November 2021 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2021-Nov 2021-Nov Final 1.0 124 2026-09-17T01:51:40 November 2021 Security Updates 2021-11-09T00:00:00 2026-09-17T01:51:40 <h2 id="updates-this-month">Updates this Month</h2> <p>This release consists of security updates for the following products, features and roles.</p> <ul> <li>3D Viewer</li> <li>Azure</li> <li>Azure RTOS</li> <li>Azure Sphere</li> <li>Microsoft Dynamics</li> <li>Microsoft Edge (Chromium-based)</li> <li>Microsoft Edge (Chromium-based) in IE Mode</li> <li>Microsoft Exchange Server</li> <li>Microsoft Office</li> <li>Microsoft Office Access</li> <li>Microsoft Office Excel</li> <li>Microsoft Office SharePoint</li> <li>Microsoft Office Word</li> <li>Microsoft Windows</li> <li>Microsoft Windows Codecs Library</li> <li>Power BI</li> <li>Role: Windows Hyper-V</li> <li>Visual Studio</li> <li>Visual Studio Code</li> <li>Windows Active Directory</li> <li>Windows COM</li> <li>Windows Core Shell</li> <li>Windows Cred SSProvider Protocol</li> <li>Windows Defender</li> <li>Windows Desktop Bridge</li> <li>Windows Diagnostic Hub</li> <li>Windows Fastfat Driver</li> <li>Windows Feedback Hub</li> <li>Windows Hello</li> <li>Windows Installer</li> <li>Windows Kernel</li> <li>Windows NTFS</li> <li>Windows RDP</li> <li>Windows Scripting</li> <li>Windows Update Assistant</li> <li>Windows Virtual Machine Bus</li> </ul> <p>Please note the following information regarding the security updates:</p> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>February 9, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td> </tr> <tr> <td>January 13, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td> </tr> <tr> <td>December 8, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td> </tr> <tr> <td>November 9, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td> </tr> </tbody> </table> <h2 id="relevant-information">Relevant Information</h2> <ul> <li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="faqs-mitigations-and-workarounds">FAQs, Mitigations, and Workarounds</h2> <p>The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the <a href="https://msrc.microsoft.com/update-guide/vulnerability">Vulnerabilities</a> tab by selecting <strong>FAQs</strong>, <strong>Mitigations</strong> and <strong>Workarounds</strong> columns in the <strong>Edit Columns</strong> panel.</p> <ul> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26443">CVE-2021-26443</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26444">CVE-2021-26444</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-3711">CVE-2021-3711</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38631">CVE-2021-38631</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38665">CVE-2021-38665</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38666">CVE-2021-38666</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40442">CVE-2021-40442</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41368">CVE-2021-41368</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41371">CVE-2021-41371</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41373">CVE-2021-41373</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41374">CVE-2021-41374</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41375">CVE-2021-41375</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41376">CVE-2021-41376</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41379">CVE-2021-41379</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42275">CVE-2021-42275</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42277">CVE-2021-42277</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278">CVE-2021-42278</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42280">CVE-2021-42280</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42282">CVE-2021-42282</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42284">CVE-2021-42284</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42287">CVE-2021-42287</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42291">CVE-2021-42291</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42292">CVE-2021-42292</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42296">CVE-2021-42296</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42297">CVE-2021-42297</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42298">CVE-2021-42298</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42300">CVE-2021-42300</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42301">CVE-2021-42301</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42302">CVE-2021-42302</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42303">CVE-2021-42303</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42304">CVE-2021-42304</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42321">CVE-2021-42321</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42323">CVE-2021-42323</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43208">CVE-2021-43208</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43209">CVE-2021-43209</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43211">CVE-2021-43211</a></li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5007186">5007186</a></td> <td>Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2, Windows 10, Version 21H1</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007189">5007189</a></td> <td>Windows 10, Version 1909</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007192">5007192</a></td> <td>Windows 10, Version 1607, Windows Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007205">5007205</a></td> <td>Windows Server 2022</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007206">5007206</a></td> <td>Windows 10, Version 1809, Windows Server 2019</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007207">5007207</a></td> <td>Windows 10</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007233">5007233</a></td> <td>Windows 7, Windows Server 2008 R2 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007236">5007236</a></td> <td>Windows 7, Windows Server 2008 R2 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007245">5007245</a></td> <td>Windows Server 2012 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007246">5007246</a></td> <td>Windows Server 2008 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007247">5007247</a></td> <td>Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007255">5007255</a></td> <td>Windows 8.1, Windows Server 2012 R2 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007260">5007260</a></td> <td>Windows Server 2012 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007263">5007263</a></td> <td>Windows Server 2008 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5007409">5007409</a></td> <td>Exchange Server</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for 32-bit Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server, version 2004 (Server Core installation) Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Update Assistant Remote Desktop client for Windows Desktop Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Office 2013 RT Service Pack 1 Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft Office 2019 for Mac Microsoft Office Online Server Microsoft Office LTSC for Mac 2021 Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Office Web Apps Server 2013 Service Pack 1 ChakraCore Microsoft Edge (Chromium-based) Microsoft Edge for iOS Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2019 Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 20H2 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 20H2 for 32-bit Systems Azure Sphere Azure Real Time Operating System FSLogix Azure Automation Azure Active Directory Azure Site Recovery Azure Migrate Microsoft Dynamics 365 (on-premises) version 9.1 Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Visual Studio Code Microsoft Visual Studio 2015 Update 3 Microsoft Visual Studio 2022 version 17.1 Microsoft Visual Studio 2022 version 17.0 3D Viewer Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Malware Protection Engine cm1 vim 8.2.3582-1 on CBL Mariner 1.0 cm1 pgbouncer 1.16.1-1 on CBL Mariner 1.0 Power BI Report Server version 1.11.8091.10468 Power BI Report Server version 1.12.7977.29537 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 R2 (Server Core installation) Microsoft Visual Studio 2015 Update 3 Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 RT Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Windows Server 2016 Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft SharePoint Enterprise Server 2013 Service Pack 1 ChakraCore Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for Mac Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Office Online Server Visual Studio Code Microsoft Edge (Chromium-based) Azure Automation Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Exchange Server 2013 Cumulative Update 23 Windows Update Assistant Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems 3D Viewer Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server, version 2004 (Server Core installation) Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2019 Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 20H2 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 20H2 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for ARM64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for 32-bit Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for x64-based Systems Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for ARM64-based Systems Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Azure Sphere Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) Remote Desktop client for Windows Desktop Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for 32-bit Systems Microsoft Malware Protection Engine Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Dynamics 365 (on-premises) version 9.1 Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2019 Cumulative Update 11 FSLogix Azure Real Time Operating System Azure Active Directory Azure Site Recovery Azure Migrate Microsoft Edge for iOS Microsoft Visual Studio 2022 version 17.0 Microsoft Visual Studio 2022 version 17.1 Power BI Report Server version 1.11.8091.10468 Power BI Report Server version 1.12.7977.29537 azl3 ceph 18.2.2-1 on Azure Linux 3.0 cm1 kernel 5.10.78.1-1 on CBL Mariner 1.0 cbl2 kernel 5.10.78.1-1 on CBL Mariner 2.0 cm1 python-pip 19.2-2 on CBL Mariner 1.0 cm1 gcc 9.1.0-7 on CBL Mariner 1.0 azl3 python-tensorboard 2.16.2-2 on Azure Linux 3.0 cbl2 python-virtualenv 20.26.6-1 on CBL Mariner 2.0 cbl2 python-virtualenv 20.26.6-1 on CBL-Mariner 2.0 azl3 tensorflow 2.16.1-9 on Azure Linux 3.0 cbl2 golang 1.17.8-1 on CBL Mariner 2.0 cbl2 glibc 2.35-1 on CBL Mariner 2.0 cbl2 vim 8.2.4081-1 on CBL Mariner 2.0 cm1 pgbouncer 1.16.1-1 on CBL Mariner 1.0 cm1 c-ares 1.18.1-1 on CBL Mariner 1.0 cbl2 pgbouncer 1.16.1-1 on CBL Mariner 2.0 cm1 kernel 5.10.88.1-2 on CBL Mariner 1.0 cbl2 kernel 5.15.2.1-1 on CBL Mariner 2.0 cm1 vim 8.2.3668-1 on CBL Mariner 1.0 cm1 keepalived 2.0.10-7 on CBL Mariner 1.0 cbl2 keepalived 2.2.7-1 on CBL Mariner 2.0 cm1 gmp 6.1.2-6 on CBL Mariner 1.0 cbl2 gmp 6.2.1-2 on CBL Mariner 2.0 cm1 uclibc-ng 1.0.37-2 on CBL Mariner 1.0 cbl2 uclibc-ng 1.0.37-2 on CBL Mariner 2.0 cm1 busybox 1.34.1-1 on CBL Mariner 1.0 cbl2 busybox 1.35.0-1 on CBL Mariner 2.0 azl3 busybox 1.35.1-1 on Azure Linux 3.0 cm1 golang 1.16.10-1 on CBL Mariner 1.0 cm1 vim 8.2.3582-1 on CBL Mariner 1.0 azl3 memcached 1.6.27-2 on Azure Linux 3.0 azl3 lua 5.4.4-1 on Azure Linux 3.0 azl3 ntopng 5.2.1-5 on Azure Linux 3.0 azl3 ceph 18.2.2-3 on Azure Linux 3.0 azl3 memcached 1.6.27-3 on Azure Linux 3.0 azl3 lua 5.4.6-1 on Azure Linux 3.0 cbl2 wireshark 3.4.14-1 on CBL Mariner 2.0 cbl2 php on CBL Mariner 2.0 cbl2 quagga on CBL Mariner 2.0 azl3 ceph 18.2.2-8 on Azure Linux 3.0 azl3 golang 1.23.9-1 on Azure Linux 3.0 azl3 python-tensorboard 2.11.0-3 on Azure Linux 3.0 azl3 golang 1.24.3-1 on Azure Linux 3.0 azl3 rubygem-mini_portile2 2.8.4-1 on Azure Linux 3.0 azl3 golang 1.23.8-1 on Azure Linux 3.0 cbl2 ceph 16.2.10-7 on CBL Mariner 2.0 cbl2 ceph 16.2.10-7 on CBL-Mariner 2.0 cbl2 python-virtualenv 20.26.6-1 on CBL Mariner 2.0 azl3 busybox 1.36.1-12 on Azure Linux 3.0 azl3 golang 1.27.0-1 on Azure Linux 3.0 azl3 golang 1.27.1-1 on Azure Linux 3.0 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Special characters break path parsing in XML functions <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner php Yes CVE-2021-21707 Improper Handling of Invalid Use of Special Elements 19641-16823 19641-16823 Moderate 19641-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 19641-16823 CBL-Mariner Releases 19641-16823 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19641-16823 CBL-Mariner Releases 1.0 2025-10-01T23:11:08 <p>Information published.</p> A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-3572 Improper Input Validation 16961-16820 16961-16820 Moderate 16961-16820 5.7 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N 16961-16820 CBL-Mariner Releases 16961-16820 No Security Update 19.2-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16961-16820 CBL-Mariner Releases 2.0 2026-02-18T14:44:19 <p>Information published.</p> 3.0 2026-08-12T22:16:08 <p>Information published.</p> 1.0 2022-04-09T00:00:00 <p>Information published.</p> A flaw was found in c-ares library where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-3672 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 18853-16820 18854-16820 18855-16823 16855-17084 19666-17084 18853-16820 18854-16820 18855-16823 16855-17084 19666-17084 Moderate 18853-16820 Moderate 18854-16820 Moderate 18855-16823 Moderate 16855-17084 Moderate 19666-17084 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 18853-16820 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 18854-16820 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 18855-16823 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 16855-17084 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 19666-17084 CBL-Mariner Releases 18853-16820 18855-16823 No Security Update 1.16.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18853-16820 18855-16823 CBL-Mariner Releases CBL-Mariner Releases 18854-16820 No Security Update 1.18.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18854-16820 CBL-Mariner Releases CBL-Mariner Releases 16855-17084 19666-17084 No Security Update 18.2.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16855-17084 19666-17084 CBL-Mariner Releases 1.3 2025-03-01T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.4 2025-03-02T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.5 2025-03-03T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.7 2025-03-05T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.8 2025-03-06T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.3 2025-03-12T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.4 2025-03-13T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.2 2025-03-21T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.4 2025-03-23T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.9 2025-03-28T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.0 2025-03-29T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.3 2025-04-01T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.4 2025-04-03T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.7 2025-04-06T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.8 2025-04-07T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.0 2025-04-09T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.3 2025-04-13T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.4 2025-04-14T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.6 2025-04-16T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.8 2025-04-18T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.0 2025-04-20T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.1 2025-04-21T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.3 2025-04-26T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.4 2025-04-28T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.6 2025-04-30T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.7 2025-05-01T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.9 2025-05-03T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 7.0 2025-05-04T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 7.2 2025-05-06T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.3 2025-05-07T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.4 2025-05-08T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.7 2025-05-11T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.8 2025-05-12T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.2 2025-05-16T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.6 2025-05-20T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.7 2025-05-21T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.8 2025-05-22T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 9.0 2025-05-24T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 9.1 2025-05-25T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 9.2 2025-05-26T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 9.3 2025-05-27T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 9.4 2026-02-18T15:08:20 <p>Information published.