October 2021 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2021-Oct
2021-Oct
Final
1.0
20
2026-02-18T02:35:08
October 2021 Security Updates
2021-10-12T07:00:00
2026-02-18T02:35:08
<h2 id="updates-this-month">Updates this Month</h2>
<p>This release consists of security updates for the following products, features and roles.</p>
<ul>
<li>.NET Core & Visual Studio</li>
<li>Active Directory Federation Services</li>
<li>Console Window Host</li>
<li>HTTP.sys</li>
<li>Microsoft DWM Core Library</li>
<li>Microsoft Dynamics</li>
<li>Microsoft Edge (Chromium-based)</li>
<li>Microsoft Exchange Server</li>
<li>Microsoft Graphics Component</li>
<li>Microsoft Intune</li>
<li>Microsoft Office Excel</li>
<li>Microsoft Office SharePoint</li>
<li>Microsoft Office Visio</li>
<li>Microsoft Office Word</li>
<li>Microsoft Surface Pro 3</li>
<li>Microsoft Windows Codecs Library</li>
<li>Rich Text Edit Control</li>
<li>Role: DNS Server</li>
<li>Role: Windows Active Directory Server</li>
<li>Role: Windows AD FS Server</li>
<li>Role: Windows Hyper-V</li>
<li>System Center</li>
<li>Visual Studio</li>
<li>Windows AppContainer</li>
<li>Windows AppX Deployment Service</li>
<li>Windows Bind Filter Driver</li>
<li>Windows Cloud Files Mini Filter Driver</li>
<li>Windows Common Log File System Driver</li>
<li>Windows Desktop Bridge</li>
<li>Windows DirectX</li>
<li>Windows Event Tracing</li>
<li>Windows exFAT File System</li>
<li>Windows Fastfat Driver</li>
<li>Windows Installer</li>
<li>Windows Kernel</li>
<li>Windows MSHTML Platform</li>
<li>Windows Nearby Sharing</li>
<li>Windows Network Address Translation (NAT)</li>
<li>Windows Print Spooler Components</li>
<li>Windows Remote Procedure Call Runtime</li>
<li>Windows Storage Spaces Controller</li>
<li>Windows TCP/IP</li>
<li>Windows Text Shaping</li>
<li>Windows Win32K</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2>
<table>
<thead>
<tr>
<th>Date</th>
<th>Blog Post</th>
</tr>
</thead>
<tbody>
<tr>
<td>February 9, 2021</td>
<td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td>
</tr>
<tr>
<td>January 13, 2021</td>
<td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>
</tr>
<tr>
<td>December 8, 2020</td>
<td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td>
</tr>
<tr>
<td>November 9, 2020</td>
<td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>
</tr>
</tbody>
</table>
<h2 id="relevant-information">Relevant Information</h2>
<ul>
<li>IMPORTANT ANNOUNCEMENT: In the coming months we will be moving to a new, more user-friendly and flexible system for delivering Microsoft Technical Security Notifications. Upcoming information about how you can sign up for and receive these Technical Security Notifications will be coming soon.</li>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li>
<li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li>
<li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
<li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li>
</ul>
<h2 id="faqs-mitigations-and-workarounds">FAQs, Mitigations, and Workarounds</h2>
<p>The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting <strong>FAQs</strong>, <strong>Mitigations</strong> and <strong>Workarounds</strong> columns in the <strong>Edit Columns</strong> panel.</p>
<ul>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1971">CVE-2020-1971</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26427">CVE-2021-26427</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26441">CVE-2021-26441</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-3449">CVE-2021-3449</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-3450">CVE-2021-3450</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-37974">CVE-2021-37974</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-37975">CVE-2021-37975</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-37976">CVE-2021-37976</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38662">CVE-2021-38662</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38663">CVE-2021-38663</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38672">CVE-2021-38672</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40454">CVE-2021-40454</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40456">CVE-2021-40456</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40457">CVE-2021-40457</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40460">CVE-2021-40460</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40468">CVE-2021-40468</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40469">CVE-2021-40469</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40471">CVE-2021-40471</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40472">CVE-2021-40472</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40473">CVE-2021-40473</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40474">CVE-2021-40474</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40475">CVE-2021-40475</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40479">CVE-2021-40479</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40480">CVE-2021-40480</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40481">CVE-2021-40481</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40482">CVE-2021-40482</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40485">CVE-2021-40485</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40486">CVE-2021-40486</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40487">CVE-2021-40487</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40489">CVE-2021-40489</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41332">CVE-2021-41332</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41336">CVE-2021-41336</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41337">CVE-2021-41337</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41342">CVE-2021-41342</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41343">CVE-2021-41343</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41352">CVE-2021-41352</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41355">CVE-2021-41355</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41361">CVE-2021-41361</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41363">CVE-2021-41363</a></li>
</ul>
<h2 id="known-issues">Known Issues</h2>
<p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p>
<p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p>
<table>
<thead>
<tr>
<th>KB Article</th>
<th>Applies To</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://support.microsoft.com/help/5006670">5006670</a></td>
<td>Windows 10, Version 20H2</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006672">5006672</a></td>
<td>Windows 10, Version 1809, Windows Server 2019</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006714">5006714</a></td>
<td>Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006715">5006715</a></td>
<td>Windows Server 2008 SP2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006728">5006728</a></td>
<td>Windows 7, Windows Server 2008 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006729">5006729</a></td>
<td>Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006732">5006732</a></td>
<td>Windows Server 2012 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006736">5006736</a></td>
<td>Windows Server 2008 SP2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006739">5006739</a></td>
<td>Windows Server 2012 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5006743">5006743</a></td>
<td>Windows 7, Windows Server 2008 R2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5007012">5007011</a></td>
<td>Exchange Server 2013</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/5007012">5007012</a></td>
<td>Exchange Server 2016, Exchange Server 2019</td>
</tr>
</tbody>
</table>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Microsoft Exchange Server 2019 Cumulative Update 11
Microsoft Exchange Server 2019 Cumulative Update 10
Microsoft Exchange Server 2016 Cumulative Update 21
Microsoft Exchange Server 2016 Cumulative Update 22
Microsoft Exchange Server 2013 Cumulative Update 23
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 21H1 for x64-based Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows Server, version 20H2 (Server Core Installation)
Windows 11 version 21H2 for x64-based Systems
Windows 11 version 21H2 for ARM64-based Systems
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Office Online Server
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Excel 2013 RT Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Word 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Dynamics 365 Customer Engagement V9.1
Microsoft Dynamics 365 Customer Engagement V9.0
Microsoft Dynamics 365 (on-premises) version 9.0
Microsoft Dynamics 365 (on-premises) version 9.1
PowerShell 7.1
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
.NET 5.0
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Microsoft Edge (Chromium-based)
Microsoft Surface Pro 3
System Center 2016 Operations Manager
System Center 2019 Operations Manager
System Center 2012 R2 Operations Manager
Intune management extension
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2012 R2 (Server Core installation)
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2013 RT Service Pack 1
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Windows Server 2016
Microsoft Surface Pro 3
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Microsoft SharePoint Server 2019
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Office Online Server
Microsoft Edge (Chromium-based)
Microsoft Dynamics 365 (on-premises) version 9.0
Microsoft Exchange Server 2013 Cumulative Update 23
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
.NET 5.0
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
System Center 2016 Operations Manager
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows Server, version 20H2 (Server Core Installation)
System Center 2019 Operations Manager
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Windows 10 Version 21H1 for x64-based Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 21H1 for 32-bit Systems
Intune management extension
Microsoft Exchange Server 2016 Cumulative Update 21
Microsoft Exchange Server 2019 Cumulative Update 10
Microsoft Dynamics 365 (on-premises) version 9.1
Windows Server 2022
Windows Server 2022 (Server Core installation)
PowerShell 7.1
Windows 11 version 21H2 for x64-based Systems
Windows 11 version 21H2 for ARM64-based Systems
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft Office LTSC for Mac 2021
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Dynamics 365 Customer Engagement V9.0
Microsoft Dynamics 365 Customer Engagement V9.1
Microsoft Exchange Server 2016 Cumulative Update 22
Microsoft Exchange Server 2019 Cumulative Update 11
System Center 2012 R2 Operations Manager
azl3 samba 4.18.3-1 on Azure Linux 3.0
cm1 kernel 5.10.78.1-1 on CBL Mariner 1.0
cbl2 kernel 5.10.78.1-1 on CBL Mariner 2.0
azl3 ceph 18.2.1-1 on Azure Linux 3.0
azl3 keda 2.14.0-1 on Azure Linux 3.0
cbl2 bind 9.16.29-1 on CBL Mariner 2.0
cbl2 golang 1.17.8-1 on CBL Mariner 2.0
cbl2 nodejs 16.14.0-1 on CBL Mariner 2.0
cbl2 mysql 8.0.28-1 on CBL Mariner 2.0
cbl2 strongswan 5.9.5-1 on CBL Mariner 2.0
cbl2 kernel 5.15.2.1-1 on CBL Mariner 2.0
cm1 rubygem-fluentd 1.11.0-1 on CBL Mariner 1.0
cm1 kernel 5.10.78.1-2 on CBL Mariner 1.0
cm1 vim 8.2.3564-2 on CBL Mariner 1.0
cm1 moby-containerd 1.4.4+azure-4 on CBL Mariner 1.0
cbl2 moby-containerd 1.4.4+azure-4 on CBL Mariner 2.0
cm1 mysql 8.0.27-1 on CBL Mariner 1.0
cm1 babel 2.6.0-9 on CBL Mariner 1.0
cbl2 babel 2.9.1-1 on CBL Mariner 2.0
cm1 strongswan 5.7.2-4 on CBL Mariner 1.0
cm1 golang 1.16.9-1 on CBL Mariner 1.0
cm1 kernel 5.10.74.1-1 on CBL Mariner 1.0
cm1 redis 5.0.14-1 on CBL Mariner 1.0
cbl2 redis 6.2.6-1 on CBL Mariner 2.0
cm1 httpd 2.4.51-1 on CBL Mariner 1.0
cbl2 php on CBL Mariner 2.0
cbl2 ceph 16.2.10-7 on CBL Mariner 2.0
azl3 ceph 16.2.10-3 on Azure Linux 3.0
azl3 keda 2.4.0-15 on Azure Linux 3.0
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Node.js before 16.6.0 14.17.4 and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption to change process behavior.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
hackerone
Yes
CVE-2021-22930
Use After Free
18775-16823
18775-16823
Critical
18775-16823
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
18775-16823
CBL-Mariner Releases
18775-16823
No
Security Update
16.14.0-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18775-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-2471
18974-16820
18974-16820
Moderate
18974-16820
5.9
5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H
18974-16820
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-2479
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-2481
18806-16823
18806-16823
Moderate
18806-16823
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Lame cache can be abused to severely degrade resolver performance
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
isc
Yes
CVE-2021-25219
18760-16823
18760-16823
Moderate
18760-16823
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
18760-16823
CBL-Mariner Releases
18760-16823
No
Security Update
9.16.29-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18760-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Integer overflow issue with Streams in Redis
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32627
Integer Overflow or Wraparound
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18985-16820
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
Vulnerability in handling large ziplists
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32628
Integer Overflow or Wraparound
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18985-16820
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
DoS vulnerability in Redis
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32675
Allocation of Resources Without Limits or Throttling
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18985-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
Integer overflow issue with intsets in Redis
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32687
Integer Overflow or Wraparound
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18985-16820
