Loop with Unreachable Exit Condition ('Infinite Loop') 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Node.js before 16.4.1 14.17.2 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo(). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner hackerone Yes CVE-2021-22918 Out-of-bounds Read 16918-16820 19035-17084 19407-17084 16918-16820 19035-17084 19407-17084 Moderate 16918-16820 Moderate 19035-17084 Moderate 19407-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 16918-16820 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 19035-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 19407-17084 CBL-Mariner Releases 16918-16820 No Security Update 14.17.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16918-16820 CBL-Mariner Releases CBL-Mariner Releases 19035-17084 19407-17084 No Security Update 2.2.2-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19035-17084 19407-17084 CBL-Mariner Releases 1.1 2025-01-30T00:00:00 <p>Added pytorch to Azure Linux 3.0 Added nodejs to CBL-Mariner 1.0</p> 1.0 2021-07-16T00:00:00 <p>Information published.</p> 1.2 2026-02-18T01:07:13 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2021-2339 19031-16820 18806-16823 19031-16820 18806-16823 Moderate 19031-16820 Moderate 18806-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 19031-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18806-16823 CBL-Mariner Releases 19031-16820 No Security Update 8.0.26-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19031-16820 CBL-Mariner Releases CBL-Mariner Releases 18806-16823 No Security Update 8.0.28-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18806-16823 CBL-Mariner Releases 1.0 2021-07-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added mysql to CBL-Mariner 2.0</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2021-2340 19031-16820 18806-16823 19031-16820 18806-16823 Low 19031-16820 Low 18806-16823 2.7 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 19031-16820 2.7 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 18806-16823 CBL-Mariner Releases 19031-16820 No Security Update 8.0.26-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19031-16820 CBL-Mariner Releases CBL-Mariner Releases 18806-16823 No Security Update 8.0.28-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18806-16823 CBL-Mariner Releases 1.0 2021-07-23T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added mysql to CBL-Mariner 2.0</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2021-2352 19031-16820 18806-16823 19031-16820 18806-16823 Moderate 19031-16820 Moderate 18806-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 19031-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18806-16823 CBL-Mariner Releases 19031-16820 No Security Update 8.0.26-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19031-16820 CBL-Mariner Releases CBL-Mariner Releases 18806-16823 No Security Update 8.0.28-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18806-16823 CBL-Mariner Releases 1.0 2021-07-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added mysql to CBL-Mariner 2.0</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2021-2354 19031-16820 18806-16823 19031-16820 18806-16823 Moderate 19031-16820 Moderate 18806-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 19031-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18806-16823 CBL-Mariner Releases 19031-16820 No Security Update 8.0.26-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19031-16820 CBL-Mariner Releases CBL-Mariner Releases 18806-16823 No Security Update 8.0.28-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18806-16823 CBL-Mariner Releases 1.0 2021-07-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added mysql to CBL-Mariner 2.0</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2021-2356 19031-16820 18806-16823 19031-16820 18806-16823 Moderate 19031-16820 Moderate 18806-16823 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H 19031-16820 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H 18806-16823 CBL-Mariner Releases 19031-16820 No Security Update 8.0.26-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19031-16820 CBL-Mariner Releases CBL-Mariner Releases 18806-16823 No Security Update 8.0.28-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18806-16823 CBL-Mariner Releases 1.0 2021-07-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added mysql to CBL-Mariner 2.0</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2021-2357 19031-16820 18806-16823 19031-16820 18806-16823 Moderate 19031-16820 Moderate 18806-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 19031-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18806-16823 CBL-Mariner Releases 19031-16820 No Security Update 8.0.26-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19031-16820 CBL-Mariner Releases CBL-Mariner Releases 18806-16823 No Security Update 8.0.28-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18806-16823 CBL-Mariner Releases 1.0 2021-07-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added mysql to CBL-Mariner 2.0</p> arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-29657 Use After Free 16919-16820 16920-16823 16919-16820 16920-16823 Important 16919-16820 Important 16920-16823 7.4 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 16919-16820 7.4 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 16920-16823 CBL-Mariner Releases 16919-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16919-16820 CBL-Mariner Releases CBL-Mariner Releases 16920-16823 No Security Update 5.10.78.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16920-16823 CBL-Mariner Releases 1.0 2021-08-12T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> Integer Overflow in Chunked Transfer-Encoding <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32714 Integer Overflow or Wraparound 18815-17084 17811-17084 18815-17084 17811-17084 Critical 18815-17084 Critical 17811-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 18815-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 17811-17084 CBL-Mariner Releases 18815-17084 17811-17084 No Security Update 2024.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18815-17084 17811-17084 CBL-Mariner Releases 1.0 2024-09-11T00:00:00 <p>Information published.</p> 1.1 2026-02-18T14:49:54 <p>Information published.</p> Lenient Parsing of Content-Length Header When Prefixed with Plus Sign <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32715 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 17811-17084 18815-17084 17811-17084 18815-17084 Moderate 17811-17084 Moderate 18815-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 17811-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 18815-17084 CBL-Mariner Releases 17811-17084 18815-17084 No Security Update 2024.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17811-17084 18815-17084 CBL-Mariner Releases 1.0 2024-09-11T00:00:00 <p>Information published.</p> 1.1 2026-02-18T15:11:39 <p>Information published.</p> Regular Expression Denial of Service in Addressable templates <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32740 Uncontrolled Resource Consumption 19024-16820 19024-16820 Important 19024-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19024-16820 CBL-Mariner Releases 19024-16820 No Security Update 2.8.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19024-16820 CBL-Mariner Releases 1.0 2021-07-30T00:00:00 <p>Information published.</p> Archive package allows chmod of file outside of unpack target directory <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32760 Incorrect Permission Assignment for Critical Resource 19028-16820 18973-16823 19028-16820 18973-16823 Moderate 19028-16820 Moderate 18973-16823 6.3 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L 19028-16820 6.3 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L 18973-16823 CBL-Mariner Releases 19028-16820 18973-16823 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19028-16820 18973-16823 CBL-Mariner Releases 1.0 2021-07-29T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added moby-containerd to CBL-Mariner 2.0</p> Integer overflow issues with *BIT commands on 32-bit systems <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32761 Out-of-bounds Read 18985-16820 19020-16823 18985-16820 19020-16823 Important 18985-16820 Important 19020-16823 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18985-16820 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 19020-16823 CBL-Mariner Releases 18985-16820 No Security Update 5.0.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18985-16820 CBL-Mariner Releases CBL-Mariner Releases 19020-16823 No Security Update 6.2.5-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19020-16823 CBL-Mariner Releases 1.0 2021-07-31T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added redis to CBL-Mariner 2.0</p> Format string bug in the Redis cache implementation <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32785 Use of Externally-Controlled Format String 17030-16823 17030-16823 Important 17030-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17030-16823 CBL-Mariner Releases 17030-16823 No Security Update 2.4.52-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17030-16823 CBL-Mariner Releases 1.0 2021-12-16T00:00:00 <p>Information published.</p> Open Redirect in oidc_validate_redirect_url() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32786 URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) 17030-16823 17030-16823 Moderate 17030-16823 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 17030-16823 CBL-Mariner Releases 17030-16823 No Security Update 2.4.52-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17030-16823 CBL-Mariner Releases 1.0 2021-12-16T00:00:00 <p>Information published.</p> Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32791 Reusing a Nonce, Key Pair in Encryption 17030-16823 17030-16823 Moderate 17030-16823 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 17030-16823 CBL-Mariner Releases 17030-16823 No Security Update 2.4.52-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17030-16823 CBL-Mariner Releases 1.0 2021-12-16T00:00:00 <p>Information published.</p> XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2021-32792 Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) 17030-16823 17030-16823 Moderate 17030-16823 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 17030-16823 CBL-Mariner Releases 17030-16823 No Security Update 2.4.52-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17030-16823 CBL-Mariner Releases 1.0 2021-12-16T00:00:00 <p>Information published.</p> fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations leading to an integer overflow an Out-of-bounds Write and escalation to root by an unprivileged user aka CID-8cae8cd89f05. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-33909 Out-of-bounds Write 16919-16820 16920-16823 16919-16820 16920-16823 Important 16919-16820 Important 16920-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 16919-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 16920-16823 CBL-Mariner Releases 16919-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16919-16820 CBL-Mariner Releases CBL-Mariner Releases 16920-16823 No Security Update 5.10.78.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16920-16823 CBL-Mariner Releases 1.0 2021-07-30T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> basic/unit-name.c in systemd prior to 246.15 247.8 248.5 and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-33910 Allocation of Resources Without Limits or Throttling 19025-16820 19025-16820 Moderate 19025-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19025-16820 CBL-Mariner Releases 19025-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19025-16820 CBL-Mariner Releases 1.0 2021-07-30T00:00:00 <p>Information published.</p> The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange allowing a malicious TLS server to cause a TLS client to panic. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-34558 Improper Certificate Validation 21857-17084 21809-17084 19007-16820 21857-17084 21809-17084 19007-16820 Moderate 21857-17084 Moderate 21809-17084 Moderate 19007-16820 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21857-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21809-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19007-16820 Release Notes 21857-17084 21809-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 Release Notes CBL-Mariner Releases 19007-16820 No Security Update 1.16.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19007-16820 CBL-Mariner Releases 2.0 2026-10-01T01:10:19 <p>Information published.</p> 3.0 2026-10-01T14:51:23 <p>Information published.</p> 1.0 2021-07-31T00:00:00 <p>Information published.</p> kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG verification that a kernel module is signed for loading via init_module does not occur for a module.sig_enforce=1 command-line argument. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-35039 Improper Verification of Cryptographic Signature 16919-16820 16920-16823 16919-16820 16920-16823 Important 16919-16820 Important 16920-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 16919-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 16920-16823 CBL-Mariner Releases 16919-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16919-16820 CBL-Mariner Releases CBL-Mariner Releases 16920-16823 No Security Update 5.10.78.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16920-16823 CBL-Mariner Releases 1.0 2021-07-16T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-3571 Improper Restriction of Operations within the Bounds of a Memory Buffer 19644-16823 19644-16823 Important 19644-16823 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 19644-16823 CBL-Mariner Releases 19644-16823 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19644-16823 CBL-Mariner Releases 1.0 2025-10-01T23:11:10 <p>Information published.</p> The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted crafted pattern potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-35942 Integer Overflow or Wraparound 19019-16820 19019-16820 Critical 19019-16820 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 19019-16820 CBL-Mariner Releases 19019-16820 No Security Update 2.28-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19019-16820 CBL-Mariner Releases 1.0 2021-08-03T00:00:00 <p>Information published.</p> ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-36222 NULL Pointer Dereference 17015-16820 18984-16823 17015-16820 18984-16823 Important 17015-16820 Important 18984-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17015-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18984-16823 CBL-Mariner Releases 17015-16820 No Security Update 1.18.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17015-16820 CBL-Mariner Releases CBL-Mariner Releases 18984-16823 No Security Update 1.19.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18984-16823 CBL-Mariner Releases 1.0 2021-10-15T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added krb5 to CBL-Mariner 2.0</p> HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token allowing privilege escalation to organization owner. Fixed in v202107-1. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-36230 Incorrect Authorization 19466-16823 19466-16823 Important 19466-16823 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19466-16823 CBL-Mariner Releases 19466-16823 No Security Update 1.3.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19466-16823 CBL-Mariner Releases 1.0 2022-04-02T00:00:00 <p>Information published.</p> Apache Ant TAR archive denial of service vulnerability <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner apache Yes CVE-2021-36373 Improper Handling of Length Parameter Inconsistency 19032-16820 19033-16823 19034-17084 18347-17084 19032-16820 19033-16823 19034-17084 18347-17084 Moderate 19032-16820 Moderate 19033-16823 Moderate 19034-17084 Moderate 18347-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19032-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19033-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19034-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 18347-17084 CBL-Mariner Releases 19032-16820 No Security Update 1.10.11-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19032-16820 CBL-Mariner Releases CBL-Mariner Releases 19033-16823 No Security Update 1.5.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19033-16823 CBL-Mariner Releases CBL-Mariner Releases 19034-17084 18347-17084 No Security Update 1.14.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19034-17084 18347-17084 CBL-Mariner Releases 1.3 2026-02-19T01:04:35 <p>Information published.</p> 1.0 2021-07-17T00:00:00 <p>Information published.</p> 1.1 2024-06-30T07:00:00 <p>Information published.</p> 1.2 2025-03-04T00:00:00 <p>Added javapackages-bootstrap to CBL-Mariner 2.0 Added javapackages-bootstrap to Azure Linux 3.0 Added ant to CBL-Mariner 1.0</p> Apache Ant ZIP and ZIP based archive denial of service vulerability <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner apache Yes CVE-2021-36374 Improper Handling of Length Parameter Inconsistency 19032-16820 19033-16823 19034-17084 18347-17084 19032-16820 19033-16823 19034-17084 18347-17084 Moderate 19032-16820 Moderate 19033-16823 Moderate 19034-17084 Moderate 18347-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19032-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19033-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19034-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 18347-17084 CBL-Mariner Releases 19032-16820 No Security Update 1.10.11-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19032-16820 CBL-Mariner Releases CBL-Mariner Releases 19033-16823 No Security Update 1.5.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19033-16823 CBL-Mariner Releases CBL-Mariner Releases 19034-17084 18347-17084 No Security Update 1.14.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19034-17084 18347-17084 CBL-Mariner Releases 1.3 2026-02-19T01:04:48 <p>Information published.</p> 1.0 2021-07-17T00:00:00 <p>Information published.</p> 1.1 2024-06-30T07:00:00 <p>Information published.</p> 1.2 2025-03-04T00:00:00 <p>Added javapackages-bootstrap to CBL-Mariner 2.0 Added javapackages-bootstrap to Azure Linux 3.0 Added ant to CBL-Mariner 1.0</p> report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-36386 Missing Initialization of Resource 19480-16823 19480-16823 Important 19480-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19480-16823 CBL-Mariner Releases 19480-16823 No Security Update 6.4.22-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19480-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-36980 Use After Free 19026-16820 19027-16823 19026-16820 19027-16823 Moderate 19026-16820 Moderate 19027-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19026-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19027-16823 CBL-Mariner Releases 19026-16820 No Security Update 2.15.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19026-16820 CBL-Mariner Releases CBL-Mariner Releases 19027-16823 No Security Update 2.17.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19027-16823 CBL-Mariner Releases 1.0 2021-07-29T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added openvswitch to CBL-Mariner 2.0</p> hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state leading to a use-after-free and a double free. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-37159 Double Free 18667-16820 18929-16823 18667-16820 18929-16823 Moderate 18667-16820 Moderate 18929-16823 6.4 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 18667-16820 6.4 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 18929-16823 CBL-Mariner Releases 18667-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18667-16820 CBL-Mariner Releases CBL-Mariner Releases 18929-16823 No Security Update 5.15.2.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18929-16823 CBL-Mariner Releases 1.0 2021-07-30T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs aka CID-f62f3c20647e. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-37576 Out-of-bounds Write 16919-16820 16920-16823 16919-16820 16920-16823 Important 16919-16820 Important 16920-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 16919-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 16920-16823 CBL-Mariner Releases 16919-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16919-16820 CBL-Mariner Releases CBL-Mariner Releases 16920-16823 No Security Update 5.10.78.