</p> 10.0 2026-08-12T22:27:35 <p>Information published.</p> 1.0 2021-11-27T00:00:00 <p>Information published.</p> 1.1 2025-02-27T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.2 2025-02-28T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.6 2025-03-04T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 1.9 2025-03-08T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.0 2025-03-09T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.1 2025-03-10T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.2 2025-03-11T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.5 2025-03-14T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.6 2025-03-15T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.7 2025-03-16T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.8 2025-03-17T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 2.9 2025-03-18T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.0 2025-03-19T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.1 2025-03-20T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.3 2025-03-22T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.5 2025-03-24T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.6 2025-03-25T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.7 2025-03-26T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 3.8 2025-03-27T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.1 2025-03-30T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.2 2025-03-31T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.5 2025-04-04T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.6 2025-04-05T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 4.9 2025-04-08T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.1 2025-04-11T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.2 2025-04-12T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.5 2025-04-15T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.7 2025-04-17T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 5.9 2025-04-19T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.2 2025-04-25T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.5 2025-04-29T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 6.8 2025-05-02T00:00:00 <p>Added c-ares to CBL-Mariner 1.0</p> 7.1 2025-05-05T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.5 2025-05-09T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.6 2025-05-10T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 7.9 2025-05-13T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.0 2025-05-14T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.1 2025-05-15T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.3 2025-05-17T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.4 2025-05-18T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.5 2025-05-19T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> 8.9 2025-05-23T00:00:00 <p>Added pgbouncer to CBL-Mariner 2.0 Added c-ares to CBL-Mariner 1.0</p> GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-37322 Use After Free 17017-16820 17017-16820 Important 17017-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 17017-16820 CBL-Mariner Releases 17017-16820 No Security Update 9.1.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17017-16820 CBL-Mariner Releases 1.0 2021-12-17T00:00:00 <p>Information published.</p> Heap-based Buffer Overflow in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2021-3927 Heap-based Buffer Overflow 18969-16820 18969-16820 Important 18969-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18969-16820 CBL-Mariner Releases 18969-16820 No Security Update 8.2.3582-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18969-16820 CBL-Mariner Releases 1.0 2021-11-10T00:00:00 <p>Information published.</p> Use of Uninitialized Variable in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2021-3928 Use of Uninitialized Variable 18969-16820 18969-16820 Important 18969-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18969-16820 CBL-Mariner Releases 18969-16820 No Security Update 8.2.3582-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18969-16820 CBL-Mariner Releases 1.0 2021-11-09T00:00:00 <p>Information published.</p> When PgBouncer is configured to use "cert" authentication a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner fedora Yes CVE-2021-3935 Improper Certificate Validation 18853-16820 18853-16820 Important 18853-16820 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 18853-16820 CBL-Mariner Releases 18853-16820 No Security Update 1.16.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18853-16820 CBL-Mariner Releases 1.0 2021-11-27T00:00:00 <p>Information published.</p> Heap-based Buffer Overflow in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2021-3968 Heap-based Buffer Overflow 18946-16820 18812-16823 18946-16820 18812-16823 Important 18946-16820 Important 18812-16823 8.0 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H 18946-16820 8.0 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H 18812-16823 CBL-Mariner Releases 18946-16820 No Security Update 8.2.3668-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18946-16820 CBL-Mariner Releases CBL-Mariner Releases 18812-16823 No Security Update 8.2.4081-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18812-16823 CBL-Mariner Releases 1.0 2021-11-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added vim to CBL-Mariner 2.0</p> Heap-based Buffer Overflow in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2021-3973 Heap-based Buffer Overflow 18946-16820 18812-16823 18946-16820 18812-16823 Important 18946-16820 Important 18812-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18946-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18812-16823 CBL-Mariner Releases 18946-16820 No Security Update 8.2.3668-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18946-16820 CBL-Mariner Releases CBL-Mariner Releases 18812-16823 No Security Update 8.2.4081-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18812-16823 CBL-Mariner Releases 1.0 2021-11-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added vim to CBL-Mariner 2.0</p> Use After Free in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2021-3974 Use After Free 18946-16820 18812-16823 18946-16820 18812-16823 Important 18946-16820 Important 18812-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18946-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18812-16823 CBL-Mariner Releases 18946-16820 No Security Update 8.2.3668-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18946-16820 CBL-Mariner Releases CBL-Mariner Releases 18812-16823 No Security Update 8.2.4081-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18812-16823 CBL-Mariner Releases 1.0 2021-11-24T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added vim to CBL-Mariner 2.0</p> NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39920 NULL Pointer Dereference 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39921 NULL Pointer Dereference 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39922 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39923 Excessive Iteration 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39924 Excessive Iteration 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39925 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39926 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39928 NULL Pointer Dereference 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2021-39929 Uncontrolled Recursion 19467-16823 19467-16823 Important 19467-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19467-16823 CBL-Mariner Releases 19467-16823 No Security Update 3.4.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19467-16823 CBL-Mariner Releases 1.0 2022-01-19T00:00:00 <p>Information published.</p> ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer aka an out-of-bounds slice situation. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-41771 Improper Restriction of Operations within the Bounds of a Memory Buffer 18968-16820 18772-16823 17021-17084 21778-17084 19696-17084 18968-16820 18772-16823 17021-17084 21778-17084 19696-17084 Important 18968-16820 Important 18772-16823 Important 17021-17084 Important 21778-17084 Important 19696-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18968-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18772-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19696-17084 CBL-Mariner Releases 18968-16820 No Security Update 1.16.10-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18968-16820 CBL-Mariner Releases CBL-Mariner Releases 18772-16823 No Security Update 1.17.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18772-16823 CBL-Mariner Releases CBL-Mariner Releases 17021-17084 19696-17084 No Security Update 2.16.2-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17021-17084 19696-17084 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 Security Update 21778-17084 2.3 2026-02-18T14:46:50 <p>Information published.</p> 4.0 2026-09-07T01:44:20 <p>Information published.</p> 5.0 2026-09-09T14:51:11 <p>Information published.</p> 1.0 2021-11-11T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added golang to CBL-Mariner 2.0</p> 1.2 2024-08-29T00:00:00 <p>Information published.</p> 1.3 2024-08-30T00:00:00 <p>Information published.</p> 1.4 2024-08-31T00:00:00 <p>Information published.</p> 1.5 2024-09-01T00:00:00 <p>Information published.</p> 1.6 2024-09-02T00:00:00 <p>Information published.</p> 1.7 2024-09-03T00:00:00 <p>Information published.</p> 1.8 2024-09-05T00:00:00 <p>Information published.</p> 1.9 2024-09-06T00:00:00 <p>Information published.</p> 2.0 2024-09-07T00:00:00 <p>Information published.</p> 2.1 2024-09-08T00:00:00 <p>Information published.</p> 2.2 2024-09-11T00:00:00 <p>Information published.</p> 3.0 2026-09-03T01:07:43 <p>Information published.</p> 6.0 2026-09-17T01:51:40 <p>Information published.</p> Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-41772 Improper Input Validation 18968-16820 18772-16823 17021-17084 19696-17084 18968-16820 18772-16823 17021-17084 19696-17084 Important 18968-16820 Important 18772-16823 Important 17021-17084 Important 19696-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18968-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18772-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19696-17084 CBL-Mariner Releases 18968-16820 No Security Update 1.16.10-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18968-16820 CBL-Mariner Releases CBL-Mariner Releases 18772-16823 No Security Update 1.17.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18772-16823 CBL-Mariner Releases CBL-Mariner Releases 17021-17084 19696-17084 No Security Update 2.16.2-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17021-17084 19696-17084 CBL-Mariner Releases 2.3 2026-02-18T02:35:44 <p>Information published.</p> 1.0 2021-11-11T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added golang to CBL-Mariner 2.0</p> 1.2 2024-08-29T00:00:00 <p>Information published.</p> 1.3 2024-08-30T00:00:00 <p>Information published.</p> 1.4 2024-08-31T00:00:00 <p>Information published.</p> 1.5 2024-09-01T00:00:00 <p>Information published.</p> 1.6 2024-09-02T00:00:00 <p>Information published.</p> 1.7 2024-09-03T00:00:00 <p>Information published.</p> 1.8 2024-09-05T00:00:00 <p>Information published.</p> 1.9 2024-09-06T00:00:00 <p>Information published.</p> 2.0 2024-09-07T00:00:00 <p>Information published.</p> 2.1 2024-09-08T00:00:00 <p>Information published.</p> 2.2 2024-09-11T00:00:00 <p>Information published.</p> An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42374 Out-of-bounds Read 18965-16820 18966-16823 18967-17084 19943-17084 18965-16820 18966-16823 18967-17084 19943-17084 Moderate 18965-16820 Moderate 18966-16823 Moderate 18967-17084 Moderate 19943-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H 18965-16820 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H 18966-16823 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H 18967-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H 19943-17084 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases CBL-Mariner Releases 18967-17084 19943-17084 No Security Update 1.35.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18967-17084 19943-17084 CBL-Mariner Releases 2.0 2026-08-17T21:18:06 <p>Information published.</p> 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> 1.2 2026-02-18T14:26:07 <p>Information published.</p> A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42376 NULL Pointer Dereference 18965-16820 18966-16823 18965-16820 18966-16823 Moderate 18965-16820 Moderate 18966-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18965-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42378 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42379 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42380 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42381 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42382 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42384 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42385 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner JFROG Yes CVE-2021-42386 Use After Free 18965-16820 18966-16823 18965-16820 18966-16823 Important 18965-16820 Important 18966-16823 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18965-16820 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18966-16823 CBL-Mariner Releases 18965-16820 No Security Update 1.34.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18965-16820 CBL-Mariner Releases CBL-Mariner Releases 18966-16823 No Security Update 1.35.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18966-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added busybox to CBL-Mariner 2.0</p> An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43267 Improper Validation of Specified Quantity in Input 16885-16820 16920-16823 16885-16820 16920-16823 Critical 16885-16820 Critical 16920-16823 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 16885-16820 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 16920-16823 CBL-Mariner Releases 16885-16820 16920-16823 No Security Update 5.10.78.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16885-16820 16920-16823 CBL-Mariner Releases 1.0 2021-11-08T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43389 Out-of-bounds Read 16885-16820 16920-16823 16885-16820 16920-16823 Moderate 16885-16820 Moderate 16920-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 16885-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 16920-16823 CBL-Mariner Releases 16885-16820 16920-16823 No Security Update 5.10.78.