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
Integer overflow that can lead to heap overflow in redis-cli redis-sentinel on some platforms
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32762
Integer Overflow or Wraparound
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18985-16820
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35537
18806-16823
18806-16823
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35546
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35575
18806-16823
18806-16823
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Error Handling). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35596
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35597
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
18974-16820
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35607
18806-16823
18806-16823
Moderate
18806-16823
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35608
18806-16823
18806-16823
Moderate
18806-16823
5.3
5.3
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 1.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35618
18974-16820
18974-16820
Low
18974-16820
1.8
1.8
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
18974-16820
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior 7.5.23 and prior 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35621
18974-16820
18974-16820
Moderate
18974-16820
6.3
6.3
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
18974-16820
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35623
18974-16820
18806-16823
18974-16820
18806-16823
Low
18974-16820
Low
18806-16823
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
18974-16820
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35624
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35625
18974-16820
18806-16823
18974-16820
18806-16823
Low
18974-16820
Low
18806-16823
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
18974-16820
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35628
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35629
18806-16823
18806-16823
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35630
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35632
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.4
4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.4
4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35633
18974-16820
18806-16823
18974-16820
18806-16823
Low
18974-16820
Low
18806-16823
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
18974-16820
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35634
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35637
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35638
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35641
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35642
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35643
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35647
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35648
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module when GOARCH=wasm GOOS=js is used.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-38297
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
18978-16820
18772-16823
18978-16820
18772-16823
Critical
18978-16820
Critical
18772-16823
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
18978-16820
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
18772-16823
CBL-Mariner Releases
18978-16820
No
Security Update
1.16.9-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18978-16820
CBL-Mariner Releases
CBL-Mariner Releases
18772-16823
No
Security Update
1.17.8-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18772-16823
CBL-Mariner Releases
1.0
2021-10-22T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added golang to CBL-Mariner 2.0</p>
Heap-based Buffer Overflow in vim/vim
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
@huntrdev
Yes
CVE-2021-3872
Heap-based Buffer Overflow
18971-16820
18971-16820
Important
18971-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
18971-16820
CBL-Mariner Releases
18971-16820
No
Security Update
8.2.3564-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18971-16820
CBL-Mariner Releases
1.0
2021-10-22T00:00:00
<p>Information published.</p>
Heap-based Buffer Overflow in vim/vim
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
@huntrdev
Yes
CVE-2021-3875
Heap-based Buffer Overflow
18971-16820
18971-16820
Moderate
18971-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
18971-16820
CBL-Mariner Releases
18971-16820
No
Security Update
8.2.3564-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18971-16820
CBL-Mariner Releases
1.0
2021-10-21T00:00:00
<p>Information published.</p>
Insufficiently restricted permissions on plugin directories
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-41103
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
18972-16820
18973-16823
18972-16820
18973-16823
Important
18972-16820
Important
18973-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18972-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18973-16823
CBL-Mariner Releases
18972-16820
18973-16823
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18972-16820
18973-16823
CBL-Mariner Releases
1.0
2021-11-03T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added moby-containerd to CBL-Mariner 2.0</p>
null pointer dereference in h2 fuzzing
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
apache
Yes
CVE-2021-41524
NULL Pointer Dereference
18987-16820
18987-16820
Important
18987-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18987-16820
CBL-Mariner Releases
18987-16820
No
Security Update
2.4.51-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18987-16820
CBL-Mariner Releases
1.0
2021-10-13T00:00:00
<p>Information published.</p>
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
apache
Yes
CVE-2021-41773
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
18987-16820
18987-16820
Important
18987-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
18987-16820
CBL-Mariner Releases
18987-16820
No
Security Update
2.4.51-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18987-16820
CBL-Mariner Releases
1.0
2021-10-13T00:00:00
<p>Information published.</p>
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-41864
Integer Overflow or Wraparound
18979-16820
16920-16823
18979-16820
16920-16823
Important
18979-16820
Important
16920-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18979-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
16920-16823
CBL-Mariner Releases
18979-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18979-16820
CBL-Mariner Releases
CBL-Mariner Releases
16920-16823
No
Security Update
5.10.78.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16920-16823
CBL-Mariner Releases
1.0
2021-10-08T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added kernel to CBL-Mariner 2.0</p>
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-41991
Integer Overflow or Wraparound
18977-16820
18902-16823
18977-16820
18902-16823
Important
18977-16820
Important
18902-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18977-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18902-16823
CBL-Mariner Releases
18977-16820
No
Security Update
5.7.2-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18977-16820
CBL-Mariner Releases
CBL-Mariner Releases
18902-16823
No
Security Update
5.9.5-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18902-16823
CBL-Mariner Releases
1.0
2021-10-22T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added strongswan to CBL-Mariner 2.0</p>
The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-42008
Out-of-bounds Write
18979-16820
16920-16823
18979-16820
16920-16823
Important
18979-16820
Important
16920-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18979-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
16920-16823
CBL-Mariner Releases
18979-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18979-16820
CBL-Mariner Releases
CBL-Mariner Releases
16920-16823
No
Security Update
5.10.78.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16920-16823
CBL-Mariner Releases
1.0
2021-10-13T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added kernel to CBL-Mariner 2.0</p>
An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-42252
18979-16820
16920-16823
18979-16820
16920-16823
Important
18979-16820
Important
16920-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18979-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
16920-16823
CBL-Mariner Releases
18979-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18979-16820
CBL-Mariner Releases
CBL-Mariner Releases
16920-16823
No
Security Update
5.10.78.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16920-16823
CBL-Mariner Releases
1.0
2021-10-19T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added kernel to CBL-Mariner 2.0</p>
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-42327
Out-of-bounds Write
16885-16820
16920-16823
16885-16820
16920-16823
Moderate
16885-16820
Moderate
16920-16823
6.7
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
16885-16820
6.7
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
16920-16823
CBL-Mariner Releases
16885-16820
16920-16823
No
Security Update
5.10.78.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16885-16820
16920-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added kernel to CBL-Mariner 2.0</p>
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c because avc_ca_pmt mishandles bounds checking.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-42739
Out-of-bounds Write
16885-16820
16920-16823
16885-16820
16920-16823
Moderate
16885-16820
Moderate
16920-16823
6.7
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
16885-16820
6.7
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
16920-16823
CBL-Mariner Releases
16885-16820
16920-16823
No
Security Update
5.10.78.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16885-16820
16920-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added kernel to CBL-Mariner 2.0</p>
GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-42836
Uncontrolled Resource Consumption
19877-17084
17761-17084
19877-17084
17761-17084
Important
19877-17084
Important
17761-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
19877-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17761-17084
CBL-Mariner Releases
19877-17084
17761-17084
No
Security Update
2.14.0-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19877-17084
17761-17084
CBL-Mariner Releases
1.0
2024-09-11T00:00:00
<p>Information published.</p>
1.1
2026-02-18T02:35:08
<p>Information published.</p>
An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges aka CID-a3727a8bac0a. This occurs because of an attempt to access the subjective credentials of another task.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-43057
Use After Free
18970-16820
18929-16823
18970-16820
18929-16823
Important
18970-16820
Important
18929-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18970-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18929-16823
CBL-Mariner Releases
18970-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18970-16820
CBL-Mariner Releases
CBL-Mariner Releases
18929-16823
No
Security Update
5.15.2.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18929-16823
CBL-Mariner Releases
1.0
2021-11-08T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added kernel to CBL-Mariner 2.0</p>
The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows when using the built-in HTTP form-based file upload mechanism via the mg_handle_form_request API. Web applications that use the file upload form handler and use parts of the user-controlled filename in the output path are susceptible to directory traversal
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
VDOO
Yes
CVE-2020-27304
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
19856-17084
19814-17086
16939-17084
19856-17084
19814-17086
16939-17084
19856-17084
19814-17086
Critical
16939-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19856-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19814-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16939-17084
CBL-Mariner Releases
19856-17084
16939-17084
No
Security Update
18.2.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19856-17084
16939-17084
CBL-Mariner Releases
1.0
2024-06-30T07:00:00
<p>Information published.</p>
Multiple vulnerabilities in Firebird client extension
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
php
Yes
CVE-2021-21704
Out-of-bounds Read
19641-16823
19641-16823
Moderate
19641-16823
5.0
5.0
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
19641-16823
CBL-Mariner Releases
19641-16823
No
Security Update
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19641-16823
CBL-Mariner Releases
1.0
2025-10-01T23:11:08
<p>Information published.</p>
Incorrect URL validation in FILTER_VALIDATE_URL
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
php
Yes
CVE-2021-21705
Improper Input Validation
19641-16823
19641-16823
Moderate
19641-16823
4.3
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
19641-16823
CBL-Mariner Releases
19641-16823
No
Security Update
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19641-16823
CBL-Mariner Releases
1.0
2025-10-01T23:11:08
<p>Information published.</p>
ReDoS vulnerability in parser_apache2
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-41186
Uncontrolled Resource Consumption
18956-16820
18956-16820
Important
18956-16820
5.9
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
18956-16820
CBL-Mariner Releases
18956-16820
No
Security Update
1.11.0-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18956-16820
CBL-Mariner Releases
1.0
2025-10-01T23:11:12
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-2478
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Lua scripts can overflow the heap-based Lua stack in Redis
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32626
Heap-based Buffer Overflow
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18985-16820
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
Vulnerability in Lua Debugger in Redis
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-32672