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16920-16823 CBL-Mariner Releases 1.0 2021-08-06T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments and possibly in all realistic environments. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-37600 Integer Overflow or Wraparound 19018-16820 19018-16820 Moderate 19018-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19018-16820 CBL-Mariner Releases 19018-16820 No Security Update 2.32.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19018-16820 CBL-Mariner Releases 1.0 2021-08-10T00:00:00 <p>Information published.</p> Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Microsoft Yes CVE-2021-31196 11887 11888 11682 11906 11908 Remote Code Execution 11887 Remote Code Execution 11888 Remote Code Execution 11682 Remote Code Execution 11906 Remote Code Execution 11908 Important 11887 Important 11888 Important 11682 Important 11906 Important 11908 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11887 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11888 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11682 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11906 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11908 5004780 http://www.microsoft.com/download/details.aspx?familyid=a78de9ec-af4e-4e31-be7d-17db9fc335db 5003435 11887 Yes Security Update 15.02.0858.015 https://support.microsoft.com/help/5004780 11887 5004780 5004780 https://support.microsoft.com/help/5004780 11887 11908 5004779 http://www.microsoft.com/download/details.aspx?familyid=61d75c2f-8b98-4971-b22c-ebd114772d3d 5003435 11888 Yes Security Update 15.01.2242.012 https://support.microsoft.com/help/5004779 11888 5004779 5004779 https://support.microsoft.com/help/5004779 11888 11906 5004778 http://www.microsoft.com/download/details.aspx?familyid=cae731a5-0d00-4f76-b2c6-84bd511e529f 5003435 11682 Yes Security Update 15.00.1497.023 https://support.microsoft.com/help/5004778 11682 5004778 5004778 https://support.microsoft.com/help/5004778 11682 5004779 http://www.microsoft.com/download/details.aspx?familyid=ccf40c19-2653-4b5c-b922-d6d09bbf1c3e 5003435 11906 Yes Security Update 15.01.2308.014 https://support.microsoft.com/help/5004779 11906 5004779 5004780 http://www.microsoft.com/download/details.aspx?familyid=07683b40-1608-437d-a90a-eb2683cb3092 5003435 11908 Yes Security Update 15.02.0922.013 https://support.microsoft.com/help/5004780 11908 5004780 <a href="https://twitter.com/orange_8361">Orange Tsai (@orange_8361)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows TCP/IP Driver Denial of Service Vulnerability Windows TCP/IP Microsoft Yes CVE-2021-31183 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10047 Denial of Service 10048 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> Power BI Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user import a specially crafted visual, such as a chart or a graph, and edit data within the visual.</p> Power BI Microsoft Yes CVE-2021-31984 11915 Remote Code Execution 11915 Important 11915 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.6 6.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C 11915 Details https://www.microsoft.com/en-us/download/details.aspx?id=58494 11915 Maybe Security Update > 2.94.781.0 https://www.microsoft.com/en-us/download/details.aspx?id=58494 11915 Details Daniel Gonzalez Carlos Alberca 1.0 2021-07-13T07:00:00 <p>Information published.</p> 2.0 2021-07-22T07:00:00 <p>In the Security Updates table, corrected the product affected by this vulnerability. The affected product is Power BI Desktop.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p><strong>My system is in a disconnected environment; is it vulnerable?</strong></p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>If your device manufacturer preinstalled this app, package versions <strong>1.0.41483.0</strong> and later contain this update.</p> <p>If you purchased this app from the Microsoft Store, package versions <strong>1.0.41531.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-31947 11808 Remote Code Execution 11808 Important 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Update Information 11808 Maybe Security Update 1.0.41531.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 11808 Update Information Le Huu Quang Linh (<a href="https://twitter.com/linhlhq">@linhlhq</a>) of <a href="https://starlabs.sg/">STARLabs</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Media Remote Code Execution Vulnerability Microsoft Windows Codecs Library Microsoft Yes CVE-2021-33740 11568 11569 11570 11571 11572 11766 11767 11768 11769 10729 10735 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 10729 Remote Code Execution 10735 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11766 Critical 11767 Critical 11768 Critical 11769 Critical 10729 Critical 10735 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 HAO LI of VenusTech ADLab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Bing Search Spoofing Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>A user would have to visit a malicious page or click on a malicious link from within the application.</p> <p><strong>How do I get the update for Bing Search for Android?</strong></p> <ol> <li>Tap the <strong>Google Play</strong> icon on your home screen.</li> <li>Swipe in from the left edge of the screen.</li> <li>Tap <strong>My apps &amp; games</strong>.</li> <li>Tap the Update box next to the <strong>Bing Search app</strong>.</li> </ol> <p><strong>Is there a direct link on the web?</strong></p> <p>Yes: <a href="https://play.google.com/store/apps/details?id=com.microsoft.bing&amp;hl=en_US">https://play.google.com/store/apps/details?id=com.microsoft.bing&amp;hl=en_US</a></p> Microsoft Bing Microsoft Yes CVE-2021-33753 11771 Spoofing 11771 Important 11771 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:U/RL:O/RC:C 11771 <a href="https://twitter.com/imnarendrabhati">Narendra Bhati</a> with <a href="https://www.sumasoft.com/">Lead Penetration Tester at Suma Soft Pvt. Ltd. India</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability Role: Windows Hyper-V Microsoft Yes CVE-2021-33755 11569 11571 11572 11713 11896 11768 11769 11803 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11713 Denial of Service 11896 Denial of Service 11768 Denial of Service 11769 Denial of Service 11803 Important 11569 Important 11571 Important 11572 Important 11713 Important 11896 Important 11768 Important 11769 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11569 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11569 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11569 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11713 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11713 5004245 5004245 https://support.microsoft.com/help/5004245 11713 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11768 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 Microsoft Platform Security Assurance & Vulnerability Research 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability <p><strong>How do the security updates released on July 13, 2021 provide protections for CVE-2021-33757?</strong></p> <p>After the security updates released on July 13, 2021 or later are installed, Advanced Encryption Standard (AES) encryption will be the preferred method when using the MS-SAMR protocol to change or set account passwords on Windows clients if AES encryption is supported by the SAM server. Please see [KB5004605: Update adds AES encryption protections for CVE-2021-33757[(https://support.microsoft.com/help/5004605) for the following information:</p> <ul> <li>Changes made by this update</li> <li>How does this new behavior work?</li> <li>Event logging</li> <li>Registry settings</li> <li>FAQ</li> </ul> Windows Security Account Manager Microsoft Yes CVE-2021-33757 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11570 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11712 Security Feature Bypass 11713 Security Feature Bypass 11714 Security Feature Bypass 11896 Security Feature Bypass 11897 Security Feature Bypass 11898 Security Feature Bypass 11766 Security Feature Bypass 11767 Security Feature Bypass 11768 Security Feature Bypass 11769 Security Feature Bypass 11801 Security Feature Bypass 11802 Security Feature Bypass 11803 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10047 Security Feature Bypass 10048 Security Feature Bypass 10481 Security Feature Bypass 10482 Security Feature Bypass 10484 Security Feature Bypass 9312 Security Feature Bypass 10287 Security Feature Bypass 9318 Security Feature Bypass 9344 Security Feature Bypass 10051 Security Feature Bypass 10049 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability Role: Windows Hyper-V Microsoft Yes CVE-2021-33758 10853 10816 10855 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10853 10816 10855 Huichen Lin and Dong Seong Kim of <a href="https://www.itee.uq.edu.au/">School of Information Technology and Electrical Engineering - The University of Queensland</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Desktop Bridge Elevation of Privilege Vulnerability Windows Desktop Bridge Microsoft Yes CVE-2021-33759 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 Tao Yan (<a href="https://twitter.com/Ga1ois">@Ga1ois</a>) from Palo Alto Networks 1.0 2021-07-13T07:00:00 <p>Information published.</p> Media Foundation Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-33760 11712 11713 11714 11715 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11715 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Important 11712 Important 11713 Important 11714 Important 11715 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11715 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 11715 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 11715 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 11715 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 jackery Phan Thanh Duy, Brandon Chong, Cao YiTian of STAR Labs & Hồng Phi Phạm 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Microsoft Yes CVE-2021-33761 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2021-33763 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Installer Spoofing Vulnerability Windows Installer Microsoft Yes CVE-2021-33765 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Spoofing 11568 Spoofing 11569 Spoofing 11570 Spoofing 11571 Spoofing 11572 Spoofing 11712 Spoofing 11713 Spoofing 11714 Spoofing 11896 Spoofing 11897 Spoofing 11898 Spoofing 11766 Spoofing 11767 Spoofing 11768 Spoofing 11769 Spoofing 11801 Spoofing 11802 Spoofing 11803 Spoofing 10729 Spoofing 10735 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10047 Spoofing 10048 Spoofing 10481 Spoofing 10482 Spoofing 10484 Spoofing 9312 Spoofing 10287 Spoofing 9318 Spoofing 9344 Spoofing 10051 Spoofing 10049 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11570 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11712 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11713 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11714 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11896 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11897 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11898 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11766 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11767 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11768 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11769 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11801 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11802 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11803 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10729 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10735 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10047 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10048 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10481 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10482 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10484 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 9312 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10287 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 9318 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 9344 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10051 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10049 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Ron Waisberg (@epsilan) of <a href="http://okta.com">Okta</a> Asaf Rubinfeld of Fortinet’s <a href="https://www.fortiguard.com/">FortiGuard Labs</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Microsoft Yes CVE-2021-33771 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11570 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11712 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11713 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11714 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11896 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11897 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11898 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11766 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11767 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11768 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11769 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11801 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11802 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11803 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10481 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10482 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10484 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 Microsoft Threat Intelligence Center (MSTIC)<br> Microsoft Security Response Center (MSRC) 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Microsoft Yes CVE-2021-33773 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Microsoft Yes CVE-2021-33774 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 He YiSheng, Zhang WangJunJie, and Li WenYue of Hillstone Network Security Research Institute 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>If my server is not configured to be a DNS server, it is vulnerable?</strong></p> <p>No, this vulnerability is only exploitable if the server is configured to be a DNS server.</p> Role: DNS Server Microsoft Yes CVE-2021-33780 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Microsoft Yes CVE-2021-34441 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 HAO LI of VenusTech ADLab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>If my server is not configured to be a DNS server, it is vulnerable?</strong></p> <p>No, this vulnerability is only exploitable if the server is configured to be a DNS server.</p> Role: DNS Server Microsoft Yes CVE-2021-34442 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> ZhiyiZhang from Codesafe Team of Legendsec at Qi'anxin Group 1.0 2021-07-13T07:00:00 <p>Information published.</p> 1.1 2021-09-14T07:00:00 <p>The following revisions have been made: 1) In the Security Updates table, corrected the impact entries to Remote Code Execution. 2) The CVSS scores have been updated. These are informational changes only. Customers who have successfully installed the update do not need to take any further action.</p> Win32k Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Windows Win32K Microsoft Yes CVE-2021-34491 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 RanchoIce of Singular Security Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Certificate Spoofing Vulnerability Windows PFX Encryption Microsoft Yes CVE-2021-34492 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Spoofing 11568 Spoofing 11569 Spoofing 11570 Spoofing 11571 Spoofing 11572 Spoofing 11712 Spoofing 11713 Spoofing 11714 Spoofing 11896 Spoofing 11897 Spoofing 11898 Spoofing 11766 Spoofing 11767 Spoofing 11768 Spoofing 11769 Spoofing 11801 Spoofing 11802 Spoofing 11803 Spoofing 10729 Spoofing 10735 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10047 Spoofing 10048 Spoofing 10481 Spoofing 10482 Spoofing 10484 Spoofing 9312 Spoofing 10287 Spoofing 9318 Spoofing 9344 Spoofing 10051 Spoofing 10049 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11570 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11712 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11713 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11714 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11896 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11897 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11898 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11766 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11767 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11768 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11769 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11801 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11802 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10729 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10735 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10047 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10048 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10481 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10482 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10484 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9312 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10287 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9318 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9344 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10051 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10049 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Partition Management Driver Elevation of Privilege Vulnerability Windows Partition Management Driver Microsoft Yes CVE-2021-34493 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Denial of Service Vulnerability <p><strong>If my server is not configured to be a DNS server, it is vulnerable?</strong></p> <p>No, this vulnerability is only exploitable if the server is configured to be a DNS server.</p> Role: DNS Server Microsoft Yes CVE-2021-34444 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11769 Denial of Service 11803 Denial of Service 10816 Denial of Service 10855 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> Ting Yu from CERT Team of Legendsec at Qi'anxin Group Zhiyi Zhang And Liubenjin from Codesafe Team of Legendsec at Qi'anxin Group 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>If my server is not configured to be a DNS server, it is vulnerable?</strong></p> <p>No, this vulnerability is only exploitable if the server is configured to be a DNS server.