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16885-16820 16920-16823 CBL-Mariner Releases 1.0 2021-11-10T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34 remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43396 18810-16823 18810-16823 Important 18810-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 18810-16823 CBL-Mariner Releases 18810-16823 No Security Update 2.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18810-16823 CBL-Mariner Releases 1.0 2021-12-16T00:00:00 <p>Information published.</p> Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43519 Uncontrolled Recursion 19211-17084 19084-17084 19080-17084 19081-17084 19082-17084 19083-17084 19211-17084 19084-17084 19080-17084 19081-17084 19082-17084 19083-17084 Moderate 19211-17084 Moderate 19084-17084 Moderate 19080-17084 Moderate 19081-17084 Moderate 19082-17084 Moderate 19083-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19211-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19084-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19080-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19081-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19082-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19083-17084 CBL-Mariner Releases 19211-17084 19081-17084 No Security Update 5.4.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19211-17084 19081-17084 CBL-Mariner Releases CBL-Mariner Releases 19084-17084 19080-17084 No Security Update 1.6.27-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19084-17084 19080-17084 CBL-Mariner Releases CBL-Mariner Releases 19082-17084 No Security Update 5.2.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19082-17084 CBL-Mariner Releases CBL-Mariner Releases 19083-17084 No Security Update 18.2.2-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19083-17084 CBL-Mariner Releases 1.0 2021-12-16T00:00:00 <p>Information published.</p> 1.1 2025-02-20T00:00:00 <p>Added memcached to Azure Linux 3.0 Added ntopng to Azure Linux 3.0 Added lua to CBL-Mariner 2.0</p> 1.2 2026-02-18T14:42:35 <p>Information published.</p> 2.0 2026-08-17T21:47:34 <p>Information published.</p> In uClibc and uClibc-ng before 1.0.39 incorrect handling of special characters in domain names returned by DNS servers via gethostbyname getaddrinfo gethostbyaddr and getnameinfo can lead to output of wrong hostnames (leading to domain hijacking) or injection into applications (leading to remote code execution XSS applications crashes etc.). In other words a validation step which is expected in any stub resolver does not occur. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43523 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 18963-16820 18964-16823 18963-16820 18964-16823 Critical 18963-16820 Critical 18964-16823 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 18963-16820 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 18964-16823 CBL-Mariner Releases 18963-16820 18964-16823 No Security Update 1.0.37-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18963-16820 18964-16823 CBL-Mariner Releases 1.0 2021-11-18T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added uclibc-ng to CBL-Mariner 2.0</p> GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input leading to a segmentation fault on 32-bit platforms. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43618 Integer Overflow or Wraparound 18961-16820 18962-16823 18961-16820 18962-16823 Important 18961-16820 Important 18962-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18961-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18962-16823 CBL-Mariner Releases 18961-16820 No Security Update 6.1.2-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18961-16820 CBL-Mariner Releases CBL-Mariner Releases 18962-16823 No Security Update 6.2.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18962-16823 CBL-Mariner Releases 1.0 2021-11-19T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added gmp to CBL-Mariner 2.0</p> In the Linux kernel through 5.15.2 hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43975 Out-of-bounds Write 18928-16820 18929-16823 18928-16820 18929-16823 Moderate 18928-16820 Moderate 18929-16823 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18928-16820 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 18929-16823 CBL-Mariner Releases 18928-16820 No Security Update 5.10.88.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18928-16820 CBL-Mariner Releases CBL-Mariner Releases 18929-16823 No Security Update 5.15.2.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18929-16823 CBL-Mariner Releases 1.0 2021-11-19T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> In the Linux kernel through 5.15.2 mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-43976 18928-16820 18929-16823 18928-16820 18929-16823 Moderate 18928-16820 Moderate 18929-16823 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18928-16820 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18929-16823 CBL-Mariner Releases 18928-16820 No Security Update 5.10.88.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18928-16820 CBL-Mariner Releases CBL-Mariner Releases 18929-16823 No Security Update 5.15.2.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18929-16823 CBL-Mariner Releases 1.0 2021-11-19T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-44038 Improper Link Resolution Before File Access (&#39;Link Following&#39;) 19649-16823 19649-16823 Important 19649-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19649-16823 CBL-Mariner Releases 19649-16823 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19649-16823 CBL-Mariner Releases 1.0 2025-10-01T23:11:12 <p>Information published.</p> In Keepalived through 2.2.4 the D-Bus policy does not sufficiently restrict the message destination allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2021-44225 18947-16820 18948-16823 18947-16820 18948-16823 Moderate 18947-16820 Moderate 18948-16823 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 18947-16820 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 18948-16823 CBL-Mariner Releases 18947-16820 No Security Update 2.0.10-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18947-16820 CBL-Mariner Releases CBL-Mariner Releases 18948-16823 No Security Update 2.2.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18948-16823 CBL-Mariner Releases 1.0 2021-12-04T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added keepalived to CBL-Mariner 2.0</p> Windows Desktop Bridge Elevation of Privilege Vulnerability Windows Desktop Bridge Microsoft Yes CVE-2021-36957 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 <a href="https://twitter.com/ga1ois">Tao Yan (@Ga1ois)</a> with Palo Alto Networks 1.0 2021-11-09T00:00:00 <p>Information published.</p> Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability Windows Cred SSProvider Protocol Microsoft Yes CVE-2021-41366 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 <a href="https://twitter.com/lxf02942370">Xuefeng Li</a> and <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> with <a href="https://www.sangfor.com/">Sangfor</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> NTFS Elevation of Privilege Vulnerability Windows NTFS Microsoft Yes CVE-2021-41367 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 <a href="https://daramg.gift/">HyungSeok Han</a> with <a href="https://theori.io/">Theori</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2021-41368 11952 11953 11573 11574 11762 11763 10753 10754 10603 10601 10602 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 10603 Remote Code Execution 10601 Remote Code Execution 10602 Important 11952 Important 11953 Important 11573 Important 11574 Important 11762 Important 11763 Important 10753 Important 10754 Important 10603 Important 10601 Important 10602 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11952 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11953 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11573 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11574 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11762 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11763 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 10753 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 10754 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 10603 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 10601 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 10602 Click to Run 11952 11953 11573 11574 11762 11763 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 11573 11574 11762 11763 Click to Run 5002032 https://www.microsoft.com/download/details.aspx?familyid=4fa3fb9b-ea63-40bc-8f8a-ebaa987a131a 5001997 10753 10754 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/5002032 10753 10754 5002032 5002038 5001958 10603 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002038 10603 5002038 5002038 https://www.microsoft.com/download/details.aspx?familyid=6c134a3b-cea9-4287-a457-f4241d5d5988 5001958 10601 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002038 10601 5002038 5002038 https://www.microsoft.com/download/details.aspx?familyid=40478343-30b1-4f43-b5ef-a037314392ad 5001958 10602 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002038 10602 5002038 kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is read access to Windows RDP client passwords by RDP server administrators.</p> Windows RDP Microsoft Yes CVE-2021-41371 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Fast FAT File System Driver Elevation of Privilege Vulnerability Windows Fast FAT Driver Microsoft Yes CVE-2021-41377 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 <a href="https://twitter.com/ezrak1e">ziming zhang</a> with Ant Security Light-Year Lab <a href="https://twitter.com/yhzx_2013">ZiMi (@YHZX_2013)</a> with Alibaba Orion Security Lab 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2021-11-15T00:00:00 <p>Added an acknowledgement. This is an informational change only.</p> Windows NTFS Remote Code Execution Vulnerability Windows NTFS Microsoft Yes CVE-2021-41378 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 <a href="https://daramg.gift">HyungSeok Han</a> with <a href="https://theori.io">Theori</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.</p> Windows Installer Microsoft Yes CVE-2021-41379 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10047 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10048 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 11803 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 11803 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>A remote code execution vulnerability exists when a VM guest fails to properly handle communication on a VMBus channel. To exploit the vulnerability, an authenticated attacker could send a specially crafted communication on the VMBus channel from the guest VM to the Host. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p> <p><strong>Does this update need to be applied to Hyper-V guest virtual machines?</strong></p> <p>If the guest VM is running nested VMs, then this machine becomes a host and is vulnerable to CVE-2021-26443 and the update will need to be applied to mitigate this vulnerability. If the Guest VM is not running nested VMs then the Guest VM is not vulnerable to CVE-2021-26443.</p> <p>** Is my system at risk to CVE-2021-26443 if Hyper-V is not enabled?** No.</p> <p><strong>From a Guest and Host perspective does CVE-2021-26443 only apply to OS running Hyper-V</strong> Yes</p> Windows Virtual Machine Bus Microsoft Yes CVE-2021-26443 11569 11571 11572 11713 11896 11923 11924 11768 11769 11803 11926 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11713 Remote Code Execution 11896 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11803 Remote Code Execution 11926 Critical 11569 Critical 11571 Critical 11572 Critical 11713 Critical 11896 Critical 11923 Critical 11924 Critical 11768 Critical 11769 Critical 11803 Critical 11926 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 9.0 7.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11569 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11569 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11569 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11713 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11713 5007189 5007189 https://support.microsoft.com/help/5007189 11713 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11768 11769 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11768 11769 11803 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 5007215 Wei in Kunlun lab 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2021-11-12T00:00:00 <p>Added FAQ information. This is an informational change only.</p> Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability Role: Windows Hyper-V Microsoft Yes CVE-2021-42274 11569 11571 11572 11896 11923 11924 11768 11769 11803 11926 10853 10816 10855 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11896 Denial of Service 11923 Denial of Service 11924 Denial of Service 11768 Denial of Service 11769 Denial of Service 11803 Denial of Service 11926 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11569 Important 11571 Important 11572 Important 11896 Important 11923 Important 11924 Important 11768 Important 11769 Important 11803 Important 11926 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11569 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11569 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11569 11571 11572 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11768 11769 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11768 11769 11803 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 5007215 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10853 10816 10855 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft COM for Windows Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authorized attacker could exploit this Windows COM vulnerability by sending from a user mode application specially crafted malicious COM traffic directed at the COM Server, which might lead to remote code execution.