Out-of-bounds Read
18985-16820
18986-16823
18985-16820
18986-16823
Moderate
18985-16820
Moderate
18986-16823
4.3
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
18985-16820
4.3
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-09T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via MySQL Protcol to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35577
18806-16823
18806-16823
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35591
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35602
18806-16823
18806-16823
Moderate
18806-16823
5.0
5.0
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
18806-16823
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-12-16T00:00:00
<p>Information published.</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35610
18974-16820
18806-16823
18974-16820
18806-16823
Important
18974-16820
Important
18806-16823
7.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
18974-16820
7.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35612
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
5.5
5.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
18974-16820
5.5
5.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35622
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35626
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35627
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-27T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35631
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35635
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35636
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35640
18974-16820
18806-16823
18974-16820
18806-16823
Low
18974-16820
Low
18806-16823
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
18974-16820
2.7
2.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35644
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35645
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2021-35646
18974-16820
18806-16823
18974-16820
18806-16823
Moderate
18974-16820
Moderate
18806-16823
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18974-16820
4.9
4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
18806-16823
CBL-Mariner Releases
18974-16820
No
Security Update
8.0.27-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18974-16820
CBL-Mariner Releases
CBL-Mariner Releases
18806-16823
No
Security Update
8.0.28-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18806-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added mysql to CBL-Mariner 2.0</p>
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2021-3671
NULL Pointer Dereference
16864-17084
16864-17084
Moderate
16864-17084
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
16864-17084
CBL-Mariner Releases
16864-17084
No
Security Update
4.18.3-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16864-17084
CBL-Mariner Releases
1.0
2024-10-15T00:00:00
<p>Information published.</p>
Heap-based Buffer Overflow in vim/vim
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
@huntrdev
Yes
CVE-2021-3903
Heap-based Buffer Overflow
18971-16820
18971-16820
Important
18971-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18971-16820
CBL-Mariner Releases
18971-16820
No
Security Update
8.2.3564-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18971-16820
CBL-Mariner Releases
1.0
2021-11-03T00:00:00
<p>Information published.</p>
Integer overflow issue with strings in Redis
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2021-41099
Integer Overflow or Wraparound
18985-16820
18986-16823
18985-16820
18986-16823
Important
18985-16820
Important
18986-16823
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18985-16820
7.5
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
18986-16823
CBL-Mariner Releases
18985-16820
No
Security Update
5.0.14-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18985-16820
CBL-Mariner Releases
CBL-Mariner Releases
18986-16823
No
Security Update
6.2.6-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18986-16823
CBL-Mariner Releases
1.0
2021-10-14T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added redis to CBL-Mariner 2.0</p>
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-41990
Integer Overflow or Wraparound
18977-16820
18902-16823
18977-16820
18902-16823
Important
18977-16820
Important
18902-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18977-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
18902-16823
CBL-Mariner Releases
18977-16820
No
Security Update
5.7.2-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18977-16820
CBL-Mariner Releases
CBL-Mariner Releases
18902-16823
No
Security Update
5.9.5-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18902-16823
CBL-Mariner Releases
1.0
2021-10-22T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added strongswan to CBL-Mariner 2.0</p>
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal leading to code execution.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2021-42771
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
18975-16820
18976-16823
18975-16820
18976-16823
Important
18975-16820
Important
18976-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18975-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
18976-16823
CBL-Mariner Releases
18975-16820
No
Security Update
2.6.0-9
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18975-16820
CBL-Mariner Releases
CBL-Mariner Releases
18976-16823
No
Security Update
2.9.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
18976-16823
CBL-Mariner Releases
1.0
2021-10-26T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added babel to CBL-Mariner 2.0</p>
PHP-FPM memory access in root process leading to privilege escalation
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
php
Yes
CVE-2021-21703
Out-of-bounds Write
19641-16823
19641-16823
Important
19641-16823
7.8
7.8
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
19641-16823
CBL-Mariner Releases
19641-16823
No
Security Update
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19641-16823
CBL-Mariner Releases
1.0
2025-10-01T23:11:07
<p>Information published.</p>
Microsoft Exchange Server Denial of Service Vulnerability
Microsoft Exchange Server
Microsoft
CVE-2021-34453
11957
11908
11906
11956
Denial of Service
11957
Denial of Service
11908
Denial of Service
11906
Denial of Service
11956
Important
11957
Important
11908
Important
11906
Important
11956
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11957
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11908
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11906
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11956
5007012
http://www.microsoft.com/download/details.aspx?familyid=493ebadc-791f-43fc-b6da-349e9b227ef9
11957
Yes
Security Update
15.02.0986.009
5007012
https://support.microsoft.com/help/5007012
11957
11908
11906
11956
5007012
http://www.microsoft.com/download/details.aspx?familyid=5409b101-36fc-4e5c-82bc-d0f6068b2405
5004780
11908
Yes
Security Update
15.02.0922.014
5007012
http://www.microsoft.com/download/details.aspx?familyid=ffea3a31-7286-4932-867a-a38952c1efee
5004779
11906
Yes
Security Update
15.01.2308.015
5007012
http://www.microsoft.com/download/details.aspx?familyid=2a8da394-c405-4cc7-aa58-e96aa19acd4f
11956
Yes
Security Update
15.01.2375.012
<a href="https://twitter.com/n_joly">Nicolas Joly</a> of Microsoft Corporation
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows TCP/IP Denial of Service Vulnerability
Windows TCP/IP
Microsoft
CVE-2021-36953
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Denial of Service
11568
Denial of Service
11569
Denial of Service
11570
Denial of Service
11571
Denial of Service
11572
Denial of Service
11712
Denial of Service
11713
Denial of Service
11714
Denial of Service
11896
Denial of Service
11897
Denial of Service
11898
Denial of Service
11923
Denial of Service
11924
Denial of Service
11766
Denial of Service
11767
Denial of Service
11768
Denial of Service
11769
Denial of Service
11801
Denial of Service
11802
Denial of Service
11803
Denial of Service
11926
Denial of Service
11927
Denial of Service
10729
Denial of Service
10735
Denial of Service
10852
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
10047
Denial of Service
10048
Denial of Service
10481
Denial of Service
10482
Denial of Service
10484
Denial of Service
9312
Denial of Service
10287
Denial of Service
9318
Denial of Service
9344
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11568
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11569
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11570
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11571
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11572
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11712
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11713
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11714
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11896
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11897
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11898
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11923
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11924
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11766
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11767
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11768
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11769
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11801
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11802
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11803
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11926
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
11927
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10729
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10735
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10852
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10853
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10816
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10855
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10047
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10048
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10481
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10482
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10484
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
9312
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10287
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
9318
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
9344
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10051
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10049
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10378
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10379
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10483
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
Huichen Lin and Dong Seong Kim of <a href="https://www.itee.uq.edu.au/">School of Information Technology and Electrical Engineering - The University of Queensland</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver
Microsoft
CVE-2021-40443
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://cyberkl.com">Asuka with Cyber KunLun</a>
<a href="https://daramg.gift/">HyungSeok Han</a> with <a href="https://theori.io/">Theori</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
Windows Win32K
Microsoft
CVE-2021-40449
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected;DOS:N/A
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11568
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11569
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11570
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11571
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11572
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11712
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11713
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11714
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11896
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11897
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11898
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11923
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11924
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11766
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11767
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11768
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11769
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11801
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11802
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11803
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11926
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11927
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10729
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10735
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10852
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10853
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10816
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10855
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10047
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10048
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10481
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10482
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10484
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9312
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10287
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9318
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9344
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10051
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10049
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10378
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10379
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10483
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/oct0xor">Boris Larin (oct0xor)</a> with <a href="https://www.kaspersky.com/">Kaspersky</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Rich Text Edit Control Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>An attacker that successfully exploited this vulnerability could recover cleartext passwords from memory.</p>