</p> Role: DNS Server Microsoft Yes CVE-2021-34494 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11571 Critical 11572 Critical 11769 Critical 11803 Critical 10816 Critical 10855 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Microsoft Yes CVE-2021-34445 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platform Microsoft Yes CVE-2021-34446 11568 11569 11570 11571 11712 11713 11714 11896 11897 11898 11766 11767 11768 11801 11802 10729 10735 10852 10853 10816 10047 10048 10481 10482 10484 9312 9318 10051 10378 10483 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11570 Security Feature Bypass 11571 Security Feature Bypass 11712 Security Feature Bypass 11713 Security Feature Bypass 11714 Security Feature Bypass 11896 Security Feature Bypass 11897 Security Feature Bypass 11898 Security Feature Bypass 11766 Security Feature Bypass 11767 Security Feature Bypass 11768 Security Feature Bypass 11801 Security Feature Bypass 11802 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10047 Security Feature Bypass 10048 Security Feature Bypass 10481 Security Feature Bypass 10482 Security Feature Bypass 10484 Security Feature Bypass 9312 Security Feature Bypass 9318 Security Feature Bypass 10051 Security Feature Bypass 10378 Security Feature Bypass 10483 Important 11568 Important 11569 Important 11570 Important 11571 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11801 Important 11802 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9318 Important 10051 Important 10378 Important 10483 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11570 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11712 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11713 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11714 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11896 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11897 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11898 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11766 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11767 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11768 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11801 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11802 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10729 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10735 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10047 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10048 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10481 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10482 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10484 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 9312 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 9318 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10051 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11801 11802 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10047 10048 10051 jscript9.dll;mshtml.dll;urlmon.dll 0001-01-01T00:00:00 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10047 10048 10051 5005563 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10481 10482 9312 9318 10378 10483 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10481 10482 9312 9318 10378 10483 5005563 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 9318 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 9318 5004305 5004305 https://support.microsoft.com/help/5004305 9312 9318 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 5004294 5004294 https://support.microsoft.com/help/5004294 10378 <a href="https://twitter.com/khangkito">khangkito - Trần Văn Khang</a> with <a href="https://vincss.net/">VinCSS</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p> Microsoft Graphics Component Microsoft Yes CVE-2021-34496 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Zhangjie and willJ 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows MSHTML Platform Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows MSHTML Platform Microsoft Yes CVE-2021-34447 11568 11569 11570 11571 11712 11713 11714 11896 11897 11898 11766 11767 11768 11801 11802 10729 10735 10852 10853 10816 10047 10048 10481 10482 10484 9312 9344 10051 10378 10483 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10378 Remote Code Execution 10483 Important 11568 Important 11569 Important 11570 Important 11571 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11801 Important 11802 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9344 Important 10051 Important 10378 Important 10483 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11570 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11712 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11713 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11714 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11896 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11897 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11898 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11766 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11767 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11768 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11801 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11802 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10729 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10735 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10047 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10048 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10481 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10482 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10484 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9312 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9344 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10051 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11801 11802 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10047 10048 10051 jscript9.dll;mshtml.dll;urlmon.dll 0001-01-01T00:00:00 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10047 10048 10051 5005563 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10481 10482 9312 9344 10378 10483 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10481 10482 9312 9344 10378 10483 5005563 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 5004294 5004294 https://support.microsoft.com/help/5004294 10378 <a href="https://twitter.com/guhe120">Yuki Chen</a> <a href="https://twitter.com/guhe120">Yuki Chen</a> <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows MSHTML Platform Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows MSHTML Platform Microsoft Yes CVE-2021-34497 11568 11569 11570 11571 11712 11713 11714 11896 11897 11898 11766 11767 11768 11801 11802 10729 10735 10852 10853 10816 10047 10048 10481 10482 10484 9312 9318 10051 10378 10483 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 9318 Remote Code Execution 10051 Remote Code Execution 10378 Remote Code Execution 10483 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11766 Critical 11767 Critical 11768 Critical 11801 Critical 11802 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 9318 Critical 10051 Critical 10378 Critical 10483 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11570 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11712 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11713 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11714 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11896 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11897 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11898 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11766 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11767 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11768 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11801 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11802 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10729 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10735 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10047 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10048 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10481 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10482 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10484 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9312 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9318 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10051 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11801 11802 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10047 10048 10051 jscript9.dll;mshtml.dll;urlmon.dll 0001-01-01T00:00:00 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10047 10048 10051 5005563 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10481 10482 9312 9318 10378 10483 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10481 10482 9312 9318 10378 10483 5005563 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 9318 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 9318 5004305 5004305 https://support.microsoft.com/help/5004305 9312 9318 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 5004294 5004294 https://support.microsoft.com/help/5004294 10378 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p> Microsoft Scripting Engine Microsoft Yes CVE-2021-34448 11568 11569 11570 11571 11712 11713 11714 11896 11897 11898 11766 11767 11768 11801 11802 10729 10735 10852 10853 10816 10047 10048 10481 10482 10484 10051 10378 10483 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 10051 Remote Code Execution 10378 Remote Code Execution 10483 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11766 Critical 11767 Critical 11768 Critical 11801 Critical 11802 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 10051 Critical 10378 Critical 10483 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11568 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11569 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11570 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11571 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11712 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11713 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11714 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11896 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11897 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11898 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11766 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11767 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11768 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11801 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 11802 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10729 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10735 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10852 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10853 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10816 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10047 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10048 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10481 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10482 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10484 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10051 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10378 6.8 6.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C 10483 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11801 11802 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10047 10048 10051 jscript9.dll;mshtml.dll;urlmon.dll 0001-01-01T00:00:00 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10047 10048 10051 5005563 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 5005563 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005563 5005036 10481 10482 10378 10483 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5005563 10481 10482 10378 10483 5005563 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 5004294 5004294 https://support.microsoft.com/help/5004294 10378 yangkang(@dnpushme)&bianliang&wanggang&lihongfei&liujialei of 360 ATA 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability Microsoft Graphics Component Microsoft Yes CVE-2021-34498 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Marcin Wiązowski working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability Windows Win32K Microsoft Yes CVE-2021-34449 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 晏子霜在线征婚 (<a href="https://twitter.com/yanzishuang">@YanZiShuang</a>) of Big CJTeam 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Denial of Service Vulnerability Windows DNS Microsoft Yes CVE-2021-34499 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11769 Denial of Service 11803 Denial of Service 10816 Denial of Service 10855 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>This vulnerability would require an authenticated attacker on a guest VM to send specially crafted file operation requests on the VM to hardware resources on the VM which could result in remote code execution on the host server.</p> Role: Windows Hyper-V Microsoft Yes CVE-2021-34450 11569 11571 11572 11713 11896 11768 11769 11803 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11713 Remote Code Execution 11896 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11803 Critical 11569 Critical 11571 Critical 11572 Critical 11713 Critical 11896 Critical 11768 Critical 11769 Critical 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11569 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11569 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11569 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11713 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11713 5004245 5004245 https://support.microsoft.com/help/5004245 11713 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11768 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 Microsoft Platform Security Assurance & Vulnerability Research 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Kernel Memory Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Guest VM to Hyper-V host server - virtualization security boundary.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory from the file cache. This could include unintentional read access to memory contents in kernel space from a user mode process, and on a Hyper-V server this could result in Guest VM to Hyper-V host server memory content disclosure.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2021-34500 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.3 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5010358 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010358 5009585 10729 10735 Yes Security Update 10.0.10240.19204 https://support.microsoft.com/help/5010358 10729 10735 5010358 5010359 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010359 5009546 10852 10853 10816 10855 Yes Security Update 10.0.14393.4946 https://support.microsoft.com/help/5010359 10852 10853 10816 10855 5010359 5010359 https://support.microsoft.com/help/5010359 10852 10853 10816 10855 5010404 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010404 5009610 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25860 https://support.microsoft.com/help/5010404 10047 10048 10051 10049 5010404 5010404 https://support.microsoft.com/help/5010404 10047 10048 10051 10049 5010422 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010422 10047 10048 10051 10049 Yes Security Only 6.1.7601.25860 https://support.microsoft.com/help/5010422 10047 10048 10051 10049 5010422 5010422 https://support.microsoft.com/help/5010422 10047 10048 10051 10049 5010419 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010419 5009624 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20269 https://support.microsoft.com/help/5010419 10481 10482 10483 10543 5010419 5010419 https://support.microsoft.com/help/5010419 10481 10482 10484 10483 10543 5010395 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010395 10481 10482 10483 10543 Yes Security Only 6.3.9600.20269 https://support.microsoft.com/help/5010395 10481 10482 10483 10543 5010395 5010395 https://support.microsoft.com/help/5010395 10481 10482 10483 10543 5010419 5009624 10484 Yes Monthly Rollup 6.3.9600.20269 https://support.microsoft.com/help/5010419 10484 5010419 5010384 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010384 5009627 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21374 https://support.microsoft.com/help/5010384 9312 10287 9318 9344 5010384 5010384 https://support.microsoft.com/help/5010384 9312 10287 9318 9344 5010403 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010403 9312 10287 9318 9344 Yes Security Only 6.0.6003.21372 https://support.microsoft.com/help/5010403 9312 10287 9318 9344 5010403 5010403 https://support.microsoft.com/help/5010403 9312 10287 9318 9344 5010392 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010392 5009586 10378 10379 Yes Monthly Rollup 6.2.9200.23605 https://support.microsoft.com/help/5010392 10378 10379 5010392 5010392 https://support.microsoft.com/help/5010392 10378 10379 5010412 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010412 10378 10379 Yes Security Only 6.2.9200.23605 https://support.microsoft.com/help/5010412 10378 10379 5010412 5010412 https://support.microsoft.com/help/5010412 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> 2.0 2022-02-08T08:00:00 <p>To comprehensively address CVE-2021-34500, Microsoft has released February 2022 security updates for the following supported editions of Microsoft Windows: Windows 10, Windows 10 Version 1607, Windows 8.1, Windows Server 2012 R2, Windows Server 2012, Windows 7, Windows Server 2008 R2, and Windows Server 2008. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p> Microsoft Excel Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> Microsoft Office Excel Microsoft Yes CVE-2021-34501 11573 11574 11575 11605 11762 11763 10739 10740 10656 10654 10655 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11575 Remote Code Execution 11605 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Important 11573 Important 11574 Important 11575 Important 11605 Important 11762 Important 11763 Important 10739 Important 10740 Important 10656 Important 10654 Important 10655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11575 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11605 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10656 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10654 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10655 Click to Run 11573 11574 11762 11763 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11575 Maybe Security Update 16.51.210711.01 https://go.microsoft.com/fwlink/p/?linkid=831049 11575 Release Notes 5001973 https://www.microsoft.com/download/details.aspx?familyid=2e2849ad-a75c-492a-a7eb-d526558007ce 5001943 11605 Maybe Security Update 16.0.10376.20001 https://support.microsoft.com/kb/5001973 11605 5001973 5001977 https://www.microsoft.com/download/details.aspx?familyid=294515e1-7fc8-40cd-9209-178fb2e6f327 5001947 10739 Maybe Security Update 16.0.5188.100 https://support.microsoft.com/kb/5001977 10739 5001977 5001977 https://www.microsoft.com/download/details.aspx?familyid=896cd62a-4be0-4156-9ba1-b5a7e9cf4e3e 5001947 10740 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001977 10740 5001977 5001993 5001963 10656 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001993 10656 5001993 5001993 https://www.microsoft.com/download/details.aspx?familyid=db0dadc7-f5ad-446c-a614-82f53cd238d4 5001963 10654 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001993 10654 5001993 5001993 https://www.microsoft.com/download/details.aspx?familyid=c6a9d3a8-2288-4536-8dac-6890dadaeb53 5001963 10655 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001993 10655 5001993 14 working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> Microsoft Office Microsoft Yes CVE-2021-34452 11573 11574 11762 11763 10746 10747 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 10746 Remote Code Execution 10747 Important 11573 Important 11574 Important 11762 Important 11763 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 Click to Run 11573 11574 11762 11763 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 Click to Run 5001949 https://www.microsoft.com/download/details.aspx?familyid=412975e0-24eb-4475-bd3f-f066a3aa4a94 5001919 10746 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001949 10746 5001949 5001949 https://www.microsoft.com/download/details.aspx?familyid=d8695ed4-83bd-4f61-b8d0-3d72a3caec5a 5001919 10747 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001949 10747 5001949 Le Huu Quang Linh (<a href="https://twitter.com/linhlhq">@linhlhq</a>) 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Office SharePoint Microsoft Yes CVE-2021-34467 10950 11585 10612 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 10612 Important 10950 Important 11585 Important 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 10950 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 11585 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 10612 5001976 https://www.microsoft.com/download/details.aspx?familyid=1ba6f08d-2275-4acd-96bd-c7334ce29e3f 5001946 10950 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001976 10950 5001976 5001976 https://support.microsoft.com/help/5001976 10950 5001975 https://www.microsoft.com/download/details.aspx?familyid=5fcd24e6-d6a0-457d-b178-35028cb34573 5001944 11585 Maybe Security Update 16.0.10376.20001 https://support.microsoft.com/kb/5001975 11585 5001975 5001975 https://support.microsoft.com/help/5001975 11585 5001992 https://www.microsoft.com/download/details.aspx?familyid=0f7b1092-d203-481b-b22e-b26aa369534e 5001962 10612 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001992 10612 5001992 5001992 https://support.microsoft.com/help/5001992 10612 Thomas Moore, Signal Hill Technologies, https://www.signalhill.tech 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> Microsoft Office Excel Microsoft Yes CVE-2021-34518 10739 10740 10656 10654 10655 10611 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10611 Important 10739 Important 10740 Important 10656 Important 10654 Important 10655 Important 10611 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10656 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10654 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10655 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10611 5001977 https://www.microsoft.com/download/details.aspx?familyid=294515e1-7fc8-40cd-9209-178fb2e6f327 5001947 10739 Maybe Security Update 16.0.5188.100 https://support.microsoft.com/kb/5001977 10739 5001977 5001977 https://www.microsoft.com/download/details.aspx?familyid=896cd62a-4be0-4156-9ba1-b5a7e9cf4e3e 5001947 10740 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001977 10740 5001977 5001993 5001963 10656 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001993 10656 5001993 5001993 https://www.microsoft.com/download/details.aspx?familyid=db0dadc7-f5ad-446c-a614-82f53cd238d4 5001963 10654 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001993 10654 5001993 5001993 https://www.microsoft.com/download/details.aspx?familyid=c6a9d3a8-2288-4536-8dac-6890dadaeb53 5001963 10655 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001993 10655 5001993 5001986 https://www.microsoft.com/download/details.aspx?familyid=6b20febf-efe6-4780-8475-a1bf26701038 5001956 10611 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001986 10611 5001986 Jinquan(@jq0904) of DBAPPSecurity Lieying Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p> Microsoft Office SharePoint Microsoft Yes CVE-2021-34468 10950 11585 10612 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 10612 Important 10950 Important 11585 Important 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10612 5001976 https://www.microsoft.com/download/details.aspx?familyid=1ba6f08d-2275-4acd-96bd-c7334ce29e3f 5001946 10950 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001976 10950 5001976 5001976 https://support.microsoft.com/help/5001976 10950 5001975 https://www.microsoft.com/download/details.aspx?familyid=5fcd24e6-d6a0-457d-b178-35028cb34573 5001944 11585 Maybe Security Update 16.0.10376.20001 https://support.microsoft.com/kb/5001975 11585 5001975 5001975 https://support.microsoft.com/help/5001975 11585 5001992 https://www.microsoft.com/download/details.aspx?familyid=0f7b1092-d203-481b-b22e-b26aa369534e 5001962 10612 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001992 10612 5001992 5001992 https://support.microsoft.com/help/5001992 10612 Steven Seeley (mr_me) of Source Incite working with Trend Micro Zero Day Initiative 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Information Disclosure Vulnerability <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).