</p> Windows COM Microsoft Yes CVE-2021-42275 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Codecs Library Microsoft Yes CVE-2021-42276 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 <a href="https://twitter.com/expend20">Simon Barsky (@expend20)</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Chakra Scripting Engine Memory Corruption Vulnerability Windows Scripting Microsoft Yes CVE-2021-42279 11447 11896 11927 11926 11923 11898 11897 11803 11714 11712 11802 11767 11801 10729 11713 11766 11769 10852 11768 11571 11570 11568 11569 10853 10735 10816 Remote Code Execution 11447 Remote Code Execution 11896 Remote Code Execution 11927 Remote Code Execution 11926 Remote Code Execution 11923 Remote Code Execution 11898 Remote Code Execution 11897 Remote Code Execution 11803 Remote Code Execution 11714 Remote Code Execution 11712 Remote Code Execution 11802 Remote Code Execution 11767 Remote Code Execution 11801 Remote Code Execution 10729 Remote Code Execution 11713 Remote Code Execution 11766 Remote Code Execution 11769 Remote Code Execution 10852 Remote Code Execution 11768 Remote Code Execution 11571 Remote Code Execution 11570 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 10853 Remote Code Execution 10735 Remote Code Execution 10816 Critical 11447 Critical 11896 Critical 11927 Critical 11926 Critical 11923 Critical 11898 Critical 11897 Critical 11803 Critical 11714 Critical 11712 Critical 11802 Critical 11767 Critical 11801 Critical 10729 Critical 11713 Critical 11766 Critical 11769 Critical 10852 Critical 11768 Critical 11571 Critical 11570 Critical 11568 Critical 11569 Critical 10853 Critical 10735 Critical 10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11447 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11896 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11927 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11926 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11923 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11898 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11897 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11803 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11714 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11712 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11802 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11767 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11801 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11713 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11766 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11769 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11768 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11571 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11570 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11568 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11569 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11898 11897 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11898 11897 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11898 11897 11803 11802 11767 11801 11766 11769 11768 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11927 11926 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11927 11926 5007215 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 5007205 5007205 https://support.microsoft.com/help/5007205 11923 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11803 11802 11801 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11803 11802 11801 5007186 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11714 11712 11713 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11714 11712 11713 5007189 5007189 https://support.microsoft.com/help/5007189 11714 11712 11713 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11767 11766 11769 11768 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11767 11766 11769 11768 5007186 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11571 11570 11568 11569 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11571 11570 11568 11569 5007206 5007206 https://support.microsoft.com/help/5007206 11571 11570 11568 11569 $NULL with ICT 1.0 2021-11-09T00:00:00 <p>Information published.</p> 2.0 2022-08-03T00:00:00 <p>Revised the Affected Products table to include ChakraCore for this vulnerability.</p> Windows Feedback Hub Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.</p> Windows Feedback Hub Microsoft Yes CVE-2021-42280 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure Sphere Tampering Vulnerability <p><strong>What version of Azure Sphere has the update that protects from this vulnerability?</strong></p> <p>All versions of Azure Sphere that are 21.10 and higher are protected from this vulnerability.</p> <p><strong>How do I ensure my Azure Sphere device has the update?</strong></p> <p>If your device is new or has not been connected to the internet for a while, connect the device to a secure, private local network with internet access and allow the device to automatically update itself. If the device is already online, verify that the operating system version 21.10 has been installed using the Azure Sphere CLI command:</p> <p><code>azsphere device show-os-version </code></p> <p>If the device is connected to the internet and does not yet have the latest update, check the update status with the following Azure Sphere CLI command:</p> <p><code>azsphere device show-deployment-status </code></p> <p><strong>Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?</strong></p> <p>An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability. More information on Azure Sphere’s CVE principles can be found on <a href="https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves">https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves</a></p> Azure Sphere Microsoft Yes CVE-2021-42300 11796 Tampering 11796 Important 11796 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11796 Release Notes 11796 Maybe Security Update 22.07 https://azure.microsoft.com/en-us/updates/general-availability-azure-sphere-os-version-2110/ 11796 Release Notes Claudio Bozzato with <a href="https://talosintelligence.com">Cisco Talos</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure RTOS Information Disclosure Vulnerability <p><strong>What is RTOS?</strong></p> <p>Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See <a href="https://azure.microsoft.com/en-us/services/rtos/">Azure RTOS Overview</a> for more information.</p> <p><strong>What version of Azure RTOS has the update that protects from this vulnerability?</strong></p> <p>Version 6.1.9</p> <p><strong>According to the CVSS, User Interaction is Required. What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user plug in a malicious USB device.</p> <p><strong>What is the action required to take the update?</strong></p> <p>You need to recompile your project with updated USBX source code. In addition, if your USB device driver uses vendor request (registered by ux_device_stack_microsoft_extension_register) you need to update your code to perform memory boundary check.<br /> If you are not using vendor requests, (i.e. you don’t register the callback function) you don’t need to update your code.</p> Azure Real Time Operating System Microsoft Yes CVE-2021-42301 11962 Information Disclosure 11962 Important 11962 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11962 Release Notes 11962 Maybe Security Update 6.1.9 https://azure.microsoft.com/en-us/services/rtos 11962 Release Notes Szymon Heidrich 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure RTOS Elevation of Privilege Vulnerability <p><strong>What is RTOS?</strong></p> <p>Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See <a href="https://azure.microsoft.com/en-us/services/rtos/">Azure RTOS Overview</a> for more information.</p> <p><strong>What version of Azure RTOS has the update that protects from this vulnerability?</strong></p> <p>Version 6.1.9</p> <p><strong>According to the CVSS, User Interaction is Required. What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user plug in a malicious USB device.</p> <p><strong>What is the action required to take the update?</strong></p> <p>You need to recompile your project with updated USBX source code if the project uses host audio/video/CDC-ECM/PIMA, or device storage class.</p> Azure Real Time Operating System Microsoft Yes CVE-2021-42302 11962 Elevation of Privilege 11962 Important 11962 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11962 Release Notes 11962 Maybe Security Update 6.1.9 https://azure.microsoft.com/en-us/services/rtos 11962 Release Notes Szymon Heidrich 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure RTOS Elevation of Privilege Vulnerability <p><strong>What is RTOS?</strong></p> <p>Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See <a href="https://azure.microsoft.com/en-us/services/rtos/">Azure RTOS Overview</a> for more information.</p> <p><strong>What version of Azure RTOS has the update that protects from this vulnerability?</strong></p> <p>Version 6.1.9</p> <p><strong>According to the CVSS, User Interaction is Required. What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user plug in a malicious USB device.</p> <p><strong>What is the action required to take the update?</strong></p> <p>You need to recompile your project with updated USBX source code if the project uses host audio/video/CDC-ECM/PIMA, or device storage class.</p> Azure Real Time Operating System Microsoft Yes CVE-2021-42303 11962 Elevation of Privilege 11962 Important 11962 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11962 Release Notes 11962 Maybe Security Update 6.1.9 https://azure.microsoft.com/en-us/services/rtos 11962 Release Notes Szymon Heidrich 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure RTOS Elevation of Privilege Vulnerability <p><strong>What is RTOS?</strong></p> <p>Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See <a href="https://azure.microsoft.com/en-us/services/rtos/">Azure RTOS Overview</a> for more information.</p> <p><strong>What version of Azure RTOS has the update that protects from this vulnerability?</strong></p> <p>Version 6.1.9</p> <p><strong>According to the CVSS, User Interaction is Required. What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user plug in a malicious USB device.</p> <p><strong>What is the action required to take the update?</strong></p> <p>You need to recompile your project with updated USBX source code if the project uses host audio/video/CDC-ECM/PIMA, or device storage class.</p> Azure Real Time Operating System Microsoft Yes CVE-2021-42304 11962 Elevation of Privilege 11962 Important 11962 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11962 Release Notes 11962 Maybe Security Update 6.1.9 https://azure.microsoft.com/en-us/services/rtos 11962 Release Notes Szymon Heidrich 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability <p><strong>What privileges could an attacker gain with successful exploitation of this vulnerability?</strong></p> <p>An attacker can write to any file where the webserver user (nt authority\network service) has write access.</p> Microsoft Dynamics Microsoft Yes CVE-2021-42316 11921 11664 Remote Code Execution 11921 Remote Code Execution 11664 Critical 11921 Critical 11664 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11664 5008478 https://www.microsoft.com/en-us/download/details.aspx?id=103648 11921 Maybe Security Update 9.1.6.3 https://support.microsoft.com/help/5008478 11921 5008478 5008479 https://www.microsoft.com/en-us/download/details.aspx?id=103647 11664 Maybe Security Update 9.0.34.5 https://support.microsoft.com/help/5008479 11664 5008479 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2021-11-12T00:00:00 <p>Added an FAQ and updated the CVSS score. This is an informational change only.</p> Visual Studio Elevation of Privilege Vulnerability Visual Studio Microsoft Yes CVE-2021-42319 11600 11785 11872 11935 Elevation of Privilege 11600 Elevation of Privilege 11785 Elevation of Privilege 11872 Elevation of Privilege 11935 Important 11600 Important 11785 Important 11872 Important 11935 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11600 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11785 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11872 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11935 Release Notes http://aka.ms/vs/15/release/latest 11600 Maybe Security Update 15.9.41 https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes 11600 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7 11785 Maybe Security Update 16.7.21 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7 11785 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9 11872 Maybe Security Update 16.9.13 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 11872 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11 11935 Maybe Security Update 16.11.6 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 11935 Release Notes <a href="https://labs.redyops.com/">Ilias Dimopoulos of RedyOps Research Labs</a> with <a href="https://neurosoft.gr/">Neurosoft S.A</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Visual Studio Code Elevation of Privilege Vulnerability Visual Studio Code Microsoft Yes CVE-2021-42322 11622 Elevation of Privilege 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.62.1 https://code.visualstudio.com/updates/v1_62 11622 Release Notes Ron Waisberg (<a href="https://twitter.com/epsilan">@epsilan</a>) 1.0 2021-11-09T00:00:00 <p>Information published.</p> 3D Viewer Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>App package versions <strong>7.2107.7012.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.Microsoft3DViewer</code></p> 3D Viewer Microsoft Yes CVE-2021-43208 11760 Remote Code Execution 11760 Important 11760 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11760 Release Notes https://www.microsoft.com/en-us/p/3d-viewer/9nblggh42ths?activetab=pivot:overviewtab 11760 Maybe Security Update 7.2107.7012.0 https://www.microsoft.com/en-us/p/3d-viewer/9nblggh42ths?activetab=pivot:overviewtab 11760 Release Notes Mat Powell of <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> 3D Viewer Remote Code Execution Vulnerability <p><strong>How do I get the updated app?</strong></p> <p>The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see <a href="https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f">here</a> for details.</p> <p>It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers.</p> <p>Customers using the Microsoft Store for Business and Microsoft Store for Education can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>App package versions <strong>7.2107.7012.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.Microsoft3DViewer</code></p> 3D Viewer Microsoft Yes CVE-2021-43209 11760 Remote Code Execution 11760 Important 11760 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11760 Release Notes https://www.microsoft.com/en-us/p/3d-viewer/9nblggh42ths?activetab=pivot:overviewtab 11760 Maybe Security Update 7.2107.7012.0 https://www.microsoft.com/en-us/p/3d-viewer/9nblggh42ths?activetab=pivot:overviewtab 11760 Release Notes Mat Powell of <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Exchange Server Remote Code Execution Vulnerability <p><strong>Where can I find more information about this vulnerability?</strong></p> <p>Please see <a href="https://techcommunity.microsoft.com/t5/exchange-team-blog/released-november-2021-exchange-server-security-updates/ba-p/2933169">Exchange Blog</a> regarding the details of this Exchange release.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). Does the attacker need to be in an authenticated role on the Exchange Server?</strong></p> <p>Yes, the attacker must be authenticated.</p> Microsoft Exchange Server Microsoft Yes CVE-2021-42321 11906 11908 11956 11957 Remote Code Execution 11906 Remote Code Execution 11908 Remote Code Execution 11956 Remote Code Execution 11957 Important 11906 Important 11908 Important 11956 Important 11957 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11906 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11908 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11957 5007409 http://www.microsoft.com/download/details.aspx?familyid=de4b96e0-8d0e-4830-8354-7ed2128e6f82 5007012 11906 Yes Security Update 15.01.2308.020 https://support.microsoft.com/help/5007409 11906 5007409 5007409 https://support.microsoft.com/help/5007409 11906 11908 11956 11957 5007409 http://www.microsoft.com/download/details.aspx?familyid=1c42658f-9d60-4afb-a6c6-e35594b17d39 5007012 11908 Yes Security Update 15.02.0792.019 https://support.microsoft.com/help/5007409 11908 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=688b79c6-7e43-4332-848d-47e88f60818c 5007012 11956 Yes Security Update 15.01.2375.017 https://support.microsoft.com/help/5007409 11956 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=cd28ac6e-eb6f-4747-b9f0-24785b08a012 5007012 11957 Yes Security Update 15.02.0986.014 https://support.microsoft.com/help/5007409 11957 5007409 zcgonvh @ 360 noah lab Yuhao Weng & Zhiniang Peng & Feng Dong with <a href="https://www.sangfor.com/">Sangfor</a> Microsoft Threat Intelligence Center (MSTIC) Microsoft Security Response Center 1.2 2021-11-17T00:00:00 <p>Removed Exchange Server 2013 from the Security Updates table as it is not affected by this vulnerability.</p> 1.4 2022-06-21T00:00:00 <p>Updated acknowledgment. This is an informational change only.</p> 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2021-11-16T00:00:00 <p>Added Microsoft Exchange Server 2013 to the Security Updates table. Customers that are using this version of Microsoft Exchange should install this update to be protected from this vulnerability.</p> 1.3 2021-12-06T00:00:00 <p>Updated acknowledgment. This is an informational change only.