Rich Text Edit Control
Microsoft
CVE-2021-40454
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
11573
11574
11575
11762
11763
10753
10754
10603
10601
10602
11952
11953
11951
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11896
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11575
Information Disclosure
11762
Information Disclosure
11763
Information Disclosure
10753
Information Disclosure
10754
Information Disclosure
10603
Information Disclosure
10601
Information Disclosure
10602
Information Disclosure
11952
Information Disclosure
11953
Information Disclosure
11951
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Important
11573
Important
11574
Important
11575
Important
11762
Important
11763
Important
10753
Important
10754
Important
10603
Important
10601
Important
10602
Important
11952
Important
11953
Important
11951
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11568
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11569
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11570
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11571
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11572
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11712
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11713
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11714
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11896
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11897
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11898
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11923
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11924
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11766
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11767
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11768
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11769
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11801
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11802
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11803
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11926
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11927
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10729
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10735
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10852
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10853
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10816
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10855
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10481
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10482
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10484
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10378
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10379
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10483
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10543
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11573
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11574
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11575
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11762
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11763
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10753
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10754
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10603
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10601
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
10602
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11952
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11953
5.5
5.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
11951
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
11575
11951
Maybe
Security Update
16.54.21101001
4461476
https://www.microsoft.com/downloads/details.aspx?familyid=1b083f65-0949-4308-ba93-b3b16627ed3d
10753
Maybe
Security Update
16.0.5227.1000
4461476
https://www.microsoft.com/downloads/details.aspx?familyid=2ef6ff63-1d0b-461f-9138-374a8bc3e45f
10754
Maybe
Security Update
16.0.5227.1000
4018332
10603
Maybe
Security Update
15.0.5389.1000
4018332
https://www.microsoft.com/downloads/details.aspx?familyid=78136135-61b5-45a7-ae67-43c9218d0d79
10601
Maybe
Security Update
15.0.5389.1000
4018332
https://www.microsoft.com/downloads/details.aspx?familyid=baa81cf8-2921-42ce-8bbb-56ba5b482301
10602
Maybe
Security Update
15.0.5389.1000
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Installer Spoofing Vulnerability
Windows Installer
Microsoft
CVE-2021-40455
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Spoofing
11568
Spoofing
11569
Spoofing
11570
Spoofing
11571
Spoofing
11572
Spoofing
11712
Spoofing
11713
Spoofing
11714
Spoofing
11896
Spoofing
11897
Spoofing
11898
Spoofing
11923
Spoofing
11924
Spoofing
11766
Spoofing
11767
Spoofing
11768
Spoofing
11769
Spoofing
11801
Spoofing
11802
Spoofing
11803
Spoofing
11926
Spoofing
11927
Spoofing
10729
Spoofing
10735
Spoofing
10852
Spoofing
10853
Spoofing
10816
Spoofing
10855
Spoofing
10047
Spoofing
10048
Spoofing
10481
Spoofing
10482
Spoofing
10484
Spoofing
9312
Spoofing
10287
Spoofing
9318
Spoofing
9344
Spoofing
10051
Spoofing
10049
Spoofing
10378
Spoofing
10379
Spoofing
10483
Spoofing
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11568
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11569
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11570
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11571
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11572
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11712
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11713
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11714
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11896
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11897
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11898
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11766
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11767
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11768
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11769
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11801
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11802
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11803
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11927
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10729
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10735
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10852
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10853
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10816
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10855
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10047
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10048
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10481
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10482
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10484
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
9312
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10287
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
9318
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
9344
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10051
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10049
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10378
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10379
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10483
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/asafrub">Asaf Rubinfeld</a> with <a href="https://www.fortiguard.com/">Fortinet’s FortiGuard Labs</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows AD FS Security Feature Bypass Vulnerability
<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>
<p>This vulnerability could allow an attacker to bypass ADFS BannedIPList entries for WS-Trust workflows.</p>
Role: Windows AD FS Server
Microsoft
CVE-2021-40456
11571
11572
11923
11924
11769
11803
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
11923
Security Feature Bypass
11924
Security Feature Bypass
11769
Security Feature Bypass
11803
Important
11571
Important
11572
Important
11923
Important
11924
Important
11769
Important
11803
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.3
4.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
11571
5.3
4.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
11572
5.3
4.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
11923
5.3
4.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
11924
5.3
4.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
11769
5.3
4.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
11803
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11571
11572
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11769
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11769
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>
<p>A user would have to open a maliciously crafted email sent to Dynamics 365 Customer Engagement.</p>
Microsoft Dynamics
Microsoft
CVE-2021-40457
11955
11954
Spoofing
11955
Spoofing
11954
Important
11955
Important
11954
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.4
6.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:F/RL:O/RC:C
11955
7.4
6.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:F/RL:O/RC:C
11954
4618810
https://www.microsoft.com/en-us/download/details.aspx?id=103437
11955
Maybe
Security Update
9.1.4
4618795
https://www.microsoft.com/en-us/download/details.aspx?id=103377
11954
Maybe
Security Update
9.0.31.7
<a href="https://www.prodwaregroup.com/es-es/">Prodware</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
1.1
2021-10-13T07:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Cloud Files Mini Filter Driver
Microsoft
CVE-2021-40475
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11896
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11568
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11569
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11570
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11571
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11572
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11712
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11713
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11714
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11896
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11897
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11898
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11766
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11767
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11768
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11769
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11801
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11802
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11803
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
ziming zhang of Ant Security Light-Year Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows AppContainer Elevation Of Privilege Vulnerability
Windows AppContainer
Microsoft
CVE-2021-40476
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11896
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11897
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11898
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11923
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11924
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11766
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11767
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11768
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11769
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11801
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11802
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11803
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11926
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11927
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
James Forshaw of <a href="https://googleprojectzero.blogspot.com/">Google Project Zero</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing
Microsoft
CVE-2021-40477
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller
Microsoft
CVE-2021-40478
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
nghiadt12 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft Office SharePoint
Microsoft
CVE-2021-41344
10950
11585
10612
Remote Code Execution
10950
Remote Code Execution
11585
Remote Code Execution
10612
Important
10950
Important
11585
Important
10612
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
8.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
10950
8.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11585
8.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
10612
5002029
https://www.microsoft.com/downloads/details.aspx?familyid=dc08d7a5-c213-4842-8824-e43876d474a1
5002020
10950
Maybe
Security Update
16.0.5227.1000
5002028
https://www.microsoft.com/downloads/details.aspx?familyid=48b05306-b1ff-468c-8b77-1d477549f14c
5002018
11585
Maybe
Security Update
16.0.10379.20000
5002042
https://www.microsoft.com/downloads/details.aspx?familyid=6b6c0519-83e6-451c-a793-084d12a7eb54
5002024
10612
Maybe
Security Update
15.0.5389.1000
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
1.1
2021-10-19T07:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server
Microsoft
CVE-2021-41348
11906
11908
11957
11956
Elevation of Privilege
11906
Elevation of Privilege
11908
Elevation of Privilege
11957
Elevation of Privilege
11956
Important
11906
Important
11908
Important
11957
Important
11956
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11906
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11908
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11957
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11956
5007012
http://www.microsoft.com/download/details.aspx?familyid=ffea3a31-7286-4932-867a-a38952c1efee
5004779
11906
Yes
Security Update
15.01.2308.015
5007012
https://support.microsoft.com/help/5007012
11906
11908
11957
11956