</p> Microsoft Office SharePoint Microsoft Yes CVE-2021-34519 10950 11099 10612 Information Disclosure 10950 Information Disclosure 11099 Information Disclosure 10612 Moderate 10950 Moderate 11099 Moderate 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10950 5.3 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 11099 5.3 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10612 5001976 https://www.microsoft.com/download/details.aspx?familyid=1ba6f08d-2275-4acd-96bd-c7334ce29e3f 5001946 10950 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001976 10950 5001976 5001976 https://support.microsoft.com/help/5001976 10950 5001981 https://www.microsoft.com/download/details.aspx?familyid=b0bdc5b3-0a57-41d7-b525-fc0c14ab5cf9 5001922 10950 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001981 10950 5001981 5001984 https://www.microsoft.com/download/details.aspx?familyid=30b6fb89-442b-4921-9b28-cd7c6e9793b9 5001954 11099 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001984 11099 5001984 5001992 https://www.microsoft.com/download/details.aspx?familyid=0f7b1092-d203-481b-b22e-b26aa369534e 5001962 10612 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001992 10612 5001992 5001992 https://support.microsoft.com/help/5001992 10612 5001996 https://www.microsoft.com/download/details.aspx?familyid=717ccbdc-095d-4e1d-8b9c-708b9d6b0401 5001939 10612 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001996 10612 5001996 mr_me working with Trend Micro Zero Day Initiative 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Office Security Feature Bypass Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p> Microsoft Office Microsoft Yes CVE-2021-34469 11573 11574 11762 11763 10753 10754 10603 10601 10602 Security Feature Bypass 11573 Security Feature Bypass 11574 Security Feature Bypass 11762 Security Feature Bypass 11763 Security Feature Bypass 10753 Security Feature Bypass 10754 Security Feature Bypass 10603 Security Feature Bypass 10601 Security Feature Bypass 10602 Important 11573 Important 11574 Important 11762 Important 11763 Important 10753 Important 10754 Important 10603 Important 10601 Important 10602 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11573 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11574 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11762 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11763 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 10753 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 10754 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 10603 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 10601 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 10602 Click to Run 11573 11574 11762 11763 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 Click to Run 5001979 https://www.microsoft.com/download/details.aspx?familyid=13f30032-a28b-4411-a542-92ccd312d3c5 5001950 10753 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001979 10753 5001979 5001979 https://www.microsoft.com/download/details.aspx?familyid=6f827189-feae-4c69-8437-eda7dc74f4ac 5001950 10754 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001979 10754 5001979 5001983 5001950 10603 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001983 10603 5001983 5001983 https://www.microsoft.com/download/details.aspx?familyid=c94de400-f135-456b-87cb-71cc84c03853 5001953 10601 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001983 10601 5001983 5001983 https://www.microsoft.com/download/details.aspx?familyid=142bdde3-f7ba-4221-ab0b-c5c315041c65 5001953 10602 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001983 10602 5001983 Ben Faull of Microsoft Corporation 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Office SharePoint Microsoft Yes CVE-2021-34520 10950 11585 10612 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 10612 Important 10950 Important 11585 Important 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10612 5001976 https://www.microsoft.com/download/details.aspx?familyid=1ba6f08d-2275-4acd-96bd-c7334ce29e3f 5001946 10950 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001976 10950 5001976 5001976 https://support.microsoft.com/help/5001976 10950 5001975 https://www.microsoft.com/download/details.aspx?familyid=5fcd24e6-d6a0-457d-b178-35028cb34573 5001944 11585 Maybe Security Update 16.0.10376.20001 https://support.microsoft.com/kb/5001975 11585 5001975 5001975 https://support.microsoft.com/help/5001975 11585 5001992 https://www.microsoft.com/download/details.aspx?familyid=0f7b1092-d203-481b-b22e-b26aa369534e 5001962 10612 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001992 10612 5001992 5001992 https://support.microsoft.com/help/5001992 10612 Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Raw Image Extension Remote Code Execution Vulnerability <p><strong>Is Windows vulnerable in the default configuration?</strong></p> <p>No. Only customers who have installed this app from the Microsoft Store may be vulnerable.</p> <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p><strong>My system is in a disconnected environment; is it vulnerable?</strong></p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>App package versions <strong>1.0.41311.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.RawImageExtension</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-34521 11713 11714 11896 11897 11898 11801 11802 11803 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 This vulnerability was discovered by Wayne Low of Fortinet’s FortiGuard Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Open Enclave SDK Elevation of Privilege Vulnerability <p><strong>How do I know if I'm affected by this vulnerability?</strong></p> <p>If you have a project that used the Open Enclave SDK and you have not rebuilt it using the latest version of the SDK, you might be affected by this vulnerability. The updated SDK release is available here: <a href="https://github.com/openenclave/openenclave/releases">Open Enclave Releases</a>. Confirm that you are using SDK build v0.17.1 or later.</p> <p>For more information, see <a href="https://github.com/openenclave/openenclave/security/advisories/GHSA-mj87-466f-jq42">Open Enclave SDK Security Advisory for July 13, 2021</a>.</p> OpenEnclave Microsoft Yes CVE-2021-33767 11652 Elevation of Privilege 11652 Important 11652 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11652 Github Advisory https://github.com/openenclave/openenclave/releases 11652 Maybe Security Update 0.17.1 https://github.com/openenclave/openenclave/security/advisories/GHSA-mj87-466f-jq42 11652 Github Advisory <a href="https://twitter.com/corankyu">Zhijingcheng Yu</a> of <a href="https://www.comp.nus.edu.sg/~yuz1996/">National University of Singapore</a> <a href="https://twitter.com/jhcui24">Jinhua Cui</a> of <a href="https://cimcs.github.io/">National University of Defense Technology and National University of Singapore</a> <a href="https://twitter.com/prateekatcs">Prateek Saxena</a> of <a href="https://www.comp.nus.edu.sg/~prateeks/">National University of Singapore</a> <a href="https://twitter.com/shw3ta_shinde">Shweta Shinde</a> of <a href="https://shwetashinde.org">ETH Zurich</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> 1.1 2021-07-13T07:00:00 <p>Updated FAQ information. This is an informational change only.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Microsoft Yes CVE-2021-34523 11682 11887 11888 11856 11857 Elevation of Privilege 11682 Elevation of Privilege 11887 Elevation of Privilege 11888 Elevation of Privilege 11856 Elevation of Privilege 11857 Important 11682 Important 11887 Important 11888 Important 11856 Important 11857 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 9.0 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11682 9.0 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11887 9.0 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11888 9.0 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11856 9.0 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11857 5001779 http://www.microsoft.com/download/details.aspx?familyid=f827ff3b-194c-4470-aa8f-6cedc0d95d07 11682 Yes Security Update 15.00.1497.015 https://support.microsoft.com/help/5001779 11682 5001779 5001779 https://support.microsoft.com/help/5001779 11682 11887 11888 11856 11857 5001779 http://www.microsoft.com/download/details.aspx?familyid=5aa2aaf7-860d-4977-acd4-82096c83c5f0 11887 Yes Security Update 15.02.0858.010 https://support.microsoft.com/help/5001779 11887 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=b13f23a9-5603-4b13-8e16-6d35b5b33524 11888 Yes Security Update 15.01.2242.008 https://support.microsoft.com/help/5001779 11888 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=52da6d67-e0c4-4af0-a133-1e47217b6309 11856 Yes Security Update 15.01.2176.012 https://support.microsoft.com/help/5001779 11856 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=93809dc0-0265-4116-bc51-510ce641008b 11857 Yes Security Update 15.02.0792.013 https://support.microsoft.com/help/5001779 11857 5001779 Orange Tsai(@orange_8361) from DEVCORE Research Team working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published. This CVE was addressed by updates that were released in April 2021, but the CVE was inadvertently omitted from the April 2021 Security Updates. This is an informational change only. Customers who have already installed the April 2021 update do not need to take any further action.</p> Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Microsoft Yes CVE-2021-34473 11682 11887 11888 11856 11857 Remote Code Execution 11682 Remote Code Execution 11887 Remote Code Execution 11888 Remote Code Execution 11856 Remote Code Execution 11857 Critical 11682 Critical 11887 Critical 11888 Critical 11856 Critical 11857 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11682 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11887 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11888 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11856 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11857 5001779 http://www.microsoft.com/download/details.aspx?familyid=f827ff3b-194c-4470-aa8f-6cedc0d95d07 11682 Yes Security Update 15.00.1497.015 https://support.microsoft.com/help/5001779 11682 5001779 5001779 https://support.microsoft.com/help/5001779 11682 11887 11888 11856 11857 5001779 http://www.microsoft.com/download/details.aspx?familyid=5aa2aaf7-860d-4977-acd4-82096c83c5f0 11887 Yes Security Update 15.02.0858.010 https://support.microsoft.com/help/5001779 11887 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=b13f23a9-5603-4b13-8e16-6d35b5b33524 11888 Yes Security Update 15.01.2242.008 https://support.microsoft.com/help/5001779 11888 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=52da6d67-e0c4-4af0-a133-1e47217b6309 11856 Yes Security Update 15.01.2176.012 https://support.microsoft.com/help/5001779 11856 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=93809dc0-0265-4116-bc51-510ce641008b 11857 Yes Security Update 15.02.0792.013 https://support.microsoft.com/help/5001779 11857 5001779 Orange Tsai(@orange_8361) from DEVCORE Research Team working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published. This CVE was addressed by updates that were released in April 2021, but the CVE was inadvertently omitted from the April 2021 Security Updates. This is an informational change only. Customers who have already installed the April 2021 update do not need to take any further action.</p> Windows Projected File System Elevation of Privilege Vulnerability Windows Projected File System Microsoft Yes CVE-2021-33743 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 k0shl 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Microsoft Yes CVE-2021-34460 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 vbty k0shl 1.0 2021-07-13T07:00:00 <p>Information published.</p> Bowser.sys Denial of Service Vulnerability Common Internet File System Microsoft Yes CVE-2021-34476 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10047 Denial of Service 10048 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Laurent Gaffie 1.0 2021-07-13T07:00:00 <p>Information published.</p> 1.1 2021-07-14T07:00:00 <p>Added acknowledgements. This is an informational change only.</p> Visual Studio Code Remote Code Execution Vulnerability Visual Studio Code Microsoft Yes CVE-2021-34528 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.58 https://code.visualstudio.com/updates/v1_58 11622 Release Notes <a href="https://daviddworken.com">David Dworken</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Visual Studio Spoofing Vulnerability Visual Studio Code Microsoft Yes CVE-2021-34479 11622 Spoofing 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.58 https://code.visualstudio.com/updates/v1_58 11622 Release Notes <a href="https://www.linkedin.com/in/shivambathla/">Shivam Bathla</a> (<a href="https://twitter.com/_shivambathla">@_shivambathla</a>) Daniel Santos (https://twitter.com/bananabr) 1.0 2021-07-13T07:00:00 <p>Information published.</p> 1.1 2021-12-06T08:00:00 <p>Added an acknowledgement. This is an informational change only.</p> Chromium: CVE-2021-30559 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30559 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30541 Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30541 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30560 Use after free in Blink XSLT <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30560 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30561 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30561 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30562 Use after free in WebSerial <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30562 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30563 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p>This vulnerability is known to have been exploited in the wild.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30563 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30564 Heap buffer overflow in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>91.0.864.71</td> <td>7/16/2021</td> <td>91.0.4472.164</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30564 11655 11655 11655 Release Notes 11655 No Security Update 91.0.864.71 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-19T07:00:00 <p>Information published.</p> Windows Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker must have the ability to execute code on a victim system to exploit this vulnerability.</p> <p>After installing this security update, you <em>must</em> manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. <strong>Simply installing this security update will not fully mitigate this vulnerability.</strong> See <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.</p> <p><strong>Why doesn't this security update fully mitigate this vulnerabilty?</strong></p> <p>Fully mitigating this vulnerability involves deleting shadow copies of user data. To avoid deleting data without users' consent, we have opted to allow users to delete their shadow copies themselves. See <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.</p> <p><strong>Why doesn't this security update correct the ACLs on <em>all</em> files in %windir%\system32\config?</strong></p> <p>This security update corrects the ACLs on specific system files, including the SAM database, that would allow an attacker to elevate privileges. To avoid unexpected behavior, this security update does not correct the ACLs on every file in %windir%\system32\config.</p> <p><strong>I had manually corrected the ACLs on files in %windir%\system32\config and then deleted the shadow copies of my system volume. Do I need to delete the shadow copies again?</strong></p> <p>No. If you correctly applied the workaround before installing this security update, then you do not need to delete any shadow copies again.</p> Microsoft Windows Microsoft Yes CVE-2021-36934 11568 11569 11570 11712 11713 11714 11896 11897 11898 11766 11767 11768 11801 11802 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11801 Elevation of Privilege 11802 Important 11568 Important 11569 Important 11570 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11801 Important 11802 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11568 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11569 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11570 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11712 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11713 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11714 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11896 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11897 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11898 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11766 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11767 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11768 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11801 7.8 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:T/RC:C 11802 5005030 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005030 5004244 11568 11569 11570 Yes Security Update 10.0.17763.2114 https://support.microsoft.com/help/5005030 11568 11569 11570 5005030 5005030 https://support.microsoft.com/help/5005030 11568 11569 11570 5005031 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005031 5004245 11712 11713 11714 Yes Security Update 10.0.18363.1734 https://support.microsoft.com/help/5005031 11712 11713 11714 5005031 5005031 https://support.microsoft.com/help/5005031 11712 11713 11714 5005033 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005033 5004237 11896 11897 11898 Yes Security Update 10.0.19043.1165 https://support.microsoft.com/help/5005033 11896 11897 11898 5005033 5005033 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005033 5004237 11766 11767 11768 Yes Security Update 10.0.19041.1165 https://support.microsoft.com/help/5005033 11766 11767 11768 5005033 5005033 https://support.microsoft.com/help/5005033 11896 11897 11898 11766 11767 11768 11801 11802 5005033 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005033 5004237 11801 11802 Yes Security Update 10.0.19042.1165 https://support.microsoft.com/help/5005033 11801 11802 5005033 <p>We recommend installing this security update as soon as possible. If you must delay installation of this security update, we recommend this workaround:</p> <p><strong>Restrict access to the contents of %windir%\system32\config</strong></p> <p>Command Prompt (Run as administrator): <code>icacls %windir%\system32\config\*.