</p> Windows 10 Update Assistant Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.</p> Windows Update Assistant Microsoft Yes CVE-2021-43211 11707 Elevation of Privilege 11707 Important 11707 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11707 Release Notes https://www.microsoft.com/en-us/software-download/windows10 11707 Maybe Security Update https://www.microsoft.com/en-us/software-download/windows10 11707 Release Notes Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-16T00:00:00 <p>Information published.</p> Windows 10 Update Assistant Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.</p> Windows Update Assistant Microsoft Yes CVE-2021-42297 11707 Elevation of Privilege 11707 Important 11707 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11707 Release Notes https://www.microsoft.com/en-us/software-download/windows10 11707 Maybe Security Update https://www.microsoft.com/en-us/software-download/windows10 11707 Release Notes Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> <a href="https://twitter.com/lxf02942370">Xuefeng Li</a> and <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> with <a href="https://www.sangfor.com/">Sangfor</a> 1.0 2021-11-16T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38005 Use after free in loader <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38005 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38006 Use after free in storage foundation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38006 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38007 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38007 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38008 Use after free in media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38008 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38009 Inappropriate implementation in cache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38009 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38010 Inappropriate implementation in service workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38010 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38011 Use after free in storage foundation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38011 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38012 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38012 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38013 Heap buffer overflow in fingerprint recognition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38013 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38014 Out of bounds write in Swiftshader <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38014 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38015 Inappropriate implementation in input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38015 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38016 Insufficient policy enforcement in background fetch <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38016 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38017 Insufficient policy enforcement in iframe sandbox <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38017 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38018 Inappropriate implementation in navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38018 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38019 Insufficient policy enforcement in CORS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38019 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38020 Insufficient policy enforcement in contacts picker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38020 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38021 Inappropriate implementation in referrer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38021 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Chromium: CVE-2021-38022 Inappropriate implementation in WebAuthentication <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2021-38022 11655 11655 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.1 2021-11-22T00:00:00 <p>Corrected the Microsoft Edge (Chromium-based) version number. This is an informational change only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Microsoft Edge for iOS Spoofing Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> Microsoft Edge for iOS Microsoft Yes CVE-2021-43220 11966 Spoofing 11966 Moderate 11966 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 11966 Release Notes 11966 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11966 Release Notes Anonymous 1.1 2021-11-22T00:00:00 <p>The following revisions have been made: 1) Updated CVSS scores. 2) In the FAQ, corrected the Microsoft Edge (Chromium-based) version number. These are informational changes only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2021-42308 11655 Spoofing 11655 Low 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://twitter.com/Kirtikumar_A_R">Kirtikumar Anandrao Ramchandani</a> 1.0 2021-11-19T00:00:00 <p>Information published.</p> 1.1 2021-11-22T00:00:00 <p>Added an FAQ. This is an information change only.</p> 1.2 2021-11-30T00:00:00 <p>Added an acknowledgement. This is an informational change only.</p> 1.3 2021-12-07T00:00:00 <p>Updated severity of Microsoft Edge (Chromium-based) from important to low. This is an informational change only.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>96.0.1954.29</td> <td>11/19/2021</td> <td>96.0.4664.45</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2021-43221 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 11655 Release Notes 11655 No Security Update 96.0 1954.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.1 2021-11-22T00:00:00 <p>The following revisions have been made: 1) Updated CVSS scores. 2) In the FAQ, corrected the Microsoft Edge (Chromium-based) version number. These are informational changes only.</p> 1.0 2021-11-19T00:00:00 <p>Information published.</p> Remote Desktop Protocol Client Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.</p> Windows RDP Microsoft Yes CVE-2021-38665 11568 11569 11570 11571 11712 11713 11714 11849 11896 11897 11898 11923 11766 11767 11768 11801 11802 11926 11927 10729 10735 10852 10853 10816 10047 10048 10481 10482 10484 10051 10378 10483 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11849 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10051 Information Disclosure 10378 Information Disclosure 10483 Important 11568 Important 11569 Important 11570 Important 11571 Important 11712 Important 11713 Important 11714 Important 11849 Important 11896 Important 11897 Important 11898 Important 11923 Important 11766 Important 11767 Important 11768 Important 11801 Important 11802 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10378 Important 10483 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11849 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 Release Notes https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windowsdesktop-whatsnew#updates-for-version-122600 11849 Maybe Security Update 1.2.2600 https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windowsdesktop-whatsnew 11849 Release Notes 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11801 11802 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 5007205 5007205 https://support.microsoft.com/help/5007205 11923 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 5007260 5007260 https://support.microsoft.com/help/5007260 10378 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 5007245 5007245 https://support.microsoft.com/help/5007245 10378 Valentino Ricotta with Thalium 1.0 2021-11-09T00:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In the case of a Remote Desktop connection, an attacker with control of a Remote Desktop Server could trigger a remote code execution (RCE) on the RDP client machine when a victim connects to the attacker's server with the vulnerable Remote Desktop Client.</p> Windows RDP Microsoft Yes CVE-2021-38666 11568 11569 11570 11571 11572 11712 11713 11714 11849 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11849 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11766 Remote Code Execution 11767 Remote Code Execution 11768 Remote Code Execution 11769 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11849 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11766 Critical 11767 Critical 11768 Critical 11769 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11849 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 Valentino Ricotta with Thalium 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p> <p>The security update for Microsoft Office 2019 for Mac and Microsoft Office LTSC for Mac 2021 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2021-40442 11099 11573 11574 11575 11605 11762 11763 11951 11952 11953 10739 10740 10656 10654 10655 10611 Remote Code Execution 11099 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11575 Remote Code Execution 11605 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10611 Important 11099 Important 11573 Important 11574 Important 11575 Important 11605 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 10739 Important 10740 Important 10656 Important 10654 Important 10655 Important 10611 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11575 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11605 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10656 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10654 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10655 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10611 5002063 https://www.microsoft.com/download/details.aspx?familyid=d36a2184-624d-4217-86d7-adce6e60df74 4493202 11099 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/kb/5002063 11099 5002063 Click to Run 11573 11574 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Maybe Security Update 16.55.21111400 https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Release Notes 5002053 https://www.microsoft.com/download/details.aspx?familyid=615db11c-ffa4-420b-bcee-59ef97406ebf 5002027 11605 Maybe Security Update 16.0.10380.20000 https://support.microsoft.com/kb/5002053 11605 5002053 5002056 https://www.microsoft.com/download/details.aspx?familyid=20805cdc-42a5-49ce-8c8e-61ae13820adc 5002030 10739 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/5002056 10739 5002056 5002056 https://www.microsoft.com/download/details.aspx?familyid=67963ad4-3c22-49eb-8fa8-d6a7ea30b6ff 5002030 10740 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/5002056 10740 5002056 5002072 5002043 10656 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10656 5002072 5002072 https://www.microsoft.com/download/details.aspx?familyid=0ec80d86-bf94-4736-8588-1bd13f3006c2 5002043 10654 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10654 5002072 5002072 https://www.microsoft.com/download/details.aspx?familyid=aa4d13bd-ec7b-4b7e-adca-4695ac1ad490 5002043 10655 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10655 5002072 5002065 https://www.microsoft.com/download/details.aspx?familyid=dbb3dad4-43c9-46e1-a31e-200664ebe12a 5002036 10611 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/kb/5002065 10611 5002065 Anonymous Finder 2.0 2021-11-16T00:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is read access to Windows RDP client passwords by RDP server administrators.</p> Windows RDP Microsoft Yes CVE-2021-38631 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11766 Information Disclosure 11767 Information Disclosure 11768 Information Disclosure 11769 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11766 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11767 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11768 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11769 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Edge (Chrome based) Spoofing on IE Mode Microsoft Edge (Chromium-based) in IE Mode Microsoft Yes CVE-2021-41351 11770-11568 11770-11569 11770-11570 11770-11571 11770-11712 11770-11713 11770-11714 11770-11766 11770-11767 11770-11768 11770-11898 11770-11897 11770-11927 11770-11802 11770-11896 11770-11926 11770-11801 Spoofing 11770-11568 Spoofing 11770-11569 Spoofing 11770-11570 Spoofing 11770-11571 Spoofing 11770-11712 Spoofing 11770-11713 Spoofing 11770-11714 Spoofing 11770-11766 Spoofing 11770-11767 Spoofing 11770-11768 Spoofing 11770-11898 Spoofing 11770-11897 Spoofing 11770-11927 Spoofing 11770-11802 Spoofing 11770-11896 Spoofing 11770-11926 Spoofing 11770-11801 Important 11770-11568 Important 11770-11569 Important 11770-11570 Important 11770-11571 Important 11770-11712 Important 11770-11713 Important 11770-11714 Important 11770-11766 Important 11770-11767 Important 11770-11768 Important 11770-11898 Important 11770-11897 Important 11770-11927 Important 11770-11802 Important 11770-11896 Important 11770-11926 Important 11770-11801 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11568 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11569 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11570 2.4 2.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11571 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11712 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11713 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11714 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11766 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11767 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11768 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11898 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11897 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11927 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11802 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11896 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11926 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 11770-11801 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11770-11568 11770-11569 11770-11570 11770-11571 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11770-11568 11770-11569 11770-11570 11770-11571 5007206 5007206 https://support.microsoft.com/help/5007206 11770-11568 11770-11569 11770-11570 11770-11571 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11770-11712 11770-11713 11770-11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11770-11712 11770-11713 11770-11714 5007189 5007189 https://support.microsoft.com/help/5007189 11770-11712 11770-11713 11770-11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11770-11766 11770-11767 11770-11768 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11770-11766 11770-11767 11770-11768 5007186 5007186 https://support.microsoft.com/help/5007186 11770-11766 11770-11767 11770-11768 11770-11898 11770-11897 11770-11802 11770-11896 11770-11801 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11770-11898 11770-11897 11770-11896 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11770-11898 11770-11897 11770-11896 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11770-11927 11770-11926 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11770-11927 11770-11926 5007215 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11770-11802 11770-11801 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11770-11802 11770-11801 5007186 James Lee <a href="https://twitter.com/Windowsrcer"/>@Windowsrcer</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Microsoft Yes CVE-2021-41349 11682 11906 11908 11956 11957 Spoofing 11682 Spoofing 11906 Spoofing 11908 Spoofing 11956 Spoofing 11957 Important 11682 Important 11906 Important 11908 Important 11956 Important 11957 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11682 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11906 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11908 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11956 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11957 5007409 http://www.microsoft.com/download/details.aspx?familyid=8ef4e237-7007-4e30-9525-75ae6e66bb41 5007011 11682 Yes Security Update 15.00.1497.026 https://support.microsoft.com/help/5007409 11682 5007409 5007409 https://support.microsoft.com/help/5007409 11682 11906 11908 11956 11957 5007409 http://www.microsoft.com/download/details.aspx?familyid=de4b96e0-8d0e-4830-8354-7ed2128e6f82 5007012 11906 Yes Security Update 15.01.2308.020 https://support.microsoft.com/help/5007409 11906 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=1c42658f-9d60-4afb-a6c6-e35594b17d39 5007012 11908 Yes Security Update 15.02.0792.019 https://support.microsoft.com/help/5007409 11908 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=688b79c6-7e43-4332-848d-47e88f60818c 5007012 11956 Yes Security Update 15.01.2375.017 https://support.microsoft.com/help/5007409 11956 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=cd28ac6e-eb6f-4747-b9f0-24785b08a012 5007012 11957 Yes Security Update 15.02.0986.014 https://support.microsoft.com/help/5007409 11957 5007409 <a href="https://twitter.com/d0rkerdevil">Ashish Kunwar</a> <a href="https://twitter.com/wabafet1">Wabaf3t</a> Rahul Maini with <a href="https://secaid.in/">SecAid</a> MIke Xie Tony Zhan with Dell Tony Zhan with Dell Sainath Reddy Sainath Reddy Thomas Spring with <a href="https://www.swisscom.com/">Swisscom (Schweiz) AG</a> Thomas Spring with <a href="https://www.swisscom.com/">Swisscom (Schweiz) AG</a> Harsh and Rahul with HTTPVoid Rahul Maini with <a href="https://secaid.in/">SecAid</a> Thomas Spring with <a href="https://www.swisscom.com/">Swisscom (Schweiz) AG</a> Thomas Spring with <a href="https://www.swisscom.com/">Swisscom (Schweiz) AG</a> Olga Sviridova with <a href="https://ecommpay.com/">Ecommpay</a> Olga Sviridova with <a href="https://ecommpay.com/">Ecommpay</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2021-11-11T00:00:00 <p>Added acknowledgements. This is an informational change only.