5007012
http://www.microsoft.com/download/details.aspx?familyid=5409b101-36fc-4e5c-82bc-d0f6068b2405
5004780
11908
Yes
Security Update
15.02.0922.014
5007012
http://www.microsoft.com/download/details.aspx?familyid=493ebadc-791f-43fc-b6da-349e9b227ef9
11957
Yes
Security Update
15.02.0986.009
5007012
http://www.microsoft.com/download/details.aspx?familyid=2a8da394-c405-4cc7-aa58-e96aa19acd4f
11956
Yes
Security Update
15.01.2375.012
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server
Microsoft
CVE-2021-41350
11906
11908
11957
11956
Spoofing
11906
Spoofing
11908
Spoofing
11957
Spoofing
11956
Important
11906
Important
11908
Important
11957
Important
11956
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11906
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11908
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11957
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11956
5007012
http://www.microsoft.com/download/details.aspx?familyid=ffea3a31-7286-4932-867a-a38952c1efee
5004779
11906
Yes
Security Update
15.01.2308.015
5007012
https://support.microsoft.com/help/5007012
11906
11908
11957
11956
5007012
http://www.microsoft.com/download/details.aspx?familyid=5409b101-36fc-4e5c-82bc-d0f6068b2405
5004780
11908
Yes
Security Update
15.02.0922.014
5007012
http://www.microsoft.com/download/details.aspx?familyid=493ebadc-791f-43fc-b6da-349e9b227ef9
11957
Yes
Security Update
15.02.0986.009
5007012
http://www.microsoft.com/download/details.aspx?familyid=2a8da394-c405-4cc7-aa58-e96aa19acd4f
11956
Yes
Security Update
15.01.2375.012
Diamond Chen
1.0
2021-10-12T07:00:00
<p>Information published.</p>
.NET Core and Visual Studio Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p>
.NET Core & Visual Studio
Microsoft
CVE-2021-41355
11925
11872
11935
11761
Information Disclosure
11925
Information Disclosure
11872
Information Disclosure
11935
Information Disclosure
11761
Important
11925
Important
11872
Important
11935
Important
11761
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.7
5.0
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11925
5.7
5.0
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11872
5.7
5.0
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11935
5.7
5.0
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11761
Release Notes
https://github.com/PowerShell/PowerShell#get-powershell
11925
Maybe
Security Update
7.1.5
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
11872
Maybe
Security Update
16.9.12
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
11935
Maybe
Security Update
16.11.5
Release Notes
https://dotnet.microsoft.com/download/dotnet/5.0
11761
Maybe
Security Update
5.0.11
Srinivas Nunna of Microsoft
1.0
2021-10-12T07:00:00
<p>Information published.</p>
2.0
2021-10-14T07:00:00
<p>Revised the Security Updates table to include PowerShell 7.1 because this version of PowerShell 7 incorporates the version of .NET that is affected by this vulnerability. See <a href="https://github.com/PowerShell/Announcements/issues/26">https://github.com/PowerShell/Announcements/issues/26</a> for more information.</p>
Active Directory Federation Server Spoofing Vulnerability
<p><strong>How could an attacker exploit this vulnerability?</strong></p>
<p>The ADFS (Active Directory Federation Services) services are vulnerable during the logout redirect request to cross-site scripting of the post logout redirect URI. An attacker who successfully exploited this vulnerability could leave an application using this ADFS library vulnerable to common XSS attacks.</p>
Active Directory Federation Services
Microsoft
CVE-2021-41361
11571
11572
11923
11924
11769
11803
10816
10855
Spoofing
11571
Spoofing
11572
Spoofing
11923
Spoofing
11924
Spoofing
11769
Spoofing
11803
Spoofing
10816
Spoofing
10855
Important
11571
Important
11572
Important
11923
Important
11924
Important
11769
Important
11803
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11571
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11572
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11923
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11924
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11769
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11803
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
10816
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
10855
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11571
11572
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11769
11803
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11769
11803
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10816
10855
Yes
Security Update
10.0.14393.4704
<a href="https://in.linkedin.com/in/nadishs">Nadish Shajahan</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
OpenSSL: CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT
<p><strong>Why is this OpenSSL Software Foundation CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in OpenSSL Software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a> for more information.</p>
Visual Studio
OpenSSL Software Foundation
CVE-2021-3450
11600
11720
11785
11872
11935
Information Disclosure
11600
Information Disclosure
11720
Information Disclosure
11785
Information Disclosure
11872
Information Disclosure
11935
Important
11600
Important
11720
Important
11785
Important
11872
Important
11935
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A
Release Notes
http://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
15.9.40
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
11720
Maybe
Security Update
16.4.27
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
11785
Maybe
Security Update
16.7.20
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
11872
Maybe
Security Update
16.9.12
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
11935
Maybe
Security Update
16.11.5
1.0
2021-10-12T07:00:00
<p>Information published.</p>
OpenSSL: CVE-2020-1971 EDIPARTYNAME NULL pointer de-reference
<p><strong>Why is this OpenSSL Software Foundation CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in OpenSSL Software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a> for more information.</p>
Visual Studio
OpenSSL Software Foundation
CVE-2020-1971
11600
11720
11785
11872
11935
Denial of Service
11600
Denial of Service
11720
Denial of Service
11785
Denial of Service
11872
Denial of Service
11935
Important
11600
Important
11720
Important
11785
Important
11872
Important
11935
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
http://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
15.9.40
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
11720
Maybe
Security Update
16.4.27
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
11785
Maybe
Security Update
16.7.20
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
11872
Maybe
Security Update
16.9.12
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
11935
Maybe
Security Update
16.11.5
1.0
2021-10-12T07:00:00
<p>Information published.</p>
OpenSSL: CVE-2021-3449 NULL pointer deref in signature_algorithms processing
<p><strong>Why is this OpenSSL Software Foundation CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in OpenSSL Software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a> for more information.</p>
Visual Studio
OpenSSL Software Foundation
CVE-2021-3449
11600
11720
11785
11872
11935
Denial of Service
11600
Denial of Service
11720
Denial of Service
11785
Denial of Service
11872
Denial of Service
11935
Important
11600
Important
11720
Important
11785
Important
11872
Important
11935
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
http://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
15.9.40
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
11720
Maybe
Security Update
16.4.27
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
11785
Maybe
Security Update
16.7.20
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
11872
Maybe
Security Update
16.9.12
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
11935
Maybe
Security Update
16.11.5
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37974 Use after free in Safe Browsing
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.38</td>
<td>10/01/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37974
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.38
1.0
2021-10-01T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37975 Use after free in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p>This vulnerability is known to be exploited in the wild.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.38</td>
<td>10/01/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37975
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.38
1.0
2021-10-01T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37976 Information leak in core
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p>This vulnerability is known to be exploited in the wild.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.38</td>
<td>10/01/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37976
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.38
1.0
2021-10-01T07:00:00
<p>Information published.</p>
Microsoft Exchange Server Remote Code Execution Vulnerability
<p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p>
<p>This vulnerability's attack is limited at the protocol level to a logically adjacent topology. This means it cannot simply be done across the internet, but instead needs something specific tied to the target. Good examples would include the same shared physical network (such as Bluetooth or IEEE 802.11), logical network (local IP subnet), or from within a secure or otherwise limited administrative domain (MPLS, secure VPN to an administrative network zone). This is common to many attacks that require machine-in-the-middle (MITM) type setups or that rely on initially gaining a foothold in another environment.</p>
<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>
<p>To exploit this vulnerability, the attacker is making specific requests over an adjacent network. This normally means as part of the same shared physical network (such as Bluetooth or IEEE 802.11), logical network (local IP subnet), or from within a secure or otherwise limited administrative domain (MPLS, secure VPN to an administrative network zone). From this point the attack allows changes to be made within the target Exchange server. The scope change is due to the attack on the network level triggering an effect on the OS level of the target system.</p>
Microsoft Exchange Server
Microsoft
CVE-2021-26427
11956
11957
11682
11906
11908
Remote Code Execution
11956
Remote Code Execution
11957
Remote Code Execution
11682
Remote Code Execution
11906
Remote Code Execution
11908
Important
11956
Important
11957
Important
11682
Important
11906
Important
11908
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
9.0
7.8
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11956
9.0
7.8
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11957
9.0
7.8
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11682
9.0
7.8
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11906
9.0
7.8
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11908
5007012
http://www.microsoft.com/download/details.aspx?familyid=2a8da394-c405-4cc7-aa58-e96aa19acd4f
11956
Yes
Security Update
15.01.2375.012
5007012
https://support.microsoft.com/help/5007012
11956
11957
11906
11908
5007012
http://www.microsoft.com/download/details.aspx?familyid=493ebadc-791f-43fc-b6da-349e9b227ef9
11957
Yes
Security Update
15.02.0986.009
5007011
http://www.microsoft.com/download/details.aspx?familyid=f4fbd725-70c7-485b-acac-aaf90ad372f8
5004778
11682
Yes
Security Update
15.00.1497.024
5007011
https://support.microsoft.com/help/5007011
11682
5007012
http://www.microsoft.com/download/details.aspx?familyid=ffea3a31-7286-4932-867a-a38952c1efee
5004779
11906
Yes
Security Update
15.01.2308.015
5007012
http://www.microsoft.com/download/details.aspx?familyid=5409b101-36fc-4e5c-82bc-d0f6068b2405
5004780
11908
Yes
Security Update
15.02.0922.014
National Security Agency (NSA)
<a href="https://twitter.com/arudd1ck">Andrew Ruddick</a>, Microsoft Security Response Center
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37977 Use after free in Garbage Collection
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.47</td>
<td>10/11/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37977
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.47
1.0
2021-10-11T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37978 Heap buffer overflow in Blink
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.47</td>
<td>10/11/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37978
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.47
1.0
2021-10-11T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37979 Heap buffer overflow in WebRTC
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.47</td>
<td>10/11/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37979
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.47
1.0
2021-10-11T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37980 Inappropriate implementation in Sandbox
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>94.0.992.47</td>
<td>10/11/2021</td>
<td>94.0.4606.71</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37980
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
94.0.992.47
1.0
2021-10-11T07:00:00
<p>Information published.</p>
Microsoft Surface Pro 3 Security Feature Bypass Vulnerability
<p><strong>Which Surface devices are affected by this vulnerability?</strong></p>
<p>The Surface Pro 3.</p>
<p><strong>Are any other devices vulnerable?</strong></p>
<p>Microsoft has confirmed that the Surface Pro 3 is vulnerable. However, it is possible that other devices, including non-Microsoft devices, using a similar BIOS may also be vulnerable.</p>
<p>The Surface Pro 4, Surface Book, and more recent Surface devices are not vulnerable.</p>
<p><strong>What can an attacker do with this vulnerability?</strong></p>
<p>Devices use Platform Configuration Registers (PCRs) to record information about device and software configuration to ensure that the boot process is secure. Windows uses these PCR measurements to determine device health.</p>