* /inheritance:e</code></p> <p>Windows PowerShell (Run as administrator): <code>icacls $env:windir\system32\config\*.* /inheritance:e</code></p> <p><strong>Delete Volume Shadow Copy Service (VSS) shadow copies</strong></p> <ol> <li><p>Delete any System Restore points and Shadow volumes that existed prior to restricting access to %windir%\system32\config.</p> </li> <li><p>Create a new System Restore point (if desired).</p> </li> </ol> <p><strong>Impact of workaround</strong> Deleting shadow copies could impact restore operations, including the ability to restore data with third-party backup applications. For more information on how to delete shadow copies, see <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.</p> <p><strong>Note 1</strong> You must restrict access <em>and</em> delete shadow copies to mitigate this vulnerability.</p> <p><strong>Note 2</strong> Even after installing this security update, you <em>must</em> delete all shadow copies of your system volume to fully mitigate this vulnerability.</p> <p><strong>Caution</strong> Restoring your system from a backup could also restore the overly permissive ACLs, and therefore revert your system to a vulnerable state. After restoring a backup, you must verify that the ACLs are correct to ensure that the restore operation did not reintroduce this vulnerability.</p> 1.0 2021-07-20T07:00:00 <p>Information published.</p> 2.0 2021-07-21T07:00:00 <p>CVE updated as follows: 1) In the Security Updates table, affected versions of Windows have been added. 2) Workaround updated to include a link to information on how to delete shadow copies. 3) FAQ removed as it is no longer applicable. This CVE will be updated when more information or updates are available.</p> 3.0 2021-07-23T07:00:00 <p>In the Security Updates table, removed Windows Server, version 20H2 (Server Core Installation) because it is not affected by this vulnerability.</p> 5.0 2021-08-10T07:00:00 <p>CVE updated to announce that Microsoft is releasing the August 2021 security updates for all affected versions of Windows to address this vulnerability. Additionally, other information has been updated to provide further instructions for mitigating this vulnerability, including the following: 1) Executive Summary has been updated 2) Workarounds have been updated 3) FAQs have been added.</p> 5.1 2021-08-12T07:00:00 <p>Updated FAQ information. This is an informational change only.</p> 1.1 2021-07-20T07:00:00 <p>Updated Workaround information. This is an informational change only.</p> 4.0 2021-07-27T07:00:00 <p>The following revisions have been made: 1) Removed Windows Server versions from the Security Updates table as they are not affected by this vulnerability. 2) Updated the Workaround information with a Caution regarding restoring a system from backup.</p> Chromium: CVE-2021-30565 Out of bounds write in Tab Groups <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30565 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30566 Stack buffer overflow in Printing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30566 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30567 Use after free in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30567 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30568 Heap buffer overflow in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30568 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30569 Use after free in sqlite <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30569 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30571 Insufficient policy enforcement in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30571 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30572 Use after free in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30572 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30573 Use after free in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30573 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30574 Use after free in protocol handling <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30574 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30575 Out of bounds read in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30575 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30576 Use after free in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30576 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30577 Insufficient policy enforcement in Installer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30577 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30578 Uninitialized Use in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30578 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30579 Use after free in UI framework <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30579 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30580 Insufficient policy enforcement in Android intents <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30580 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30581 Use after free in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30581 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30582 Inappropriate implementation in Animation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30582 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30583 Insufficient policy enforcement in image handling on Windows <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30583 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30584 Incorrect security UI in Downloads <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30584 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30585 Use after free in sensor handling <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30585 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30586 Use after free in dialog box handling on Windows <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30586 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30587 Inappropriate implementation in Compositing on Windows <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30587 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30588 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30588 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Chromium: CVE-2021-30589 Insufficient validation of untrusted input in Sharing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>92.0.902.55</td> <td>7/22/2021</td> <td>92.0.4515.107</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-30589 11655 11655 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2021-07-22T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Microsoft Yes CVE-2021-36928 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No 6.0 5.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel 11655 Release Notes Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-22T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Microsoft Edge (Chromium-based) Microsoft Yes CVE-2021-36929 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No 6.3 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> with <a href=""></a> 1.0 2021-07-22T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Microsoft Yes CVE-2021-36931 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 11655 Release Notes 11655 No Security Update 92.0.902.55 https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> with <a href=""></a> 1.0 2021-07-22T07:00:00 <p>Information published.</p> Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS) <p><strong>Summary</strong></p> <p>Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers. PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect customers. For example, see <a href="https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2009/974926">Microsoft Security Advisory 974926</a>.</p> <p>To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authentication make use of protections such as <a href="https://docs.microsoft.com/en-us/security-updates/securityadvisories/2009/973811">Extended Protection for Authentication (EPA)</a> or signing features such as SMB signing. PetitPotam takes advantage of servers where Active Directory Certificate Services (AD CS) is not configured with protections for NTLM Relay Attacks. The mitigations outlined in <a href="https://support.microsoft.com/help/5005413">KB5005413</a>* instruct customers on how to protect their AD CS servers from such attacks.</p> <p>You are potentially vulnerable to this attack if you are using Active Directory Certificate Services (AD CS) with any of the following services:</p> <ul> <li>Certificate Authority Web Enrollment</li> <li>Certificate Enrollment Web Service</li> </ul> <p>* <strong>Update - July 28, 2021</strong> <a href="https://support.microsoft.com/help/5005413">KB5005413</a> has been updated to make clearer the steps to take for protecting your systems.</p> Windows NTLM Microsoft Yes ADV210003 10049 10378 10379 10483 10543 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 Spoofing 10049 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Spoofing 11571 Spoofing 11572 Spoofing 11769 Spoofing 11803 Spoofing 10816 Spoofing 10855 Spoofing 9312 Spoofing 10287 Spoofing 9318 Spoofing 9344 Spoofing 10051 Moderate 10049 Moderate 10378 Moderate 10379 Moderate 10483 Moderate 10543 Moderate 11571 Moderate 11572 Moderate 11769 Moderate 11803 Moderate 10816 Moderate 10855 Moderate 9312 Moderate 10287 Moderate 9318 Moderate 9344 Moderate 10051 Publicly Disclosed:Yes;Exploited:No 1.1 2021-07-28T07:00:00 <p>Executive Summary text has been revised, and a statement has been added to inform customers that KB5005413 - <a href="https://support.microsoft.com/help/5005413">https://support.microsoft.com/help/5005413</a> has been revised. These are informational changes only.</p> 1.0 2021-07-23T07:00:00 <p>Information published.</p> Microsoft Exchange Server Remote Code Execution Vulnerability <p><strong>Was this vulnerability found in the 2021 Pwn2Own contest?</strong></p> <p>Yes, this was one of the Exchange Server vulnerabilities found in the 2021 Pwn2Own contest.</p> Microsoft Exchange Server Microsoft Yes CVE-2021-31206 11887 11888 11682 11906 11908 Remote Code Execution 11887 Remote Code Execution 11888 Remote Code Execution 11682 Remote Code Execution 11906 Remote Code Execution 11908 Important 11887 Important 11888 Important 11682 Important 11906 Important 11908 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.6 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C 11887 7.6 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C 11888 7.6 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C 11682 7.6 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C 11906 7.6 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C 11908 5004780 http://www.microsoft.com/download/details.aspx?familyid=a78de9ec-af4e-4e31-be7d-17db9fc335db 5003435 11887 Yes Security Update 15.02.0858.015 https://support.microsoft.com/help/5004780 11887 5004780 5004780 https://support.microsoft.com/help/5004780 11887 11908 5004779 http://www.microsoft.com/download/details.aspx?familyid=61d75c2f-8b98-4971-b22c-ebd114772d3d 5003435 11888 Yes Security Update 15.01.2242.012 https://support.microsoft.com/help/5004779 11888 5004779 5004779 https://support.microsoft.com/help/5004779 11888 11906 5004778 http://www.microsoft.com/download/details.aspx?familyid=cae731a5-0d00-4f76-b2c6-84bd511e529f 5003435 11682 Yes Security Update 15.00.1497.023 https://support.microsoft.com/help/5004778 11682 5004778 5004778 https://support.microsoft.com/help/5004778 11682 5004779 http://www.microsoft.com/download/details.aspx?familyid=ccf40c19-2653-4b5c-b922-d6d09bbf1c3e 5003435 11906 Yes Security Update 15.01.2308.014 https://support.microsoft.com/help/5004779 11906 5004779 5004780 http://www.microsoft.com/download/details.aspx?familyid=07683b40-1608-437d-a90a-eb2683cb3092 5003435 11908 Yes Security Update 15.02.0922.013 https://support.microsoft.com/help/5004780 11908 5004780 Steven Seeley (mr_me) of Source Incite working with Trend Micro Zero Day Initiative 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Microsoft Yes CVE-2021-31979 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11570 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11712 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11713 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11714 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11896 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11897 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11898 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11766 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11767 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11768 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11769 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11801 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11802 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11803 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10047 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10048 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10481 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10482 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10484 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Microsoft Threat Intelligence Center (MSTIC)<br> Microsoft Security Response Center (MSRC) 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows InstallService Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.</p> Windows Installer Microsoft Yes CVE-2021-31961 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11570 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11712 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11713 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11714 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11896 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11897 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11898 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11766 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11767 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11768 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11769 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11801 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11802 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 JeongOh Kyea (@kkokkokye) of THEORI working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Denial of Service Vulnerability <p><strong>If my server is not configured to be a DNS server, it is vulnerable?</strong></p> <p>No, this vulnerability is only exploitable if the server is configured to be a DNS server.</p> Role: DNS Server Microsoft Yes CVE-2021-33745 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11769 Denial of Service 11803 Denial of Service 10816 Denial of Service 10855 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> Ting Yu from CERT Team of Legendsec at Qi'anxin Group ZhiyiZhang from Codesafe Team of Legendsec at Qi'anxin Group 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability Windows DNS Microsoft Yes CVE-2021-33746 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Snap-in Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An administrator would need to view a malicious record in the DNS Snap-in to allow exploitation this vulnerability.</p> Role: DNS Server Microsoft Yes CVE-2021-33749 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Snap-in Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An administrator would need to view a malicious record in the DNS Snap-in to allow exploitation this vulnerability.</p> Role: DNS Server Microsoft Yes CVE-2021-33750 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Microsoft Yes CVE-2021-33751 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 vbty Fabien Perigaud (@0xf4b) from Synacktiv (@Synacktiv) working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Snap-in Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An administrator would need to view a malicious record in the DNS Snap-in to allow exploitation this vulnerability.</p> Role: DNS Server Microsoft Yes CVE-2021-33752 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability Windows DNS Microsoft Yes CVE-2021-33754 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Snap-in Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An administrator would need to view a malicious record in the DNS Snap-in to allow exploitation this vulnerability.</p> Role: DNS Server Microsoft Yes CVE-2021-33756 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Key Distribution Center Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The vulnerable component uses a weak encryption algorithm or cipher. Traffic sent over a network by the vulnerable component could be decrypted and expose information related to a user or service's active session.</p> Windows Key Distribution Center Microsoft Yes CVE-2021-33764 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11769 Information Disclosure 11803 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 Windows Authentication Dev Team 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).</p> Microsoft Exchange Server Microsoft Yes CVE-2021-33766 11887 11888 11682 11856 11857 Information Disclosure 11887 Information Disclosure 11888 Information Disclosure 11682 Information Disclosure 11856 Information Disclosure 11857 Important 11887 Important 11888 Important 11682 Important 11856 Important 11857 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 11887 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 11888 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 11682 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 11856 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 11857 5001779 http://www.microsoft.com/download/details.aspx?familyid=5aa2aaf7-860d-4977-acd4-82096c83c5f0 11887 Yes Security Update 15.02.0858.010 https://support.microsoft.com/help/5001779 11887 5001779 5001779 https://support.microsoft.com/help/5001779 11887 11888 11682 11856 11857 5001779 http://www.microsoft.com/download/details.aspx?familyid=b13f23a9-5603-4b13-8e16-6d35b5b33524 11888 Yes Security Update 15.01.2242.008 https://support.microsoft.com/help/5001779 11888 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=f827ff3b-194c-4470-aa8f-6cedc0d95d07 11682 Yes Security Update 15.00.1497.015 https://support.microsoft.com/help/5001779 11682 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=52da6d67-e0c4-4af0-a133-1e47217b6309 11856 Yes Security Update 15.01.2176.012 https://support.microsoft.com/help/5001779 11856 5001779 5001779 http://www.microsoft.com/download/details.aspx?familyid=93809dc0-0265-4116-bc51-510ce641008b 11857 Yes Security Update 15.02.0792.013 https://support.microsoft.com/help/5001779 11857 5001779 LE XUAN TUYEN - VNPT ISC working with Trend Micro Zero Day Initiative 1.0 2021-07-13T07:00:00 <p>Information published. This CVE was addressed by updates that were released in April 2021, but the CVE was inadvertently omitted from the April 2021 Security Updates. This is an informational change only. Customers who have already installed the April 2021 update do not need to take any further action.