</p> NTFS Elevation of Privilege Vulnerability Windows NTFS Microsoft Yes CVE-2021-41370 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 <a href="https://twitter.com/daramg_h">HyungSeok Han</a> with THEORI <a href="https://twitter.com/kkokkokye">JeongOh Kyea</a> with THEORI 1.0 2021-11-09T00:00:00 <p>Information published.</p> FSLogix Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability allows disclosing user data redirected to the profile or Office container via FSLogix Cloud cache. This data can include user profile settings and files.</p> Azure Microsoft Yes CVE-2021-41373 11960 Information Disclosure 11960 Important 11960 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 11960 Release Notes https://aka.ms/fxlogix/download 11960 Maybe Security Update 2.9.7979.62170 http://aka.ms/fslogix/whatsnew 11960 Release Notes 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure Sphere Information Disclosure Vulnerability <p><strong>What version of Azure Sphere has the update that protects from this vulnerability?</strong></p> <p>All versions of Azure Sphere that are 21.10 and higher are protected from this vulnerability.</p> <p><strong>How do I ensure my Azure Sphere device has the update?</strong></p> <p>If your device is new or has not been connected to the internet for a while, connect the device to a secure, private local network with internet access and allow the device to automatically update itself. If the device is already online, verify that the operating system version 21.10 has been installed using the Azure Sphere CLI command:</p> <p><code>azsphere device show-os-version </code></p> <p>If the device is connected to the internet and does not yet have the latest update, check the update status with the following Azure Sphere CLI command:</p> <p><code>azsphere device show-deployment-status </code></p> <p><strong>Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?</strong></p> <p>An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability. More information on Azure Sphere’s CVE principles can be found on <a href="https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves">https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves</a></p> Azure Sphere Microsoft Yes CVE-2021-41374 11796 Information Disclosure 11796 Important 11796 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11796 Release Notes 11796 Maybe Security Update 22.07 https://azure.microsoft.com/en-us/updates/general-availability-azure-sphere-os-version-2110/ 11796 Release Notes Lilith >_> with <a href="https://talosintelligence.com/">Cisco Talos</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure Sphere Information Disclosure Vulnerability <p><strong>What version of Azure Sphere has the update that protects from this vulnerability?</strong></p> <p>All versions of Azure Sphere that are 21.10 and higher are protected from this vulnerability.</p> <p><strong>How do I ensure my Azure Sphere device has the update?</strong></p> <p>If your device is new or has not been connected to the internet for a while, connect the device to a secure, private local network with internet access and allow the device to automatically update itself. If the device is already online, verify that the operating system version 21.10 has been installed using the Azure Sphere CLI command:</p> <p><code>azsphere device show-os-version </code></p> <p>If the device is connected to the internet and does not yet have the latest update, check the update status with the following Azure Sphere CLI command:</p> <p><code>azsphere device show-deployment-status </code></p> <p><strong>Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?</strong></p> <p>An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability. More information on Azure Sphere’s CVE principles can be found on <a href="https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves">https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves</a></p> Azure Sphere Microsoft Yes CVE-2021-41375 11796 Information Disclosure 11796 Important 11796 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11796 Release Notes 11796 Maybe Security Update 22.07 https://azure.microsoft.com/en-us/updates/general-availability-azure-sphere-os-version-2110/ 11796 Release Notes Claudio Bozzato with <a href="https://talosintelligence.com/">Cisco Talos</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure Sphere Information Disclosure Vulnerability <p><strong>What version of Azure Sphere has the update that protects from this vulnerability?</strong></p> <p>All versions of Azure Sphere that are 21.10 and higher are protected from this vulnerability.</p> <p><strong>How do I ensure my Azure Sphere device has the update?</strong></p> <p>If your device is new or has not been connected to the internet for a while, connect the device to a secure, private local network with internet access and allow the device to automatically update itself. If the device is already online, verify that the operating system version 21.10 has been installed using the Azure Sphere CLI command:</p> <p><code>azsphere device show-os-version </code></p> <p>If the device is connected to the internet and does not yet have the latest update, check the update status with the following Azure Sphere CLI command:</p> <p><code>azsphere device show-deployment-status </code></p> <p><strong>Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?</strong></p> <p>An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability. More information on Azure Sphere’s CVE principles can be found on <a href="https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves">https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves</a></p> Azure Sphere Microsoft Yes CVE-2021-41376 11796 Information Disclosure 11796 Important 11796 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 2.3 2.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11796 Release Notes 11796 Maybe Security Update 22.07 https://azure.microsoft.com/en-us/updates/general-availability-azure-sphere-os-version-2110/ 11796 Release Notes <a href="https://">Claudio Bozzato</a> with <a href="https://talosintelligence.com">Cisco Talos</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.</p> Windows Diagnostic Hub Microsoft Yes CVE-2021-42277 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 11600 11785 11872 11935 10577 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11600 Elevation of Privilege 11785 Elevation of Privilege 11872 Elevation of Privilege 11935 Elevation of Privilege 10577 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 11600 Important 11785 Important 11872 Important 11935 Important 10577 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11766 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11767 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11768 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11769 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11600 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11785 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11872 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11935 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10577 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 Release Notes http://aka.ms/vs/15/release/latest 11600 Maybe Security Update 15.9.41 https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes 11600 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7 11785 Maybe Security Update 16.7.21 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7 11785 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9 11872 Maybe Security Update 16.9.13 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 11872 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11 11935 Maybe Security Update 16.11.6 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 11935 Release Notes 5007275 https://aka.ms/vs/14/release/5007275 5001292 10577 Maybe Security Update 27550.00 https://support.microsoft.com/help/5007275 10577 5007275 Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Active Directory Domain Services Elevation of Privilege Vulnerability <p><strong>Where can I find more information about Verification of uniqueness for user principal name, service principal name, or the service principal name alias?</strong></p> <p>See <a href="https://support.microsoft.com/en-us/topic/4651b175-290c-4e59-8fcb-e4e5cd0cdb29">Verification of uniqueness for user principal name, service principal name, and the service principal name alias</a>.</p> Windows Active Directory Microsoft Yes CVE-2021-42282 11571 11572 11923 11924 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11769 Elevation of Privilege 11803 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11571 11572 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11769 11803 5007186 5007186 https://support.microsoft.com/help/5007186 11769 11803 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10816 10855 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10051 10049 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10483 10543 Andrew Bartlett of Catalyst IT 1.0 2021-11-09T00:00:00 <p>Information published.</p> NTFS Elevation of Privilege Vulnerability Windows NTFS Microsoft Yes CVE-2021-42283 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 Anonymous 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability <p><strong>What are the vulnerable configurations of Hyper-V?</strong></p> <p>Any installation of Hyper-V that exposes one or more virtual switches to guests would be vulnerable.</p> Role: Windows Hyper-V Microsoft Yes CVE-2021-42284 11569 11571 11572 11713 11896 11923 11924 11768 11769 11803 11926 10735 10853 10816 10855 10482 10483 10543 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11713 Denial of Service 11896 Denial of Service 11923 Denial of Service 11924 Denial of Service 11768 Denial of Service 11769 Denial of Service 11803 Denial of Service 11926 Denial of Service 10735 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10482 Denial of Service 10483 Denial of Service 10543 Important 11569 Important 11571 Important 11572 Important 11713 Important 11896 Important 11923 Important 11924 Important 11768 Important 11769 Important 11803 Important 11926 Important 10735 Important 10853 Important 10816 Important 10855 Important 10482 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11569 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11571 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11572 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11713 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11896 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11923 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11924 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11768 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11769 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11803 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 11926 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10482 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10483 6.8 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11569 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11569 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11569 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11713 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11713 5007189 5007189 https://support.microsoft.com/help/5007189 11713 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11768 11769 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11768 11769 11803 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10853 10816 10855 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10482 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10482 10483 10543 Maxime Villard, of M.O.R.S.E. 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2022-01-14T00:00:00 <p>Updated FAQ information. This is an informational change only.</p> Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Microsoft Yes CVE-2021-42285 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10047 10048 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10047 10048 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10047 10048 10051 10049 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10481 10482 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10481 10482 10484 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10481 10482 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10481 10482 10483 10543 5007247 5006714 10484 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10484 5007247 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 BugHunter010 (@CyberKunlun) 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability Windows Core Shell Microsoft Yes CVE-2021-42286 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11766 Elevation of Privilege 11767 Elevation of Privilege 11768 Elevation of Privilege 11769 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11768 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 JIWO Technology Co., Ltd 1.0 2021-11-09T00:00:00 <p>Information published.</p> Active Directory Domain Services Elevation of Privilege Vulnerability <p><strong>Where can I find more information about the improved authentication process added by the update for CVE-2021-42287?</strong></p> <p>See <a href="https://support.microsoft.com/en-us/topic/9dafac11-e0d0-4cb8-959a-143bd0201041">Authentication updates</a>.