<p>A vulnerable device can masquerade as a healthy device by extending arbitrary values into Platform Configuration Register (PCR) banks.</p>
<p><strong>How do I protect myself?</strong></p>
<p>This technique requires physical access to a target victim’s device, or an attacker would already have had to compromise a legitimate user's credentials. We encourage customers to practice good security habits, including positive control over their device and preventing unauthorized physical access to their machine.</p>
<p>Access to corporate resources is gated by user credentials, please see the following resources for more information:</p>
<ul>
<li><a href="https://www.microsoft.com/en-us/online-safety/resources">https://www.microsoft.com/en-us/online-safety/resources</a></li>
<li><a href="https://support.microsoft.com/en-us/windows/keep-your-computer-secure-at-work-809c3560-b59b-a8ad-71e5-082f26691910">https://support.microsoft.com/en-us/windows/keep-your-computer-secure-at-work-809c3560-b59b-a8ad-71e5-082f26691910</a></li>
</ul>
<p>Microsoft has attempted to notify all affected vendors.</p>
Microsoft Devices
Microsoft
CVE-2021-42299
10819
Security Feature Bypass
10819
Important
10819
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.6
5.3
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N/E:P/RL:U/RC:C
10819
Chris Fenner of Google
1.0
2021-10-18T07:00:00
<p>Information published.</p>
1.1
2021-10-19T07:00:00
<p>Corrected the CVE release date to October 18, 2021.</p>
Windows Fast FAT File System Driver Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Fast FAT Driver
Microsoft
CVE-2021-38662
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11896
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11568
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11569
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11570
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11571
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11572
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11712
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11713
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11714
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11896
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11897
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11898
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11766
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11767
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11768
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11769
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11801
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11802
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11803
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10729
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10735
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10852
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10853
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10816
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10855
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10047
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10048
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10481
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10482
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10484
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9312
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10287
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9318
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9344
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10051
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10049
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10378
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10379
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10483
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
OldStone of Kunlun Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows exFAT File System Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Windows exFAT File System
Microsoft
CVE-2021-38663
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11896
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11568
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11569
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11570
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11571
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11572
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11712
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11713
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11714
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11896
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11897
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11898
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11766
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11767
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11768
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11769
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11801
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11802
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11803
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10729
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10735
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10852
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10853
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10816
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10855
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10047
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10048
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10481
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10482
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10484
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9312
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10287
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9318
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9344
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10051
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10049
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10378
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10379
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10483
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
OldStone of Kunlun Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Hyper-V Remote Code Execution Vulnerability
<p><strong>How could an attacker exploit this vulnerability?</strong></p>
<p>For successful exploitation, this vulnerability could allow a malicious guest VM to read kernel memory in the host. To trigger this vulnerability the guest VM requires a memory allocation error to first occur on the guest VM. This bug could be used for a VM escape from guest to host.</p>
Role: Windows Hyper-V
Microsoft
CVE-2021-38672
11923
11924
11926
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11926
Critical
11923
Critical
11924
Critical
11926
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
Yes
Security Update
10.0.22000.258
Wei in Kunlun Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
Windows Win32K
Microsoft
CVE-2021-40450
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
H4iiluv of 73lab with <a href="https://qingteng.cn/">Qingteng</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>
<p>This vulnerability could allow an attacker to bypass Extended Protection for Authentication provided by SPN target name validation.</p>
Windows Remote Procedure Call Runtime
Microsoft
CVE-2021-40460
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
10051
10049
10378
10379
10483
10543
Security Feature Bypass
11568
Security Feature Bypass
11569
Security Feature Bypass
11570
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
11712
Security Feature Bypass
11713
Security Feature Bypass
11714
Security Feature Bypass
11896
Security Feature Bypass
11897
Security Feature Bypass
11898
Security Feature Bypass
11923
Security Feature Bypass
11924
Security Feature Bypass
11766
Security Feature Bypass
11767
Security Feature Bypass
11768
Security Feature Bypass
11769
Security Feature Bypass
11801
Security Feature Bypass
11802
Security Feature Bypass
11803
Security Feature Bypass
11926
Security Feature Bypass
11927
Security Feature Bypass
10729
Security Feature Bypass
10735
Security Feature Bypass
10852
Security Feature Bypass
10853
Security Feature Bypass
10816
Security Feature Bypass
10855
Security Feature Bypass
10047
Security Feature Bypass
10048
Security Feature Bypass
10481
Security Feature Bypass
10482
Security Feature Bypass
10484
Security Feature Bypass
10051
Security Feature Bypass
10049
Security Feature Bypass
10378
Security Feature Bypass
10379
Security Feature Bypass
10483
Security Feature Bypass
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11568
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11569
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11570
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11571
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11572
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11712
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11713
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11714
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11896
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11897
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11898
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11923
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11924
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11766
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11767
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11768
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11769
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11801
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11802
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11803
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11926
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11927
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10729
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10735
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10852
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10853
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10816
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10855
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10047
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10048
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10481
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10482
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10484
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10051
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10049
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10378
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10379
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10483
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Hyper-V Remote Code Execution Vulnerability
Role: Windows Hyper-V
Microsoft
CVE-2021-40461
11569
11571
11572
11713
11896
11923
11924
11768
11769
11803
11926
Remote Code Execution
11569
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11713
Remote Code Execution
11896
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11768
Remote Code Execution
11769
Remote Code Execution
11803
Remote Code Execution
11926
Critical
11569
Critical
11571
Critical
11572
Critical
11713
Critical
11896
Critical
11923
Critical
11924
Critical
11768
Critical
11769
Critical
11803
Critical
11926
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
8.0
7.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11569
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11569
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11713
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11768
11769
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
Yes
Security Update
10.0.22000.258
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
Microsoft Windows Codecs Library
Microsoft
CVE-2021-40462
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11896
Remote Code Execution
11897
Remote Code Execution
11898
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11766
Remote Code Execution
11767
Remote Code Execution
11768
Remote Code Execution
11769
Remote Code Execution
11801
Remote Code Execution
11802
Remote Code Execution
11803
Remote Code Execution
11926
Remote Code Execution
11927
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
HAO LI of VenusTech ADLab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT)
Microsoft
CVE-2021-40463
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Denial of Service
11568
Denial of Service
11569
Denial of Service
11570
Denial of Service
11571
Denial of Service
11572
Denial of Service
11712
Denial of Service
11713
Denial of Service
11714
Denial of Service
11896
Denial of Service
11897
Denial of Service
11898
Denial of Service
11923
Denial of Service
11924
Denial of Service
11766
Denial of Service
11767
Denial of Service
11768
Denial of Service
11769
Denial of Service
11801
Denial of Service
11802
Denial of Service
11803
Denial of Service
11926
Denial of Service
11927
Denial of Service
10729
Denial of Service
10735
Denial of Service
10852
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
10481
Denial of Service
10482
Denial of Service
10484
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11568
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11569
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11570
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11571
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11572
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11712
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11713
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11714
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11896
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11897
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11898