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>This vulnerability's attack is limited at the protocol level to a logically adjacent topology. This means it cannot simply be done across the internet, but instead needs something specific tied to the target. Good examples would include the same shared physical network (such as Bluetooth or IEEE 802.11), logical network (local IP subnet), or from within a secure or otherwise limited administrative domain (MPLS, secure VPN to an administrative network zone). This is common to many attacks that require machine-in-the-middle (MITM) type setups or that rely on initially gaining a foothold in another environment.</p> Microsoft Exchange Server Microsoft Yes CVE-2021-33768 11887 11888 11906 11908 Elevation of Privilege 11887 Elevation of Privilege 11888 Elevation of Privilege 11906 Elevation of Privilege 11908 Important 11887 Important 11888 Important 11906 Important 11908 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11887 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11888 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11906 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11908 5004780 http://www.microsoft.com/download/details.aspx?familyid=a78de9ec-af4e-4e31-be7d-17db9fc335db 5003435 11887 Yes Security Update 15.02.0858.015 https://support.microsoft.com/help/5004780 11887 5004780 5004780 https://support.microsoft.com/help/5004780 11887 11908 5004779 http://www.microsoft.com/download/details.aspx?familyid=61d75c2f-8b98-4971-b22c-ebd114772d3d 5003435 11888 Yes Security Update 15.01.2242.012 https://support.microsoft.com/help/5004779 11888 5004779 5004779 https://support.microsoft.com/help/5004779 11888 11906 5004779 http://www.microsoft.com/download/details.aspx?familyid=ccf40c19-2653-4b5c-b922-d6d09bbf1c3e 5003435 11906 Yes Security Update 15.01.2308.014 https://support.microsoft.com/help/5004779 11906 5004779 5004780 http://www.microsoft.com/download/details.aspx?familyid=07683b40-1608-437d-a90a-eb2683cb3092 5003435 11908 Yes Security Update 15.02.0922.013 https://support.microsoft.com/help/5004780 11908 5004780 <a href="https://twitter.com/orange_8361">Orange Tsai (@orange_8361)</a> with <a href="https://devco.re/">DEVCORE</a> <a href="https://twitter.com/D1iv3">Dlive(@D1iv3)</a> of Tencent Security Xuanwu Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows TCP/IP Driver Denial of Service Vulnerability Windows TCP/IP Microsoft Yes CVE-2021-33772 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 Polar Bear at Microsoft 1.0 2021-07-13T07:00:00 <p>Information published.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p><strong>My system is in a disconnected environment; is it vulnerable?</strong></p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>If your device manufacturer preinstalled this app, package versions <strong>1.0.41483.0</strong> and later contain this update.</p> <p>If you purchased this app from the Microsoft Store, package versions <strong>1.0.41531.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-33775 11808 Remote Code Execution 11808 Important 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Update Information 11808 Maybe Security Update 1.0.41531.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 11808 Update Information Dhanesh Kizhakkinan of FireEye Inc. 1.0 2021-07-13T07:00:00 <p>Information published.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p><strong>My system is in a disconnected environment; is it vulnerable?</strong></p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>If your device manufacturer preinstalled this app, package versions <strong>1.0.41483.0</strong> and later contain this update.</p> <p>If you purchased this app from the Microsoft Store, package versions <strong>1.0.41531.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-33776 11808 Remote Code Execution 11808 Important 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Update Information 11808 Maybe Security Update 1.0.41531.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 11808 Update Information Le Huu Quang Linh (<a href="https://twitter.com/linhlhq">@linhlhq</a>) of <a href="https://starlabs.sg/">STARLabs</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p><strong>My system is in a disconnected environment; is it vulnerable?</strong></p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>If your device manufacturer preinstalled this app, package versions <strong>1.0.41483.0</strong> and later contain this update.</p> <p>If you purchased this app from the Microsoft Store, package versions <strong>1.0.41531.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-33777 11808 Remote Code Execution 11808 Important 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Update Information 11808 Maybe Security Update 1.0.41531.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 11808 Update Information Dhanesh Kizhakkinan of FireEye Inc. 1.0 2021-07-13T07:00:00 <p>Information published.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p><strong>My system is in a disconnected environment; is it vulnerable?</strong></p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>If your device manufacturer preinstalled this app, package versions <strong>1.0.41483.0</strong> and later contain this update.</p> <p>If you purchased this app from the Microsoft Store, package versions <strong>1.0.41531.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2021-33778 11808 Remote Code Execution 11808 Important 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Update Information 11808 Maybe Security Update 1.0.41531.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 11808 Update Information Dhanesh Kizhakkinan of FireEye Inc. crashman of codemize security research lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows AD FS Security Feature Bypass Vulnerability <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This vulnerability relates to Primary Refresh Tokens which are usually stored in TPM. These tokens are usually used for SSO for Azure AD accounts. The tokens are not encrypted in a strong enough manner, and an administrator with access to a vulnerable system could extract and potentially decrypt the token for reuse until the token expires or is renewed.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2021-33779 11571 11572 11769 11803 10816 10855 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11769 Security Feature Bypass 11803 Security Feature Bypass 10816 Security Feature Bypass 10855 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11769 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 1.0 2021-07-13T07:00:00 <p>Information published.</p> Azure AD Security Feature Bypass Vulnerability Windows Active Directory Microsoft Yes CVE-2021-33781 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 11926 11927 10852 10853 10816 10855 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11570 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11712 Security Feature Bypass 11713 Security Feature Bypass 11714 Security Feature Bypass 11896 Security Feature Bypass 11897 Security Feature Bypass 11898 Security Feature Bypass 11766 Security Feature Bypass 11767 Security Feature Bypass 11768 Security Feature Bypass 11769 Security Feature Bypass 11801 Security Feature Bypass 11802 Security Feature Bypass 11803 Security Feature Bypass 11926 Security Feature Bypass 11927 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11570 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11712 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11713 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11714 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11896 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11897 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11898 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11766 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11767 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11768 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11769 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11801 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11802 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11926 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11927 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5006674 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674 11926 11927 Yes Security Update 10.0.22000.258 https://support.microsoft.com/help/5006674 11926 11927 5006674 5006669 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669 5005573 10852 10853 10816 10855 Yes Security Update 10.0.14393.4704 https://support.microsoft.com/help/5006669 10852 10853 10816 10855 5006669 2.0 2021-10-12T07:00:00 <p>In the Security Updates table, added all supported versions of Windows 10 Version 1607, Windows Server 2016, and Windows 11 because these versions of Windows 10, Windows Server, and Windows 11 are also affected by this vulnerability. Microsoft strongly recommends that customers running any of these versions install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p> 1.0 2021-07-13T07:00:00 <p>Information published.</p> 1.1 2021-07-14T07:00:00 <p>Corrected CVE title. This is an informational change only.</p> Windows Authenticode Spoofing Vulnerability Windows Authenticode Microsoft Yes CVE-2021-33782 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Spoofing 11568 Spoofing 11569 Spoofing 11570 Spoofing 11571 Spoofing 11572 Spoofing 11712 Spoofing 11713 Spoofing 11714 Spoofing 11896 Spoofing 11897 Spoofing 11898 Spoofing 11766 Spoofing 11767 Spoofing 11768 Spoofing 11769 Spoofing 11801 Spoofing 11802 Spoofing 11803 Spoofing 10729 Spoofing 10735 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10047 Spoofing 10048 Spoofing 10481 Spoofing 10482 Spoofing 10484 Spoofing 9312 Spoofing 10287 Spoofing 9318 Spoofing 9344 Spoofing 10051 Spoofing 10049 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10047 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10048 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 9312 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10287 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 9318 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 9344 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows SMB Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows SMB Microsoft Yes CVE-2021-33783 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2021-33784 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows AF_UNIX Socket Provider Denial of Service Vulnerability Windows AF_UNIX Socket Provider Microsoft Yes CVE-2021-33785 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows LSA Security Feature Bypass Vulnerability <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>A read only domain controller (RODC) is able to delegate rights by granting itself a ticket. A full DC does not validate the ticket thus granting R/W privileges to a DC that should only have read privileges.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2021-33786 11571 11572 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11769 Security Feature Bypass 11803 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 9312 Security Feature Bypass 10287 Security Feature Bypass 9318 Security Feature Bypass 9344 Security Feature Bypass 10051 Security Feature Bypass 10049 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11571 Important 11572 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11769 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9312 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10287 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9318 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 9344 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10051 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10049 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10051 10049 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows LSA Denial of Service Vulnerability Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2021-33788 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10047 Denial of Service 10048 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Font Driver Host Remote Code Execution Vulnerability Microsoft Graphics Component Microsoft Yes CVE-2021-34438 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 <a href="https://twitter.com/yilmazcanyigit">Yiğit Can YILMAZ (@yilmazanyigit)</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Microsoft Yes CVE-2021-34439 10729 10735 10852 10853 10816 10855 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 HAO LI of VenusTech ADLab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Console Driver Elevation of Privilege Vulnerability Windows Console Driver Microsoft Yes CVE-2021-34488 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 Vbty 1.0 2021-07-13T07:00:00 <p>Information published.</p> DirectWrite Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> Microsoft Graphics Component Microsoft Yes CVE-2021-34489 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 HAO LI of VenusTech ADLab 1.0 2021-07-13T07:00:00 <p>Information published.</p> GDI+ Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p> Microsoft Graphics Component Microsoft Yes CVE-2021-34440 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Andy Keqi Hu 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows TCP/IP Driver Denial of Service Vulnerability Windows TCP/IP Microsoft Yes CVE-2021-34490 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Office Online Server Spoofing Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2021-34451 11605 Spoofing 11605 Important 11605 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11605 5001973 https://www.microsoft.com/download/details.aspx?familyid=2e2849ad-a75c-492a-a7eb-d526558007ce 5001943 11605 Maybe Security Update 16.0.10376.20001 https://support.microsoft.com/kb/5001973 11605 5001973 Pio 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Microsoft Yes CVE-2021-34503 11568 11569 11570 11571 11572 11712 11713 11714 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 Phan Thanh Duy (PTDuy) of STAR Labs & Phạm Hồng Phi (4nhdaden) 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.</p> Windows Shell Microsoft Yes CVE-2021-34454 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Address Book Remote Code Execution Vulnerability Windows Address Book Microsoft Yes CVE-2021-34504 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 BOXER (<a href="https://twitter.com/SecBoxer">@SecBoxer</a>) 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows File History Service Elevation of Privilege Vulnerability Windows File History Service Microsoft Yes CVE-2021-34455 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Tao Yan (<a href="https://twitter.com/Ga1ois">@Ga1ois</a>) from Palo Alto Networks 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Microsoft Yes CVE-2021-34456 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2021-34457 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 ziming zhang of Ant Security Light-Year Lab 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Remote Assistance Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows Remote Assistance Microsoft Yes CVE-2021-34507 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Chris Alladoum of SophosLabs, Sophos Ltd Tomer Bar @ SafeBreach and Eran Segal @ SafeBreach 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Kernel Remote Code Execution Vulnerability <p><strong>How do I know if I'm affected by this vulnerability?</strong></p> <p>This issue allows a single root input/output virtualization (SR-IOV) device which is assigned to a guest to potentially interfere with its Peripheral Component Interface Express (PCIe) siblings which are attached to other guests or to the root.</p> <p>You will be vulnerable if you implement the following:</p> <ol> <li>Your Windows instance is hosting virtual machines</li> <li>Your Server includes the required hardware with SR-IOV devices</li> </ol> Windows Kernel Microsoft Yes CVE-2021-34458 11571 11572 11769 11803 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11571 Critical 11572 Critical 11769 Critical 11803 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 Cody Hartwig of Microsoft 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Kernel Remote Code Execution Vulnerability Windows Kernel Microsoft Yes CVE-2021-34508 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows AppContainer Elevation Of Privilege Vulnerability Windows AppContainer Microsoft Yes CVE-2021-34459 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Alex Ionescu, <a href="https://www.crowdstrike.com">CrowdStrike Inc.</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Storage Spaces Controller Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Windows Storage Spaces Controller Microsoft Yes CVE-2021-34509 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 k0shl Vbty 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Microsoft Yes CVE-2021-34510 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 <a href="https://twitter.com/linhlhq">Le Huu Quang Linh </a> of <a href="https://starlabs.sg/">STARlabs</a> z3r09 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability Windows Installer Microsoft Yes CVE-2021-34511 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Polar Bear at Microsoft 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Windows Kernel Microsoft Yes CVE-2021-34461 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 k0shl 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Microsoft Yes CVE-2021-34512 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 <a href="https://twitter.com/linhlhq">Le Huu Quang Linh </a> of <a href="https://starlabs.sg/">STARlabs</a> nghiadt12 and huyna of Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Windows AppX Deployment Extensions Microsoft Yes CVE-2021-34462 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 Tao Yan (<a href="https://twitter.com/Ga1ois">@Ga1ois</a>) working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Microsoft Yes CVE-2021-34513 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 nghiadt12 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> Le Huu Quang Linh <a href="https://twitter.com/linhlhq">(@linhlhq)</a> from Vietnam National Cyber ​​Security Center (NCSC Vietnam) 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Microsoft Yes CVE-2021-34514 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 <a href="https://twitter.com/hexnomad">Erik Egsgard</a> with <a href="https://fieldeffect.com/">Field Effect Software</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Defender Remote Code Execution Vulnerability <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>Version 1.1.18242.0</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> <h2 id="suggested-actions">Suggested Actions</h2> <p><strong>Verify that the update is installed</strong></p> <p>Customers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p> <ol> <li>Open the Windows Security program. For example, type Security in the Search bar, and select the Windows Security program.</li> <li>In the navigation pane, select Virus &amp; threat protection.</li> <li>Under Virus &amp; threat protection updates in the main window, select Check for updates</li> <li>Select Check for updates again.</li> <li>In the navigation pane, select Settings, and then select About.</li> <li>Examine the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or the signature package version number matches or exceeds the version number that you are trying to verify as installed.</li> </ol> <p>For affected software, verify that the Microsoft Malware Protection Engine version is 1.1.18242.0 or later.</p> <p><strong>If necessary, install the update</strong></p> <p>Administrators of enterprise antimalware deployments should ensure that their update management software is configured to automatically approve and distribute engine updates and new malware definitions. Enterprise administrators should also verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded, approved and deployed in their environment.</p> <p>For end-users, the affected software provides built-in mechanisms for the automatic detection and deployment of this update. For these customers, the update will be applied within 48 hours of its availability. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.</p> <p>End users that do not wish to wait can manually update their antimalware software.