</p> Windows Active Directory Microsoft Yes CVE-2021-42287 11571 11572 11923 11924 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11769 Elevation of Privilege 11803 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11571 11572 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11769 11803 5007186 5007186 https://support.microsoft.com/help/5007186 11769 11803 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10816 10855 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10051 10049 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10483 10543 Andrew Bartlett of Catalyst IT 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Hello Security Feature Bypass Vulnerability Windows Hello Microsoft Yes CVE-2021-42288 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11570 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11712 Security Feature Bypass 11713 Security Feature Bypass 11714 Security Feature Bypass 11896 Security Feature Bypass 11897 Security Feature Bypass 11898 Security Feature Bypass 11766 Security Feature Bypass 11767 Security Feature Bypass 11768 Security Feature Bypass 11769 Security Feature Bypass 11801 Security Feature Bypass 11802 Security Feature Bypass 11803 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11568 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11569 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11570 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11571 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11572 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11712 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11713 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11714 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11896 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11897 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11898 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11766 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11767 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11768 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11769 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11801 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11802 5.7 5.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 11803 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 Damian Velardo, EY Advanced Security Centre 1.0 2021-11-09T00:00:00 <p>Information published.</p> Active Directory Domain Services Elevation of Privilege Vulnerability <p><strong>Where can I find more information about Active Directory permissions updates?</strong></p> <p>See <a href="https://support.microsoft.com/en-us/topic/536d5555-ffba-4248-a60e-d6cbc849cde1">Active Directory permissions updates</a>.</p> Windows Active Directory Microsoft Yes CVE-2021-42291 11571 11572 11923 11924 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11769 Elevation of Privilege 11803 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11571 11572 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11769 11803 5007186 5007186 https://support.microsoft.com/help/5007186 11769 11803 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10816 10855 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10051 10049 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10483 10543 Lockheed Martin Red Team Andrew Bartlett of Catalyst IT 1.0 2021-11-09T00:00:00 <p>Information published.</p> 1.1 2023-01-26T00:00:00 <p>Added an acknowledgement. This is an informational change only.</p> Microsoft Excel Security Feature Bypass Vulnerability <p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p> <p>The security update for Microsoft Office 2019 for Mac and Microsoft Office LTSC for Mac 2021 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office Excel Microsoft Yes CVE-2021-42292 11573 11574 11575 11762 11763 11951 11952 11953 10739 10740 10753 10754 10656 10654 10655 10603 10601 10602 Security Feature Bypass 11573 Security Feature Bypass 11574 Security Feature Bypass 11575 Security Feature Bypass 11762 Security Feature Bypass 11763 Security Feature Bypass 11951 Security Feature Bypass 11952 Security Feature Bypass 11953 Security Feature Bypass 10739 Security Feature Bypass 10740 Security Feature Bypass 10753 Security Feature Bypass 10754 Security Feature Bypass 10656 Security Feature Bypass 10654 Security Feature Bypass 10655 Security Feature Bypass 10603 Security Feature Bypass 10601 Security Feature Bypass 10602 Important 11573 Important 11574 Important 11575 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 10739 Important 10740 Important 10753 Important 10754 Important 10656 Important 10654 Important 10655 Important 10603 Important 10601 Important 10602 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11573 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11574 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11762 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11763 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11951 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11952 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11953 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10739 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10740 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10753 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10754 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10656 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10654 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10655 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10603 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10601 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10602 Click to Run 11573 11574 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Maybe Security Update 16.55.21111400 https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Release Notes 5002056 https://www.microsoft.com/download/details.aspx?familyid=20805cdc-42a5-49ce-8c8e-61ae13820adc 5002030 10739 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/5002056 10739 5002056 4486670 https://www.microsoft.com/download/details.aspx?familyid=7876487a-b905-4c62-a3c3-c38b2a7cfc02 4475514 10739 10753 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/4486670 10739 10753 4486670 5002056 https://www.microsoft.com/download/details.aspx?familyid=67963ad4-3c22-49eb-8fa8-d6a7ea30b6ff 5002030 10740 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/5002056 10740 5002056 4486670 https://www.microsoft.com/download/details.aspx?familyid=953b724e-30cd-4ba0-92e4-75523d2e4457 4475514 10740 10754 Maybe Security Update 16.0.5239.1001 https://support.microsoft.com/help/4486670 10740 10754 4486670 5002072 5002043 10656 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10656 5002072 5002035 5002007 10656 10603 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10656 10603 5002035 5002072 https://www.microsoft.com/download/details.aspx?familyid=0ec80d86-bf94-4736-8588-1bd13f3006c2 5002043 10654 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10654 5002072 5002035 https://www.microsoft.com/download/details.aspx?familyid=ee4a2a15-1118-442a-ae35-a4fc0ccb9248 5002007 10654 10601 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002035 10654 10601 5002035 5002072 https://www.microsoft.com/download/details.aspx?familyid=aa4d13bd-ec7b-4b7e-adca-4695ac1ad490 5002043 10655 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002072 10655 5002072 5002035 https://www.microsoft.com/download/details.aspx?familyid=28ed4be7-dc7f-41aa-9bd3-ba9fb4e01842 5002007 10655 10602 Maybe Security Update 15.0.5397.1001 https://support.microsoft.com/help/5002035 10655 10602 5002035 MSTIC MSTIC 2.0 2021-11-16T00:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2021-42296 11762 11763 11952 11953 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Important 11762 Important 11763 Important 11952 Important 11953 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 Click to Run 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 11952 11953 Click to Run <a href="https://twitter.com/rwxcode">ShiLongan</a> with <a href="https://www.nsfocus.com.cn/">NSFOCUS TIANJI LAB</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Defender Remote Code Execution Vulnerability <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>Version 1.1.18700.3</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> <h2 id="suggested-actions">Suggested Actions</h2> <p><strong>Verify that the update is installed</strong></p> <p>Customers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p> <ol> <li>Open the Windows Security program. For example, type Security in the Search bar, and select the Windows Security program.</li> <li>In the navigation pane, select Virus &amp; threat protection.</li> <li>Under Virus &amp; threat protection updates in the main window, select Check for updates</li> <li>Select Check for updates again.</li> <li>In the navigation pane, select Settings, and then select About.</li> <li>Examine the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or the signature package version number matches or exceeds the version number that you are trying to verify as installed.</li> </ol> <p>For affected software, verify that the Microsoft Malware Protection Engine version is 1.1.18700.3 or later.</p> <p><strong>If necessary, install the update</strong></p> <p>Administrators of enterprise antimalware deployments should ensure that their update management software is configured to automatically approve and distribute engine updates and new malware definitions. Enterprise administrators should also verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded, approved and deployed in their environment.</p> <p>For end-users, the affected software provides built-in mechanisms for the automatic detection and deployment of this update. For these customers, the update will be applied within 48 hours of its availability. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.</p> <p>End users that do not wish to wait can manually update their antimalware software.</p> Windows Defender Microsoft Yes CVE-2021-42298 11902 Remote Code Execution 11902 Critical 11902 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11902 Release Notes 11902 No Security Update 1.1.18700.3 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide 11902 Release Notes bee13oy and bo13oy of <a href="https://www.cyberkl.com/">Cyber Kunlun Lab</a> 1.0 2021-11-09T00:00:00 <p>Information published.</p> Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Microsoft Yes CVE-2021-42305 11682 11906 11908 11956 11957 Spoofing 11682 Spoofing 11906 Spoofing 11908 Spoofing 11956 Spoofing 11957 Important 11682 Important 11906 Important 11908 Important 11956 Important 11957 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11682 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11906 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11908 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11956 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11957 5007409 http://www.microsoft.com/download/details.aspx?familyid=8ef4e237-7007-4e30-9525-75ae6e66bb41 5007011 11682 Yes Security Update 15.00.1497.026 https://support.microsoft.com/help/5007409 11682 5007409 5007409 https://support.microsoft.com/help/5007409 11682 11906 11908 11956 11957 5007409 http://www.microsoft.com/download/details.aspx?familyid=de4b96e0-8d0e-4830-8354-7ed2128e6f82 5007012 11906 Yes Security Update 15.01.2308.020 https://support.microsoft.com/help/5007409 11906 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=1c42658f-9d60-4afb-a6c6-e35594b17d39 5007012 11908 Yes Security Update 15.02.0792.019 https://support.microsoft.com/help/5007409 11908 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=688b79c6-7e43-4332-848d-47e88f60818c 5007012 11956 Yes Security Update 15.01.2375.017 https://support.microsoft.com/help/5007409 11956 5007409 5007409 http://www.microsoft.com/download/details.aspx?familyid=cd28ac6e-eb6f-4747-b9f0-24785b08a012 5007012 11957 Yes Security Update 15.02.0986.014 https://support.microsoft.com/help/5007409 11957 5007409 1.0 2021-11-09T00:00:00 <p>Information published.</p> Windows Denial of Service Vulnerability Microsoft Windows Microsoft Yes CVE-2021-41356 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11766 11767 11768 11769 11801 11802 11803 11926 11927 10729 10735 10852 10853 10816 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11923 Denial of Service 11924 Denial of Service 11766 Denial of Service 11767 Denial of Service 11768 Denial of Service 11769 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Denial of Service 11926 Denial of Service 11927 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11766 Important 11767 Important 11768 Important 11769 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11568 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11569 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11570 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11571 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11572 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11712 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11713 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11714 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11896 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11897 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11898 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11923 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11924 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11766 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11767 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11768 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11769 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11801 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11802 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11803 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11926 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 11927 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10729 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10852 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 7.5 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11568 11569 11570 11571 11572 5007189 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007189 5006667 11712 11713 11714 Yes Security Update 10.0.18363.1916 https://support.microsoft.com/help/5007189 11712 11713 11714 5007189 5007189 https://support.microsoft.com/help/5007189 11712 11713 11714 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11896 11897 11898 Yes Security Update 10.0.19043.1348 https://support.microsoft.com/help/5007186 11896 11897 11898 5007186 5007186 https://support.microsoft.com/help/5007186 11896 11897 11898 11766 11767 11768 11769 11801 11802 11803 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11766 11767 11768 11769 11803 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11766 11767 11768 11769 11803 5007186 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11801 11802 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11801 11802 5007186 5007215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007215 5006674 11926 11927 Yes Security Update 10.0.22000.318 https://support.microsoft.com/help/5007215 11926 11927 5007215 5007207 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007207 5006675 10729 10735 Yes Security Update 10.0.10240.19119 https://support.microsoft.com/help/5007207 10729 10735 5007207 5007207 https://support.microsoft.com/help/5007207 10729 10735 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10852 10853 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10852 10853 10816 10855 1.0 2021-11-09T00:00:00 <p>Information published.</p> Active Directory Domain Services Elevation of Privilege Vulnerability <p><strong>Where can I find more information about Active Directory SAM Account hardening changes?</strong></p> <p>See <a href="https://support.microsoft.com/topic/5975b463-4c95-45e1-831a-d120004e258e">Active Directory SAM Account hardening changes</a>.