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11923
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11924
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11766
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11767
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11768
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11769
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11801
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11802
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11803
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11926
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
11927
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10729
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10735
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10852
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10853
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10816
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10855
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10481
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10482
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10484
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10378
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10379
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10483
7.7
6.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
Huichen Lin and Dong Seong Kim with <a href="https://www.itee.uq.edu.au/">School of Information Technology and Electrical Engineering - The University of Queensland</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Nearby Sharing Elevation of Privilege Vulnerability
Windows Nearby Sharing
Microsoft
CVE-2021-40464
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
8.0
7.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
Caleb Helbling
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Text Shaping Remote Code Execution Vulnerability
Windows Text Shaping
Microsoft
CVE-2021-40465
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11896
Remote Code Execution
11897
Remote Code Execution
11898
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11766
Remote Code Execution
11767
Remote Code Execution
11768
Remote Code Execution
11769
Remote Code Execution
11801
Remote Code Execution
11802
Remote Code Execution
11803
Remote Code Execution
11926
Remote Code Execution
11927
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/hardik05">Hardik Shah</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver
Microsoft
CVE-2021-40466
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/guhe120">Yuki Chen</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver
Microsoft
CVE-2021-40467
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/guhe120">Yuki Chen</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Bind Filter Driver Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Bind Filter Driver
Microsoft
CVE-2021-40468
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Information Disclosure
11896
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11896
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11897
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11898
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11766
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11767
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11768
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11769
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11801
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11802
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11803
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
k0shl of Kunlun Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows DNS Server Remote Code Execution Vulnerability
<p><strong>If my server is not configured to be a DNS server, it is vulnerable?</strong></p>
<p>No, this vulnerability is only exploitable if the server is configured to be a DNS server.</p>
Role: DNS Server
Microsoft
CVE-2021-40469
11571
11572
11923
11924
11769
11803
10816
10855
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11769
Remote Code Execution
11803
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
11571
Important
11572
Important
11923
Important
11924
Important
11769
Important
11803
Important
10816
Important
10855
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11923
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11924
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11769
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11803
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.2
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11571
11572
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11769
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11769
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10816
10855
Yes
Security Update
10.0.14393.4704
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10051
10049
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10483
10543
<a href="https://twitter.com/0F1F0F1F">Shay Ber<a/>
<a href="https://twitter.com/guhe120">Yuki Chen</a>
1.1
2022-02-02T08:00:00
<p>Added acknowledgements. This is an informational change only.</p>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Windows DirectX
Microsoft
CVE-2021-40470
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
ziming zhang of Ant Security Light-Year Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Excel
Microsoft
CVE-2021-40471
11573
11574
11762
11763
11952
11953
10753
10754
10603
10601
10602
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11952
Remote Code Execution
11953
Remote Code Execution
10753
Remote Code Execution
10754
Remote Code Execution
10603
Remote Code Execution
10601
Remote Code Execution
10602
Important
11573
Important
11574
Important
11762
Important
11763
Important
11952
Important
11953
Important
10753
Important
10754
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11762
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11763
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11952
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11953
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10753
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10754
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10603
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10601
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10602
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=7e6d4100-1186-4022-8172-6123ca89482e
5001951
10753
Maybe
Security Update
16.0.5227.1000
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=c48f8ad1-499a-4c59-9d54-355328862119
5001951
10754
Maybe
Security Update
16.0.5227.1000
5001985
5001955
10603
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=91c95a45-5427-40f5-8a6b-dfa51168f3c6
5001955
10601
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=c571d4cc-6b2e-4168-bd08-ed2ae7373cbb
5001955
10602
Maybe
Security Update
15.0.5389.1000
dio0305
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Excel Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Excel
Microsoft
CVE-2021-40472
11573
11574
11605
11762
11763
11952
11953
10739
10740
10753
10754
10656
10654
10655
10603
10601
10602
10611
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11605
Information Disclosure
11762
Information Disclosure
11763
Information Disclosure
11952
Information Disclosure
11953
Information Disclosure
10739
Information Disclosure
10740
Information Disclosure
10753
Information Disclosure
10754
Information Disclosure
10656
Information Disclosure
10654
Information Disclosure
10655
Information Disclosure
10603
Information Disclosure
10601
Information Disclosure
10602
Information Disclosure
10611
Important
11573
Important
11574
Important
11605
Important
11762
Important
11763
Important
11952
Important
11953
Important
10739
Important
10740
Important
10753
Important
10754
Important
10656
Important
10654
Important
10655
Important
10603
Important
10601
Important
10602
Important
10611
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11573
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11574
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11605
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11762
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11763
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11952
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11953
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10739
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10740
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10753
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10754
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10656
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10654
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10655
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10603
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10601
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10602
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10611
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
5002027
https://www.microsoft.com/downloads/details.aspx?familyid=170d4991-51ce-42cf-94bf-525555b3a90a
5001999
11605
Maybe
Security Update
16.0.10379.20000
5002030
https://www.microsoft.com/downloads/details.aspx?familyid=5cbdb0ac-5257-4d9d-8e70-8aaeaaccf57d
5002003
10739
Maybe
Security Update
16.0.5227.1000
5002030
https://www.microsoft.com/downloads/details.aspx?familyid=cc145d7c-641c-4321-b8e4-bbec79fb6a06
5002003
10740
Maybe
Security Update
16.0.5227.1000
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=7e6d4100-1186-4022-8172-6123ca89482e
5001951
10753
Maybe
Security Update
16.0.5227.1000
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=c48f8ad1-499a-4c59-9d54-355328862119
5001951
10754
Maybe
Security Update
16.0.5227.1000
5002043
5002014
10656
Maybe
Security Update
15.0.5389.1000
5002043
https://www.microsoft.com/downloads/details.aspx?familyid=bfe78ef6-1c5c-43ac-8f37-d89176dc2956
5002014
10654
Maybe
Security Update
15.0.5389.1000
5002043
https://www.microsoft.com/downloads/details.aspx?familyid=e376f413-3f46-4a6e-8a7b-35943a16be24
5002014
10655
Maybe
Security Update
15.0.5389.1000
5001985
5001955
10603
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=91c95a45-5427-40f5-8a6b-dfa51168f3c6
5001955
10601
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=c571d4cc-6b2e-4168-bd08-ed2ae7373cbb
5001955
10602
Maybe
Security Update
15.0.5389.1000
5002036
https://www.microsoft.com/downloads/details.aspx?familyid=efc88e0d-4724-4ff3-90ec-9bb7c337af7a
5002009
10611
Maybe
Security Update
15.0.5389.1000
dio0305
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Excel
Microsoft
CVE-2021-40473
11573
11574
11762
11763
11952
11953
10753
10754
10603
10601
10602
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11952
Remote Code Execution
11953
Remote Code Execution
10753
Remote Code Execution
10754
Remote Code Execution
10603
Remote Code Execution
10601
Remote Code Execution
10602
Important
11573
Important
11574
Important
11762
Important
11763
Important
11952
Important
11953
Important
10753
Important
10754
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11762
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11763
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11952
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11953
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10753
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10754
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10603
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10601
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10602
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=7e6d4100-1186-4022-8172-6123ca89482e
5001951
10753
Maybe
Security Update
16.0.5227.1000
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=c48f8ad1-499a-4c59-9d54-355328862119
5001951
10754
Maybe
Security Update
16.0.5227.1000
5001985
5001955
10603
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=91c95a45-5427-40f5-8a6b-dfa51168f3c6
5001955
10601
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=c571d4cc-6b2e-4168-bd08-ed2ae7373cbb
5001955
10602
Maybe
Security Update
15.0.5389.1000
dio0305
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Excel
Microsoft
CVE-2021-40474
11573
11574
11575
11605
11762
11763
11951
11952
11953
10739
10740
10656
10654
10655
10611
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11575
Remote Code Execution
11605
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11951
Remote Code Execution
11952
Remote Code Execution
11953
Remote Code Execution
10739
Remote Code Execution
10740
Remote Code Execution
10656
Remote Code Execution
10654
Remote Code Execution
10655
Remote Code Execution
10611
Important
11573
Important
11574
Important
11575
Important
11605
Important
11762
Important
11763
Important
11951
Important
11952
Important
11953
Important
10739
Important
10740
Important
10656
Important
10654
Important
10655
Important
10611
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11575
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11605
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11762
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11763
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11951
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11952
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11953
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10739
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10740
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10656
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10654
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10655
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10611
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
11575
11951
Maybe
Security Update
16.54.21101001
5002027
https://www.microsoft.com/downloads/details.aspx?familyid=170d4991-51ce-42cf-94bf-525555b3a90a
5001999
11605
Maybe
Security Update
16.0.10379.20000
5002030
https://www.microsoft.com/downloads/details.aspx?familyid=5cbdb0ac-5257-4d9d-8e70-8aaeaaccf57d
5002003
10739
Maybe
Security Update
16.0.5227.1000