</p> Microsoft Defender Microsoft Yes CVE-2021-34464 11902 Remote Code Execution 11902 Critical 11902 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11902 Release Notes 11902 No Security Update 1.1.18242.0 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide 11902 Release Notes Anonymous 1.0 2021-07-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability Windows Win32K Microsoft Yes CVE-2021-34516 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 11803 5004237 5004249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004249 5004950 10729 10735 Yes Security Update 10.0.10240.19003 https://support.microsoft.com/help/5004249 10729 10735 5004249 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10852 10853 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10852 10853 10816 10855 5004289 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004289 5004953 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25661 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004289 5004289 https://support.microsoft.com/help/5004289 10047 10048 10051 10049 5004307 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004307 10047 10048 10051 10049 Yes Security Only 6.1.7601.25661 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004307 5004307 https://support.microsoft.com/help/5004307 10047 10048 10051 10049 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10481 10482 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10481 10482 10484 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10481 10482 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10481 10482 10483 10543 5004298 5004954 10484 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10484 5004298 5004305 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004305 5004955 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21167 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004305 5004305 https://support.microsoft.com/help/5004305 9312 10287 9318 9344 5004299 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004299 9312 10287 9318 9344 ;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rastapi.dll;samsrv.dll;signdrv.dll;srv.sys;srv2.sys;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21167 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004299 5004299 https://support.microsoft.com/help/5004299 9312 10287 9318 9344 5004294 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004294 5004956 10378 10379 boot.stl;bowser.sys;dns.exe;DnsMgr.dll;driver.stl;fhcat.dll;gdi32.dll;gdiplus.dll;kdcsvc.dll;lsadb.dll;lsasrv.dll;msconfig.exe;msi.dll;msinfo32.exe;msisip.dll;msjet40.dll;MSRA.exe;msrahc.dll;ntfs.sys;ntkrnlmp.exe;ntkrpamp.exe;ntoskrnl.exe 0001-01-01T00:00:00 ntkrnlmp.exe;racpldlg.dll;RAServer.exe;rasmans.dll;rastapi.dll;samsrv.dll;signdrv.dll;spaceport.sys;srv.sys;srv2.sys;TBD;tcpip.sys;wabimp.dll;win32k.sys;wintrust.dll;wmvdecod.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23409 https://support.microsoft.com/help/5004294 10378 10379 5004294 5004294 https://support.microsoft.com/help/5004294 10378 10379 5004302 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004302 10378 10379 Yes Security Only 6.2.9200.23409 https://support.microsoft.com/help/5004302 10378 10379 5004302 5004302 https://support.microsoft.com/help/5004302 10378 10379 Marcin Wiazowski working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Hello Security Feature Bypass Vulnerability <p><strong>Where can I find more information about Windows Hello Face Authentication?</strong></p> <p>Please see <a href="https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/windows-hello-face-authentication">Windows Hello Face Authentication</a> for updated details.</p> <p><strong>Where can I find more information about this vulnerability?</strong></p> <p>Please see <a href="https://support.microsoft.com/en-us/topic/kb5005478-windows-hello-cve-2021-34466-6ef266bb-c68a-4083-aed6-31d7d9ec390e">KB5005478 - Windows Hello CVE-2021-34466</a> for more details.</p> Windows Hello Microsoft Yes CVE-2021-34466 11568 11569 11570 11712 11713 11714 11896 11897 11898 11766 11767 11768 11801 11802 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11570 Security Feature Bypass 11712 Security Feature Bypass 11713 Security Feature Bypass 11714 Security Feature Bypass 11896 Security Feature Bypass 11897 Security Feature Bypass 11898 Security Feature Bypass 11766 Security Feature Bypass 11767 Security Feature Bypass 11768 Security Feature Bypass 11801 Security Feature Bypass 11802 Important 11568 Important 11569 Important 11570 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11801 Important 11802 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11570 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11712 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11713 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11714 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11896 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11897 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11898 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11766 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11767 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11768 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11801 5.7 5.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11802 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11568 11569 11570 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11568 11569 11570 5004244 5004244 https://support.microsoft.com/help/5004244 11568 11569 11570 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11712 11713 11714 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11712 11713 11714 5004245 5004245 https://support.microsoft.com/help/5004245 11712 11713 11714 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 11897 11898 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 11897 11898 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11766 11767 11768 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11766 11767 11768 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11897 11898 11766 11767 11768 11801 11802 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11801 11802 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11801 11802 5004237 Omer Tsarfati, CyberArk Labs, https://labs.cyberark.com 1.1 2021-08-04T07:00:00 <p>Updated FAQ information. This is an informational change only.</p> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability Microsoft Office SharePoint Microsoft Yes CVE-2021-34517 10950 11099 11585 10612 Spoofing 10950 Spoofing 11099 Spoofing 11585 Spoofing 10612 Important 10950 Important 11099 Important 11585 Important 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 10950 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 11099 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 11585 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 10612 5001976 https://www.microsoft.com/download/details.aspx?familyid=1ba6f08d-2275-4acd-96bd-c7334ce29e3f 5001946 10950 Maybe Security Update 16.0.5188.1000 https://support.microsoft.com/kb/5001976 10950 5001976 5001976 https://support.microsoft.com/help/5001976 10950 5001984 https://www.microsoft.com/download/details.aspx?familyid=30b6fb89-442b-4921-9b28-cd7c6e9793b9 5001954 11099 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001984 11099 5001984 5001975 https://www.microsoft.com/download/details.aspx?familyid=5fcd24e6-d6a0-457d-b178-35028cb34573 5001944 11585 Maybe Security Update 16.0.10376.20001 https://support.microsoft.com/kb/5001975 11585 5001975 5001975 https://support.microsoft.com/help/5001975 11585 5001992 https://www.microsoft.com/download/details.aspx?familyid=0f7b1092-d203-481b-b22e-b26aa369534e 5001962 10612 Maybe Security Update 15.0.5363.1000 https://support.microsoft.com/kb/5001992 10612 5001992 5001992 https://support.microsoft.com/help/5001992 10612 <a href="https://twitter.com/mwulftange">Markus Wulftange</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p><strong>Why are the links to the download center and KB articles for the CVE pointing to the June Cumulative Update for Exchange Server 2019 and Exchange Server 2016?</strong></p> <p>This vulnerability involved a schema change and therefore needed to be fixed in a cumulative update. For these versions, this vulnerability was addressed in the cumulative updated released on June 29, 2021.</p> <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>This vulnerability's attack is limited at the protocol level to a logically adjacent topology. This means it cannot simply be done across the internet, but instead needs something specific tied to the target. Good examples would include the same shared physical network (such as Bluetooth or IEEE 802.11), logical network (local IP subnet), or from within a secure or otherwise limited administrative domain (MPLS, secure VPN to an administrative network zone). This is common to many attacks that require machine-in-the-middle (MITM) type setups or that rely on initially gaining a foothold in another environment.</p> Microsoft Exchange Server Microsoft Yes CVE-2021-34470 11682 11908 11906 Elevation of Privilege 11682 Elevation of Privilege 11908 Elevation of Privilege 11906 Important 11682 Important 11908 Important 11906 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11682 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11908 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11906 5004778 http://www.microsoft.com/download/details.aspx?familyid=cae731a5-0d00-4f76-b2c6-84bd511e529f 5003435 11682 Yes Security Update 15.00.1497.023 https://support.microsoft.com/help/5004778 11682 5004778 5004778 https://support.microsoft.com/help/5004778 11682 5003612 http://www.microsoft.com/download/details.aspx?familyid=aa0d4c7c-526f-4a1a-924c-b534839f0001 5003435 11908 Yes Security Update 15.02.0922.007 https://support.microsoft.com/help/5003612 11908 5003612 5003611 http://www.microsoft.com/download/details.aspx?familyid=88e4107e-a9a6-4847-959d-98e6e5d46f4a 5003435 11906 Yes Security Update 15.01.2308.008 https://support.microsoft.com/help/5003611 11906 5003611 James Forshaw of Google Project Zero with 1.0 2021-07-13T07:00:00 <p>Information published.</p> Microsoft Defender Remote Code Execution Vulnerability <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>Version 1.1.18242.0</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> <h2 id="suggested-actions">Suggested Actions</h2> <p><strong>Verify that the update is installed</strong></p> <p>Customers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p> <ol> <li>Open the Windows Security program. For example, type Security in the Search bar, and select the Windows Security program.</li> <li>In the navigation pane, select Virus &amp; threat protection.</li> <li>Under Virus &amp; threat protection updates in the main window, select Check for updates</li> <li>Select Check for updates again.</li> <li>In the navigation pane, select Settings, and then select About.</li> <li>Examine the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or the signature package version number matches or exceeds the version number that you are trying to verify as installed.</li> </ol> <p>For affected software, verify that the Microsoft Malware Protection Engine version is 1.1.18242.0 or later.</p> <p><strong>If necessary, install the update</strong></p> <p>Administrators of enterprise antimalware deployments should ensure that their update management software is configured to automatically approve and distribute engine updates and new malware definitions. Enterprise administrators should also verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded, approved and deployed in their environment.</p> <p>For end-users, the affected software provides built-in mechanisms for the automatic detection and deployment of this update. For these customers, the update will be applied within 48 hours of its availability. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.</p> <p>End users that do not wish to wait can manually update their antimalware software.</p> Microsoft Defender Microsoft Yes CVE-2021-34522 11902 Remote Code Execution 11902 Critical 11902 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11902 Release Notes 11902 No Security Update 1.1.18242.0 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide 11902 Release Notes Anonymous 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability Role: DNS Server Microsoft Yes CVE-2021-34525 11571 11572 11769 11803 10816 10855 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Defense in Depth 11769 Defense in Depth 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Low 11769 Low 11803 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11571 11572 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 5004238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004238 5004948 10816 10855 Yes Security Update 10.0.14393.4530 https://support.microsoft.com/help/5004238 10816 10855 5004238 5004238 https://support.microsoft.com/help/5004238 10816 10855 5004298 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004298 5004954 10483 10543 Yes Monthly Rollup 6.3.9600.20069 https://support.microsoft.com/help/5004298 10483 10543 5004298 5004298 https://support.microsoft.com/help/5004298 10483 10543 5004285 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004285 10483 10543 Yes Security Only 6.3.9600.20069 https://support.microsoft.com/help/5004285 10483 10543 5004285 5004285 https://support.microsoft.com/help/5004285 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Security Feature Bypass Vulnerability Windows Secure Kernel Mode Microsoft Yes CVE-2021-33744 11569 11571 11572 11713 11896 11768 11769 11803 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11713 Security Feature Bypass 11896 Security Feature Bypass 11768 Security Feature Bypass 11769 Security Feature Bypass 11803 Important 11569 Important 11571 Important 11572 Important 11713 Important 11896 Important 11768 Important 11769 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11713 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11896 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11768 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11769 5.3 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11803 5004244 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004244 5004947 11569 11571 11572 Yes Security Update 10.0.17763.2061 https://support.microsoft.com/help/5004244 11569 11571 11572 5004244 5004244 https://support.microsoft.com/help/5004244 11569 11571 11572 5004245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004245 5004946 11713 Yes Security Update 10.0.18363.1679 https://support.microsoft.com/help/5004245 11713 5004245 5004245 https://support.microsoft.com/help/5004245 11713 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11896 Yes Security Update 10.0.19043.1110 https://support.microsoft.com/help/5004237 11896 5004237 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11768 11769 Yes Security Update 10.0.19041.1110 https://support.microsoft.com/help/5004237 11768 11769 5004237 5004237 https://support.microsoft.com/help/5004237 11896 11768 11769 11803 5004237 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004237 5004945 11803 Yes Security Update 10.0.19042.1110 https://support.microsoft.com/help/5004237 11803 5004237 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Print Spooler Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability.</p> <p>In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (<strong>Note</strong>: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ):</p> <ul> <li>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint</li> <li>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)</li> <li>UpdatePromptSettings = 0 (DWORD) or not defined (default setting)</li> </ul> <p><strong>Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.</strong></p> <p>UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also <a href="https://support.microsoft.com/topic/31b91c02-05bc-4ada-a7ea-183b129578a7">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates</a>.</p> <p>Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.</p> <p><strong>If I have not yet installed the security update released Out-of-Band on July 6 and 7, 2021, then do I need to install both the Out-of-Band security update released on July 6 and 7, 2021, and the monthly security updates released on July 13, 2021 to be protected from PrintNightmare?</strong></p> <p>All monthly security updates are cumulative, including the monthly security updates released on July 13, 2021. The July 13, 2021 cumulative security updates contain all previous security fixes - including the security fix for the print spooler vulnerability (CVE-2021-34527). Customers who have not previously deployed the OOB fix released on July 6 and 7, 2021, can skip deploying the OOB update and deploy the July cumulative security updates released on July 13, 2021, to be protected.</p> <p><strong>Is this the vulnerability that has been referred to publicly as PrintNightmare?</strong></p> <p>Yes, Microsoft has assigned CVE-2021-34527 to this vulnerability.</p> <p><strong>Is this vulnerability related to CVE-2021-1675?</strong></p> <p>This vulnerability is similar but distinct from the vulnerability that is assigned CVE-2021-1675. The attack vector is different as well. CVE-2021-1675 was addressed by the security update released on June 8, 2021.</p> <p><strong>Did the June 2021 update introduce this vulnerability?</strong></p> <p>No, the vulnerability existed before the June 8, 2021 security update.</p> <p><strong>All versions of Windows are listed in the Security Updates table. Are all versions vulnerable?</strong></p> <p>All versions of Windows are vulnerable. As of July 7, 2021, Microsoft has released security updates for this vulnerability for all supported versions of Windows listed in the security updates table in this CVE.</p> <p><strong>What vulnerabilities do the security updates released on and after July 6, 2021 address?</strong></p> <p>The security updates released on and after July 6, 2021 contain protections for a remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527, as well as for CVE-2021-1675.</p> <p><strong>Are Domain Controllers known to be affected by the vulnerability?</strong></p> <p>Domain controllers are affected if the print spooler service is enabled.</p> <p><strong>Are client systems and member servers that are not domain controllers known to be affected by the vulnerability?</strong></p> <p>Yes. All editions of Windows are affected.</p> <p><strong>How can I see attack activity on my network related to this vulnerability?</strong></p> <p>Security products, like Microsoft 365 Defender, offer different ways to view relevant alerts and telemetry. Microsoft has published our recommendations for seeing this sort of behavior at our GitHub here: <a href="https://aka.ms/printspooler-rce-ahq">Microsoft 365 Defender Hunting Queries</a>. Customers using other technologies can adapt this logic for use in their environments.</p> <p><strong>How is Point and Print technology affected by this particular vulnerability?</strong></p> <p>Point and Print is not directly related to this vulnerability, but certain configurations make systems vulnerable to exploitation.</p> <p><strong>How does Microsoft recommend implementing Point and Print restrictions to help secure my systems?</strong></p> <p>Please see <a href="https://support.microsoft.com/en-us/topic/kb5005010-restricting-installation-of-new-printer-drivers-after-applying-the-july-6-2021-updates-31b91c02-05bc-4ada-a7ea-183b129578a7">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates</a> for complete information.</p> <p><strong>How do I assess my Point and Print security posture to determine if my Windows system is affected by this particular configuration?</strong></p> <p>Please see <a href="https://support.microsoft.com/en-us/topic/kb5005010-restricting-installation-of-new-printer-drivers-after-applying-the-july-6-2021-updates-31b91c02-05bc-4ada-a7ea-183b129578a7">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates</a> for complete information.