</p> Windows Active Directory Microsoft Yes CVE-2021-42278 11571 11572 11923 11924 11769 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11769 Elevation of Privilege 11803 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11769 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11769 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5007206 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007206 5006672 11571 11572 Yes Security Update 10.0.17763.2300 https://support.microsoft.com/help/5007206 11571 11572 5007206 5007206 https://support.microsoft.com/help/5007206 11571 11572 5007205 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007205 5006699 11923 11924 Yes Security Update 10.0.20348.350 https://support.microsoft.com/help/5007205 11923 11924 5007205 5007205 https://support.microsoft.com/help/5007205 11923 11924 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11769 Yes Security Update 10.0.19041.1348 https://support.microsoft.com/help/5007186 11769 5007186 5007186 https://support.microsoft.com/help/5007186 11769 11803 5007186 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007186 5006670 11803 Yes Security Update 10.0.19042.1348 https://support.microsoft.com/help/5007186 11803 5007186 5007192 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007192 5006669 10816 10855 Yes Security Update 10.0.14393.4770 https://support.microsoft.com/help/5007192 10816 10855 5007192 5007192 https://support.microsoft.com/help/5007192 10816 10855 5007263 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007263 5006736 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21282 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007263 5007263 https://support.microsoft.com/help/5007263 9312 10287 9318 9344 5007246 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007246 9312 10287 9318 9344 Yes Security Only 6.0.6003.21282 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007246 5007246 https://support.microsoft.com/help/5007246 9312 10287 9318 9344 5007236 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007236 5006743 10051 10049 Yes Monthly Rollup 6.1.7601.25769 https://support.microsoft.com/help/5007236 10051 10049 5007236 5007236 https://support.microsoft.com/help/5007236 10051 10049 5007233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007233 10051 10049 Yes Security Only 6.1.7601.25769 https://support.microsoft.com/help/5007233 10051 10049 5007233 5007233 https://support.microsoft.com/help/5007233 10051 10049 5007260 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007260 5006739 10378 10379 Yes Monthly Rollup 6.2.9200.23517 https://support.microsoft.com/help/5007260 10378 10379 5007260 5007260 https://support.microsoft.com/help/5007260 10378 10379 5007245 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007245 10378 10379 Yes Security Only 6.2.9200.23517 https://support.microsoft.com/help/5007245 10378 10379 5007245 5007245 https://support.microsoft.com/help/5007245 10378 10379 5007247 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007247 5006714 10483 10543 Yes Monthly Rollup 6.3.9600.20174 https://support.microsoft.com/help/5007247 10483 10543 5007247 5007247 https://support.microsoft.com/help/5007247 10483 10543 5007255 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5007255 10483 10543 Yes Security Only 6.3.9600.20174 https://support.microsoft.com/help/5007255 10483 10543 5007255 5007255 https://support.microsoft.com/help/5007255 10483 10543 Andrew Bartlett of Catalyst IT 1.0 2021-11-09T00:00:00 <p>Information published.</p> OpenSSL: CVE-2021-3711 SM2 Decryption Buffer Overflow <p><strong>Why is this OpenSSL Software Foundation CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in OpenSSL Software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a> for more information.</p> Visual Studio OpenSSL Software Foundation Yes CVE-2021-3711 11600 11785 11872 11935 12020 11969 Remote Code Execution 11600 Remote Code Execution 11785 Remote Code Execution 11872 Remote Code Execution 11935 Remote Code Execution 12020 Remote Code Execution 11969 Critical 11600 Critical 11785 Critical 11872 Critical 11935 Critical 12020 Critical 11969 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely Release Notes http://aka.ms/vs/15/release/latest 11600 Maybe Security Update 15.9.41 https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes 11600 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7 11785 Maybe Security Update 16.7.21 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7 11785 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9 11872 Maybe Security Update 16.9.13 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 11872 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11 11935 Maybe Security Update 16.11.6 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 11935 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.1 12020 Maybe Security Update 17.1.1 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12020 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.0 11969 Maybe Security Update 17.0.7 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes 11969 Release Notes 1.0 2021-11-09T00:00:00 <p>Information published.</p> 2.0 2022-03-08T00:00:00 <p>Added Visual Studio 2022 version 17.0 and Visual Studio 2022 version 17.1 to the Security Updates table as these versions of Visual Studio are affected by this vulnerability. Customers running either version of Visual Studio 2022 should install the March 2022 security updates to be protected from this vulnerability.</p> Azure RTOS Information Disclosure Vulnerability <p><strong>What is RTOS?</strong></p> <p>Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See <a href="https://azure.microsoft.com/en-us/services/rtos/">Azure RTOS Overview</a> for more information.</p> <p><strong>What version of Azure RTOS has the update that protects from this vulnerability?</strong></p> <p>Version 6.1.9</p> <p><strong>According to the CVSS, User Interaction is Required. What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user plug in a malicious USB device.</p> <p><strong>What is the action required to take the update?</strong></p> <p>You need to recompile your project with updated USBX source code if the project uses host audio/video/CDC-ECM/PIMA, or device storage class.</p> Azure Real Time Operating System Microsoft Yes CVE-2021-42323 11962 Information Disclosure 11962 Important 11962 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11962 Release Notes 11962 Maybe Security Update 6.1.9 https://azure.microsoft.com/en-us/services/rtos 11962 Release Notes Szymon Heidrich 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure RTOS Information Disclosure Vulnerability <p><strong>What is RTOS?</strong></p> <p>Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See <a href="https://azure.microsoft.com/en-us/services/rtos/">Azure RTOS Overview</a> for more information.</p> <p><strong>What version of Azure RTOS has the update that protects from this vulnerability?</strong></p> <p>Version 6.1.9</p> <p><strong>According to the CVSS, User Interaction is Required. What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user plug in a malicious USB device.</p> <p><strong>What is the action required to take the update?</strong></p> <p>Developers using USBX source code need to recompile their project with the updated source code and retest their HID device application.</p> Azure Real Time Operating System Microsoft Yes CVE-2021-26444 11962 Information Disclosure 11962 Important 11962 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11962 Release Notes 11962 Maybe Security Update 6.1.9 https://azure.microsoft.com/en-us/services/rtos 11962 Release Notes Szymon Heidrich 1.0 2021-11-09T00:00:00 <p>Information published.</p> Azure Active Directory Information Disclosure Vulnerability <p>An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate <a href="https://docs.microsoft.com/en-us/graph/api/resources/keycredential?view=graph-rest-1.0">keyCredential</a>  on an Azure AD <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals">Application or Service Principal</a> (which is not recommended). This vulnerability allows a user or service in the tenant with application read access to read the private key data that was added to the application.</p> <p>Azure AD addressed this vulnerability by preventing disclosure of any private key values added to the application.</p> <p>Microsoft has identified services that could manifest this vulnerability, and steps that customers should take to be protected. Refer to the FAQ section for more information.</p> <p>For more details on this issue, please refer to the <a href="https://aka.ms/CVE-2021-42306-AAD">MSRC Blog Entry</a>.</p> <p><strong>Where can I find more information?</strong></p> <p>Please see the<a href="https://aka.ms/CVE-2021-42306-AAD"> MSRC Blog here.</a></p> <p><strong>What Microsoft services are known to be affected by this vulnerability?</strong></p> <table> <thead> <tr> <th>Product/Service</th> <th>Microsoft's Mitigation</th> <th>Customer impact assessment and remediation</th> </tr> </thead> <tbody> <tr> <td>Azure Automation uses the <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals">Application and Service Principal keyCredential</a> APIs when Automation Run-As Accounts are created.</td> <td>Azure Automation deployed an update to the service to prevent private keys data in clear text from being uploaded to Azure AD applications. Run-As accounts created or renewed after 10/15/2021 are not impacted and do not require further action.</td> <td>Automation Run As accounts created with an <a href="https://docs.microsoft.com/en-us/azure/automation/manage-runas-account#cert-renewal">Azure Automation self-signed certificate</a> between 10/15/2020 and 10/15/2021 that have not been renewed are impacted. Separately <a href="https://docs.microsoft.com/en-us/azure/automation/manage-runas-account?WT.mc_id=Portal-Microsoft_Azure_Automation#renew-an-enterprise-or-third-party-certificate">customers who bring their own certificates</a> could be affected. This is regardless of the renewal date of the certificate. To identify and remediate impacted Azure AD applications associated with impacted Automation Run-As accounts, please navigate to this <a href="https://aka.ms/azure-automation-runas-cred-roll">Github Repo</a>. In addition, Azure Automation supports Managed Identities Support (GA announced on October 2021). Migrating to Managed Identities from Run-As will mitigate this issue. Please follow the guidance <a href="https://docs.microsoft.com/en-us/azure/automation/enable-managed-identity-for-automation#migrate-from-existing-run-as-accounts-to-managed-identity">here</a> to migrate.</td> </tr> <tr> <td>Azure Migrate service creates Azure AD applications to enable <a href="https://docs.microsoft.com/en-us/azure/migrate/migrate-appliance-architecture">Azure Migrate appliances</a> to communicate with the service’s endpoints.</td> <td>Azure Migrate deployed an update to prevent private key data in clear text from being uploaded to Azure AD applications. Azure Migrate appliances that were registered after 11/02/2021 and had <a href="https://docs.microsoft.com/en-us/azure/migrate/migrate-appliance#check-the-appliance-services-version">Appliance configuration manager version 6.1.220.1 and above</a> are not impacted and do not require further action.</td> <td>Azure Migrate appliances registered prior to 11/02/2021 and/or appliances registered after 11/02/2021 where <a href="https://docs.microsoft.com/en-us/azure/migrate/migrate-appliance#appliance-upgrades">auto-update was disabled</a> could affected by this issue. To identify and remediate any impacted Azure AD applications associated with Azure Migrate appliances, please navigate to this <a href="https://go.microsoft.com/fwlink/?linkid=2180156">link</a>.</td> </tr> <tr> <td>Azure Site Recovery (ASR) creates Azure AD applications to communicate with the ASR <a href="https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture-preview#outbound-connectivity-for-urls">service endpoints</a></td> <td>Azure Site Recovery deployed an update to prevent private key data in clear text from being uploaded to Azure AD applications. Customers using Azure Site Recovery’s preview experience “<a href="https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-set-up-replication-tutorial-preview">VMware to Azure Disaster Recovery</a>” after 11/01/2021 are <strong>not</strong> impacted and do <strong>not</strong> require further action.</td> <td>Customers who have deployed and registered the <a href="https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture-preview">preview version</a> of VMware to Azure DR experience with ASR before 11/01/2021 could be affected. To identify and remediate the impacted AAD Apps associated with such Azure Site Recovery appliances, please navigate to this <a href="https://aka.ms/ASR_AADApp_CertRotation">link</a>.</td> </tr> <tr> <td>Azure AD applications and Service Principals [1]</td> <td>Microsoft has blocked reading private key data as of 10/30/2021.</td> <td>Follow the guidance available at <a href="https://aka.ms/aad-app-credential-remediation-guide">https://aka.ms/aad-app-credential-remediation-guide</a> to assess if your application key credentials need to be rotated. The guidance walks through the assessment steps to identify if private key information was stored in keyCredentials and provides remediation options for credential rotation.</td> </tr> </tbody> </table> <p>[1] This issue only affects Azure AD Applications and Service Principals where private key material in clear text was added to a keyCredential. Microsoft recommends taking precautionary steps to identify any additional instances of this issue in applications where you manage credentials and take remediation steps if impact is found.</p> Azure Microsoft Yes CVE-2021-42306 11656 11963 11964 11965 Information Disclosure 11656 Information Disclosure 11963 Information Disclosure 11964 Information Disclosure 11965 Important 11656 Important 11963 Important 11964 Important 11965 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11656 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11963 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11964 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11965 About 11656 Maybe Security Update https://azure.microsoft.com/en-in/services/automation/ 11656 About <a href="https://www.allscripts.com/"> AllScripts </a> <a href="https://twitter.com/kfosaaen">Karl Fosaaen</a> with <a href="https://www.netspi.com/blog/technical/">NetSPI</a> 1.0 2021-11-17T00:00:00 <p>Information published.</p> Power BI Report Server Spoofing Vulnerability <p>A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim.</p> <p>Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates files to the server using the victim's session and run scripts in the security context of the user and perform privilege escalation in case the victim has admin privileges when the victim access one of the HTML files present in the malicious Power BI template uploaded.</p> <p>The security update addresses the vulnerability by helping to ensure that Power BI Report Server properly sanitize file uploads.</p> Power BI Microsoft Yes CVE-2021-41372 12036 12037 Spoofing 12036 Spoofing 12037 Important 12036 Important 12037 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.6 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C 12036 7.6 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C 12037 5007903 https://www.microsoft.com/download/details.aspx?id=57270 12036 Maybe Security Update 1.11.8091.10468 https://support.microsoft.com/help/5007903 12036 5007903 5007903 https://www.microsoft.com/download/details.aspx?id=57270 12037 Maybe Security Update 1.12.7977.29537 https://support.microsoft.com/help/5007903 12037 5007903 Emanuele Barbeno with <a href="https://www.compass-security.com/en/">Compass Security</a> 1.0 2021-11-09T08:00:00 <p>Information published.</p> 2.0 2022-04-15T07:00:00 <p>In the Security Updates table, the following revisions have been made: 1) Added &quot;version 1.12.7977.29537&quot; to Power BI Server entry. 2) Added Power BI Server version 1.11.8091.10468 to the table as it is also affected by this vulnerability. 3) Added Fixed Build numbers to indicate which build contains the fix that addresses this vulnerability.</p> 2.1 2026-08-19T07:00:00 <p>Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.</p>