</p> Windows Print Spooler Components Microsoft Yes CVE-2021-34527 11568 11569 11570 11571 11572 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 10729 10735 10852 10853 10816 10855 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12085 Remote Code Execution 12086 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 12085 Critical 12086 Critical 12097 Critical 12098 Critical 12099 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10484 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11570 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11924 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11801 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11802 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11803 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11926 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11927 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11929 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11930 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11931 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12085 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12086 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12097 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12098 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12099 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10484 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5004947 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004947 5003646 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2029 https://support.microsoft.com/help/5004947 11568 11569 11570 11571 11572 5004947 5004947 https://support.microsoft.com/help/5004947 11568 11569 11570 11571 11572 5005575 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005575 11923 11924 Yes Security Update 10.0.20348.230 https://support.microsoft.com/help/5005575 11923 11924 5005575 5004945 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004945 5003637 11801 11802 11803 Yes Security Update 10.0.19042.1083 https://support.microsoft.com/help/5004945 11801 11802 11803 5004945 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5008212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008212 11929 11930 11931 Yes Security Update 10.0.19044.1415 https://support.microsoft.com/help/5008212 11929 11930 11931 5008212 5008212 https://support.microsoft.com/help/5008212 11929 11930 11931 5018427 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5018427 12085 12086 Yes Security Update 10.0.22621.674 https://support.microsoft.com/help/5018427 12085 12086 5018427 5018427 https://support.microsoft.com/help/5018427 12085 12086 5019959 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5019959 12097 12098 12099 Yes Security Update 10.0.19045.2251 https://support.microsoft.com/help/5019959 12097 12098 12099 5019959 5004950 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004950 5003638 10729 10735 Yes Security Update 10.0.10240.18969 https://support.microsoft.com/help/5004950 10729 10735 5004950 5004948 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004948 5003638 10852 10853 10816 10855 Yes Security Update 10.0.14393.4470 https://support.microsoft.com/help/5004948 10852 10853 10816 10855 5004948 5004954 5003671 10484 Yes Monthly Rollup 6.3.9600.20046 https://support.microsoft.com/help/5004954 10484 5004954 5004954 https://support.microsoft.com/help/5004954 10484 10483 10543 5004955 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004955 5003661 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21138 https://support.microsoft.com/help/5004955 9312 10287 9318 9344 5004955 5004955 https://support.microsoft.com/help/5004955 9312 10287 9318 9344 5004959 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004959 9312 10287 9318 9344 Yes Security Only 6.0.6003.21138 https://support.microsoft.com/help/5004959 9312 10287 9318 9344 5004959 5004959 https://support.microsoft.com/help/5004959 9312 10287 9318 9344 5004953 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004953 10051 10049 Yes Monthly Rollup 6.1.7601.25633 https://support.microsoft.com/help/5004953 10051 10049 5004953 5004953 https://support.microsoft.com/help/5004953 10051 10049 5004951 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004951 5003667 10051 10049 Yes Security Only 6.1.7601.25633 https://support.microsoft.com/help/5004951 10051 10049 5004951 5004951 https://support.microsoft.com/help/5004951 10051 10049 5004956 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004956 5003697 10378 10379 Yes Monthly Rollup 6.2.9200.23383 https://support.microsoft.com/help/5004956 10378 10379 5004956 5004956 https://support.microsoft.com/help/5004956 10378 10379 5004960 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004960 10378 10379 Yes Security Only 6.2.9200.23383 https://support.microsoft.com/help/5004960 10378 10379 5004960 5004960 https://support.microsoft.com/help/5004960 10378 10379 5004954 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004954 5003671 10483 10543 Yes Monthly Rollup 6.3.9600.20046 https://support.microsoft.com/help/5004954 10483 10543 5004954 5004958 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5004958 10483 10543 Yes Security Only 6.3.9600.20046 https://support.microsoft.com/help/5004958 10483 10543 5004958 5004958 https://support.microsoft.com/help/5004958 10483 10543 <p><strong>Determine if the Print Spooler service is running</strong></p> <p>Run the following in Windows PowerShell:</p> <p><code>Get-Service -Name Spooler</code></p> <p>If the Print Spooler is running or if the service is not set to disabled, select one of the following options to either disable the Print Spooler service, or to Disable inbound remote printing through Group Policy:</p> <p><strong>Option 1 - Disable the Print Spooler service</strong></p> <p>If disabling the Print Spooler service is appropriate for your enterprise, use the following PowerShell commands:</p> <p><code>Stop-Service -Name Spooler -Force</code></p> <p><code>Set-Service -Name Spooler -StartupType Disabled</code></p> <p><strong>Impact of workaround</strong> Disabling the Print Spooler service disables the ability to print both locally and remotely.</p> <p><strong>Option 2 - Disable inbound remote printing through Group Policy</strong></p> <p>You can also configure the settings via Group Policy as follows:</p> <p>Computer Configuration / Administrative Templates / Printers</p> <p>Disable the “Allow Print Spooler to accept client connections:” policy to block remote attacks.</p> <p>You must restart the Print Spooler service for the group policy to take effect.</p> <p><strong>Impact of workaround</strong> This policy will block the remote attack vector by preventing inbound remote printing operations. The system will no longer function as a print server, but local printing to a directly attached device will still be possible.</p> <p>For more information see: <a href="https://docs.microsoft.com/en-us/troubleshoot/windows-server/printing/use-group-policy-to-control-ad-printer">Use Group Policy settings to control printers</a>.</p> Zhiniang Peng (<a href="https://twitter.com/edwardzpeng/">@edwardzpeng</a>) and Xuefeng Li (<a href="https://twitter.com/lxf02942370/">@lxf02942370</a>) Sergii Bezus with <a href="https://10guards.com">10Guards</a> 1.3 2021-07-02T07:00:00 <p>Updated FAQ information. This is an informational change only.</p> 1.4 2021-07-03T07:00:00 <p>Updated FAQ information. This is an informational change only.</p> 2.0 2021-07-06T07:00:00 <p>CVE updated to announce that Microsoft is releasing an update for several versions of Window to address this vulnerability. Updates are not yet available for Windows 10 version 1607, Windows Server 2016, or Windows Server 2012. Security updates for these versions of Windows will be released soon. Other information has been updated as well. This information will be updated when more information or updates are available.</p> 3.0 2021-07-07T07:00:00 <p>CVE updated to announce that Microsoft is releasing an update for Windows 10 version 1607, Windows Server 2016, and Windows Server 2012. Other information has been updated as well.</p> 3.1 2021-07-08T07:00:00 <p>Added information to the executive summary and the FAQ sections. This is an informational change only.</p> 1.0 2021-07-01T07:00:00 <p>Information published.</p> 1.1 2021-07-02T07:00:00 <p>The information in the workaround section was updated. This an informational change only.</p> 1.2 2021-07-02T07:00:00 <p>CVE revised to update the FAQ, add a mitigation, and add the CVSS score. These are informational changes only.</p> 3.2 2021-07-15T07:00:00 <p>Added FAQ information. This is an informational change only.</p> 3.3 2021-07-16T07:00:00 <p>Added an acknowledgement. This is an informational change only.</p> 3.4 2023-06-13T07:00:00 <p>In the Security Updates table, added all supported editions of Windows 10 version 21H2, Windows 11 version 21H2, Windows 11 version 22H2, and Windows Server 2022 as they are affected by this vulnerability. Customers running any of these versions of Windows should install listed updates or newer to be protected from this vulnerability. After these updates are installed, please follow the advice included in the documentation on this CVE.  With this revision, products that are no longer in support have been removed.</p> Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability Visual Studio Code - .NET Runtime Microsoft Yes CVE-2021-34477 11909 11910 Elevation of Privilege 11909 Elevation of Privilege 11910 Important 11909 Important 11910 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11909 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11910 Release Notes https://marketplace.visualstudio.com/items?itemName=ms-dotnettools.vscode-dotnet-sdk 11909 Maybe Security Update 1.2.0 https://github.com/dotnet/vscode-dotnet-runtime/security/advisories 11909 Release Notes Release Notes https://marketplace.visualstudio.com/items?itemName=ms-dotnettools.vscode-dotnet-sdk 11910 Maybe Security Update 0.7.0 https://github.com/dotnet/vscode-dotnet-runtime/security/advisories 11910 Release Notes <a href="https://twitter.com/cji">Craig Ingram</a> with <a href="https://www.stripe.com">Stripe</a> 1.0 2021-07-13T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p><strong>How does Visual Studio Code protect against remote code execution vulnerabilities in extensions?</strong></p> <p>With the release of Visual Studio Code 1.57, a new feature was added called Workspace Trust. This new feature allows developers to open unfamiliar code or extensions in Restricted Mode with the option to later mark the code as trusted. Restricted Mode works to prevent the automatic execution of code by restricting accessing to certain VS Code features. More details about this new functionality can be found here - <a href="https://code.visualstudio.com/updates/v1_57#_workspace-trust">https://code.visualstudio.com/updates/v1_57#_workspace-trust</a>.</p> Visual Studio Code Microsoft Yes CVE-2021-34529 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 https://code.visualstudio.com/Download 11622 Maybe Security Update 1.57.1 https://code.visualstudio.com/updates/v1_57 11622 Kc Udonsi (@glitchnsec) of Trend Micro Security Research working with Trend Micro Zero Day Initiative <a href="https://twitter.com/sven_to">Sven Nobis</a> of <a href="https://www.ernw.de">ERNW GmbH</a> <a href="https://daviddworken.com/">David Dworken</a> Ron Masas, <a href="https://hackk.io?cve=CVE-2021-34529">Hackk.io</a> <a href="https://www.linkedin.com/in/timofte-daniel/">Timofte Daniel</a> (<a href="https://twitter.com/tim17d">@tim17d</a>) Ash Fox, Google Security Team 1.0 2021-07-13T07:00:00 <p>Information published.</p> Windows Print Spooler Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p><strong>UPDATE</strong> August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see <a href="https://support.microsoft.com/help/5005652">KB5005652</a>.</p> <p><strong>Why did the security impact change from elevation of privilege to remote code execution?</strong></p> <p>We became aware of a remote attack scenario for this vulnerability and revised our assessment accordingly.</p> <p><strong>Did the July 2021 security update introduce this vulnerability?</strong></p> <p>No, the vulnerability existed before the July 13, 2021 security update. We recommend that Microsoft customers install the latest security updates.</p> <p><strong>Why did the Point and Print default behavior change?</strong></p> <p>Please see <a href="https://support.microsoft.com/help/5005652">KB5005652</a>.</p> Windows Print Spooler Components Microsoft Yes CVE-2021-34481 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11570 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11712 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11713 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11714 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11896 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11897 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11898 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11766 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11767 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11768 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11769 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11801 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11802 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11803 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10047 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10048 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10481 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10482 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10484 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5005030 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005030 5004244 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2114 https://support.microsoft.com/help/5005030 11568 11569 11570 11571 11572 5005030 5005030 https://support.microsoft.com/help/5005030 11568 11569 11570 11571 11572 5005031 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005031 5004245 11712 11713 11714 Yes Security Update 10.0.18363.1734 https://support.microsoft.com/help/5005031 11712 11713 11714 5005031 5005031 https://support.microsoft.com/help/5005031 11712 11713 11714 5005033 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005033 5004237 11896 11897 11898 Yes Security Update 10.0.19043.1165 https://support.microsoft.com/help/5005033 11896 11897 11898 5005033 5005033 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005033 5004237 11766 11767 11768 11769 Yes Security Update 10.0.19041.1165 https://support.microsoft.com/help/5005033 11766 11767 11768 11769 5005033 5005033 https://support.microsoft.com/help/5005033 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5005033 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005033 5004237 11801 11802 11803 Yes Security Update 10.0.19042.1165 https://support.microsoft.com/help/5005033 11801 11802 11803 5005033 5005040 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005040 5004249 10729 10735 Yes Security Update 10.0.10240.19022 https://support.microsoft.com/help/5005040 10729 10735 5005040 5005040 https://support.microsoft.com/help/5005040 10729 10735 5005043 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005043 5004238 10852 10853 10816 10855 Yes Security Update 10.0.14393.4583 https://support.microsoft.com/help/5005043 10852 10853 10816 10855 5005043 5005088 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005088 5004289 10047 10048 10051 10049 atmfd.dll;Bthport.sys;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;rtutils.dll;tcpip.sys;userenv.dll;win8ip\win7\mstscax.dll;winblueip\win7\mstscax.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.1.7601.25685 https://support.microsoft.com/help/5005088 10047 10048 10051 10049 5005088 5005088 https://support.microsoft.com/help/5005088 10047 10048 10051 10049 5005089 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005089 10047 10048 10051 10049 atmfd.dll;Bthport.sys;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;rtutils.dll;tcpip.sys;userenv.dll;win8ip\win7\mstscax.dll;winblueip\win7\mstscax.dll 0001-01-01T00:00:00 Yes Security Only 6.1.7601.25685 https://support.microsoft.com/help/5005089 10047 10048 10051 10049 5005089 5005089 https://support.microsoft.com/help/5005089 10047 10048 10051 10049 5005076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005076 5004298 10481 10482 10483 10543 atmfd.dll;Bthport.sys;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;profext.dll;rpcxdr.sys;rtutils.dll;tcpip.sys;windows.ui.immersive.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.3.9600.20094 https://support.microsoft.com/help/5005076 10481 10482 10483 10543 5005076 5005076 https://support.microsoft.com/help/5005076 10481 10482 10484 10483 10543 5005106 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005106 10481 10482 10483 10543 atmfd.dll;Bthport.sys;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;profext.dll;rpcxdr.sys;rtutils.dll;tcpip.sys;windows.ui.immersive.dll 0001-01-01T00:00:00 Yes Security Only 6.3.9600.20094 https://support.microsoft.com/help/5005106 10481 10482 10483 10543 5005106 5005106 https://support.microsoft.com/help/5005106 10481 10482 10483 10543 5005076 5004298 10484 atmfd.dll;Bthport.sys;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;profext.dll;rpcxdr.sys;rtutils.dll;tcpip.sys;windows.ui.immersive.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.3.9600.20094 https://support.microsoft.com/help/5005076 10484 5005076 5005090 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005090 5004305 9312 10287 9318 9344 atmfd.dll;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;rtutils.dll;tcpip.sys;userenv.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.0.6003.21192 https://support.microsoft.com/help/5005090 9312 10287 9318 9344 5005090 5005090 https://support.microsoft.com/help/5005090 9312 10287 9318 9344 5005095 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005095 9312 10287 9318 9344 atmfd.dll;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;rtutils.dll;tcpip.sys;userenv.dll 0001-01-01T00:00:00 Yes Security Only 6.0.6003.21192 https://support.microsoft.com/help/5005095 9312 10287 9318 9344 5005095 5005095 https://support.microsoft.com/help/5005095 9312 10287 9318 9344 5005099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005099 5004294 10378 10379 atmfd.dll;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;profext.dll;rpcxdr.sys;rtutils.dll;tcpip.sys;windows.ui.immersive.dll 0001-01-01T00:00:00 Yes Monthly Rollup 6.2.9200.23435 https://support.microsoft.com/help/5005099 10378 10379 5005099 5005099 https://support.microsoft.com/help/5005099 10378 10379 5005094 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005094 10378 10379 atmfd.dll;dwrite.dll;ehPrivJob.exe;fntcache.dll;localspl.dll;mpg4decd.dll;mstscax.dll;profext.dll;rpcxdr.sys;rtutils.dll;tcpip.sys;windows.ui.immersive.dll 0001-01-01T00:00:00 Yes Security Only 6.2.9200.23435 https://support.microsoft.com/help/5005094 10378 10379 5005094 5005094 https://support.microsoft.com/help/5005094 10378 10379 <a href="https://twitter.com/Junior_Baines">Jacob Baines</a> 1.0 2021-07-15T07:00:00 <p>Information published.</p> 2.0 2021-08-10T07:00:00 <p>CVE updated to announce that Microsoft is releasing security updates for all affected versions of Windows to address this vulnerability. Other information has been updated as well, including the following: 1) Impact has been changed to Remote Code Execution 2) Executive Summary has been updated 3) FAQs have been revised.</p> Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). Can the exploit move from Dynamics Business Central to the underlying operating system?</strong></p> <p>An attacker who successfully exploited this vulnerability could use it to pivot from the machine to the rest of the network.</p> Dynamics Business Central Control Microsoft Yes CVE-2021-34474 11911 11913 11912 Remote Code Execution 11911 Remote Code Execution 11913 Remote Code Execution 11912 Critical 11911 Critical 11913 Critical 11912 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11911 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11913 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11912 5004717 https://www.microsoft.com/en-us/download/details.aspx?id=103251 4549687 11911 Maybe Security Update 16.0.27253 https://support.microsoft.com/en-us/help/5004717 11911 5004717 5004716 https://www.microsoft.com/en-us/download/details.aspx?id=103249 4253507 11913 Maybe Security Update 17.0.27235 https://support.microsoft.com/en-us/help/5004716 11913 5004716 5004715 https://www.microsoft.com/en-us/download/details.aspx?id=103250 5003500 11912 Maybe Security Update 18.0.27469 https://support.microsoft.com/en-us/help/5004715 11912 5004715 1.0 2021-07-13T07:00:00 <p>Information published.</p> 1.1 2026-08-10T07:00:00 <p>Updated the build numbers. This is an informational update only.</p>