5002030
https://www.microsoft.com/downloads/details.aspx?familyid=cc145d7c-641c-4321-b8e4-bbec79fb6a06
5002003
10740
Maybe
Security Update
16.0.5227.1000
5002043
5002014
10656
Maybe
Security Update
15.0.5389.1000
5002043
https://www.microsoft.com/downloads/details.aspx?familyid=bfe78ef6-1c5c-43ac-8f37-d89176dc2956
5002014
10654
Maybe
Security Update
15.0.5389.1000
5002043
https://www.microsoft.com/downloads/details.aspx?familyid=e376f413-3f46-4a6e-8a7b-35943a16be24
5002014
10655
Maybe
Security Update
15.0.5389.1000
5002036
https://www.microsoft.com/downloads/details.aspx?familyid=efc88e0d-4724-4ff3-90ec-9bb7c337af7a
5002009
10611
Maybe
Security Update
15.0.5389.1000
Discovered by Marcin 'Icewall' Noga of Cisco Talos with <a href="https://talosintelligence.com/vulnerability_reports/">Cisco Talos</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Excel
Microsoft
CVE-2021-40479
11573
11574
11762
11763
11952
11953
10753
10754
10603
10601
10602
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11952
Remote Code Execution
11953
Remote Code Execution
10753
Remote Code Execution
10754
Remote Code Execution
10603
Remote Code Execution
10601
Remote Code Execution
10602
Important
11573
Important
11574
Important
11762
Important
11763
Important
11952
Important
11953
Important
10753
Important
10754
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11762
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11763
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11952
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11953
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10753
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10754
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10603
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10601
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10602
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=7e6d4100-1186-4022-8172-6123ca89482e
5001951
10753
Maybe
Security Update
16.0.5227.1000
5001982
https://www.microsoft.com/downloads/details.aspx?familyid=c48f8ad1-499a-4c59-9d54-355328862119
5001951
10754
Maybe
Security Update
16.0.5227.1000
5001985
5001955
10603
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=91c95a45-5427-40f5-8a6b-dfa51168f3c6
5001955
10601
Maybe
Security Update
15.0.5389.1000
5001985
https://www.microsoft.com/downloads/details.aspx?familyid=c571d4cc-6b2e-4168-bd08-ed2ae7373cbb
5001955
10602
Maybe
Security Update
15.0.5389.1000
dio0305
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Office Visio Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>
<p>A user needs to be tricked into running malicious files.</p>
Microsoft Office Visio
Microsoft
CVE-2021-40480
11573
11574
11762
11763
11953
11952
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11953
Remote Code Execution
11952
Important
11573
Important
11574
Important
11762
Important
11763
Important
11953
Important
11952
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11762
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11763
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11953
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11952
Click to Run
11573
11574
11762
11763
11953
11952
No
Security Update
https://aka.ms/OfficeSecurityReleases
Tran Van Khang - khangkito (VinCSS) working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Office Visio Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Visio
Microsoft
CVE-2021-40481
11573
11574
11762
11763
11953
11952
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11953
Remote Code Execution
11952
Important
11573
Important
11574
Important
11762
Important
11763
Important
11953
Important
11952
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.1
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11573
7.1
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11574
7.1
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11762
7.1
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11763
7.1
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11953
7.1
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11952
Click to Run
11573
11574
11762
11763
11953
11952
No
Security Update
https://aka.ms/OfficeSecurityReleases
Tran Van Khang - khangkito (VinCSS) working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft SharePoint Server Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>An attacker could possibly gain access to an organizational's email, sites, filenames, or the URLs of files.</p>
Microsoft Office SharePoint
Microsoft
CVE-2021-40482
11585
Information Disclosure
11585
Important
11585
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.3
4.8
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11585
5002028
https://www.microsoft.com/downloads/details.aspx?familyid=48b05306-b1ff-468c-8b77-1d477549f14c
5002018
11585
Maybe
Security Update
16.0.10379.20000
<a href="https://twitter.com/secretlyhidden1">Cameron Vincent</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft Office SharePoint
Microsoft
CVE-2021-40483
11585
Spoofing
11585
Low
11585
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.6
6.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
11585
5002028
https://www.microsoft.com/downloads/details.aspx?familyid=48b05306-b1ff-468c-8b77-1d477549f14c
5002018
11585
Maybe
Security Update
16.0.10379.20000
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft Office SharePoint
Microsoft
CVE-2021-40484
10950
11585
10612
Spoofing
10950
Spoofing
11585
Spoofing
10612
Important
10950
Important
11585
Important
10612
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.6
6.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
10950
7.6
6.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
11585
7.6
6.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
10612
5002029
https://www.microsoft.com/downloads/details.aspx?familyid=dc08d7a5-c213-4842-8824-e43876d474a1
5002020
10950
Maybe
Security Update
16.0.5227.1000
5002028
https://www.microsoft.com/downloads/details.aspx?familyid=48b05306-b1ff-468c-8b77-1d477549f14c
5002018
11585
Maybe
Security Update
16.0.10379.20000
5002042
https://www.microsoft.com/downloads/details.aspx?familyid=6b6c0519-83e6-451c-a793-084d12a7eb54
5002024
10612
Maybe
Security Update
15.0.5389.1000
<a href="https://twitter.com/rskvp93">rskvp93</a> with <a href="https://viettelcybersecurity.com">Viettel Cyber Security</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>
<p>A user needs to be tricked into running malicious files.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office Excel
Microsoft
CVE-2021-40485
11099
11573
11574
11575
11605
11762
11763
11951
11952
11953
10739
10740
10656
10654
10655
Remote Code Execution
11099
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11575
Remote Code Execution
11605
Remote Code Execution
11762
Remote Code Execution
11763
Remote Code Execution
11951
Remote Code Execution
11952
Remote Code Execution
11953
Remote Code Execution
10739
Remote Code Execution
10740
Remote Code Execution
10656
Remote Code Execution
10654
Remote Code Execution
10655
Important
11099
Important
11573
Important
11574
Important
11575
Important
11605
Important
11762
Important
11763
Important
11951
Important
11952
Important
11953
Important
10739
Important
10740
Important
10656
Important
10654
Important
10655
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11099
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11575
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11605
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11762
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11763
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11951
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11952
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11953
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10739
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10740
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10656
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10654
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10655
4493202
https://www.microsoft.com/downloads/details.aspx?familyid=5758a037-43d8-4d7c-8d71-9481685a3cb7
4486724
11099
Maybe
Security Update
15.0.5389.1000
Click to Run
11573
11574
11762
11763
11952
11953
No
Security Update
https://aka.ms/OfficeSecurityReleases
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
11575
11951
Maybe
Security Update
16.54.21101001
5002027
https://www.microsoft.com/downloads/details.aspx?familyid=170d4991-51ce-42cf-94bf-525555b3a90a
5001999
11605
Maybe
Security Update
16.0.10379.20000
5002030
https://www.microsoft.com/downloads/details.aspx?familyid=5cbdb0ac-5257-4d9d-8e70-8aaeaaccf57d
5002003
10739
Maybe
Security Update
16.0.5227.1000
5002030
https://www.microsoft.com/downloads/details.aspx?familyid=cc145d7c-641c-4321-b8e4-bbec79fb6a06
5002003
10740
Maybe
Security Update
16.0.5227.1000
5002043
5002014
10656
Maybe
Security Update
15.0.5389.1000
5002043
https://www.microsoft.com/downloads/details.aspx?familyid=bfe78ef6-1c5c-43ac-8f37-d89176dc2956
5002014
10654
Maybe
Security Update
15.0.5389.1000
5002043
https://www.microsoft.com/downloads/details.aspx?familyid=e376f413-3f46-4a6e-8a7b-35943a16be24
5002014
10655
Maybe
Security Update
15.0.5389.1000
Zesen Ye (@wh1tc) and Zhiniang Peng (@edwardzpeng) with Sangfor
1.0
2021-10-12T07:00:00
<p>Information published.</p>
1.1
2021-10-13T07:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
Microsoft Word Remote Code Execution Vulnerability
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>Yes, the Preview Pane is an attack vector.</p>
Microsoft Office Word
Microsoft
CVE-2021-40486
10950
11099
11585
11573
11574
11605
10746
10747
10611
10606
10604
10605
Remote Code Execution
10950
Remote Code Execution
11099
Remote Code Execution
11585
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11605
Remote Code Execution
10746
Remote Code Execution
10747
Remote Code Execution
10611
Remote Code Execution
10606
Remote Code Execution
10604
Remote Code Execution
10605
Critical
10950
Critical
11099
Critical
11585
Critical
11573
Critical
11574
Critical
11605
Critical
10746
Critical
10747
Critical
10611
Critical
10606
Critical
10604
Critical
10605
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10950
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11099
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11585
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11573
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11574
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11605
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10746
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10747
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10611
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10606
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10604
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10605
5002029
https://www.microsoft.com/downloads/details.aspx?familyid=dc08d7a5-c213-4842-8824-e43876d474a1
5002020
10950
Maybe
Security Update
16.0.5227.1000
5002006
https://www.microsoft.com/downloads/details.aspx?familyid=483ed881-ac87-43a6-8861-e1a7704c46ab
5001981
10950
Maybe
Security Update
16.0.5227.1000
5001924
https://www.microsoft.com/downloads/details.aspx?familyid=d7cfd04b-a35d-4a35-9df8-3e0ad3f49a99
4493201
11099
Maybe
Security Update
15.0.5389.1000
5002028
https://www.microsoft.com/downloads/details.aspx?familyid=48b05306-b1ff-468c-8b77-1d477549f14c
5002018
11585
Maybe
Security Update
16.0.10379.20000
Click to Run
11573
11574
No
Security Update
https://aka.ms/OfficeSecurityReleases
5002027
https://www.microsoft.com/downloads/details.aspx?familyid=170d4991-51ce-42cf-94bf-525555b3a90a
5001999
11605
Maybe
Security Update
16.0.10379.20000
5002004
https://www.microsoft.com/downloads/details.aspx?familyid=abaac0e8-48b4-4ac9-983a-54f09817b6b1
5001949
10746
Maybe
Security Update
16.0.5227.1000
5002004
https://www.microsoft.com/downloads/details.aspx?familyid=06111bea-c741-4685-a1e0-63a0d31fc879
5001949
10747
Maybe
Security Update
16.0.5227.1000
5002036
https://www.microsoft.com/downloads/details.aspx?familyid=efc88e0d-4724-4ff3-90ec-9bb7c337af7a
5002009
10611
Maybe
Security Update
15.0.5389.1000
5001960
5001931
10606
Maybe
Security Update
15.0.5389.1000
5001960
https://www.microsoft.com/downloads/details.aspx?familyid=701e0285-2354-4f6e-b947-def0fd841fe2
5001931
10604
Maybe
Security Update
15.0.5389.1000
5001960
https://www.microsoft.com/downloads/details.aspx?familyid=7e102bbf-585b-42f4-9fcf-53c8f21bdd7a
5001931
10605
Maybe
Security Update
15.0.5389.1000
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft SharePoint Server Remote Code Execution Vulnerability
<p><strong>How could an attacker exploit this vulnerability?</strong></p>
<p>In a network-based attack, an authenticated attacker can gain access to create a site and could execute code remotely within the SharePoint Server.</p>
Microsoft Office SharePoint
Microsoft
CVE-2021-40487
10950
11585
10612
Remote Code Execution
10950
Remote Code Execution
11585
Remote Code Execution
10612
Important
10950
Important
11585
Important
10612
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
8.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
10950
8.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
11585
8.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
10612
5002029
https://www.microsoft.com/downloads/details.aspx?familyid=dc08d7a5-c213-4842-8824-e43876d474a1
5002020
10950
Maybe
Security Update
16.0.5227.1000
5002028
https://www.microsoft.com/downloads/details.aspx?familyid=48b05306-b1ff-468c-8b77-1d477549f14c
5002018
11585
Maybe
Security Update
16.0.10379.20000
5002042
https://www.microsoft.com/downloads/details.aspx?familyid=6b6c0519-83e6-451c-a793-084d12a7eb54
5002024
10612
Maybe
Security Update
15.0.5389.1000
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.1
2021-10-19T07:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller
Microsoft
CVE-2021-40488
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
nghiadt12 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Storage Spaces Controller Elevation of Privilege Vulnerability
<p><strong>How could an attacker exploit this vulnerability?</strong></p>
<p>An authorized (medium integrity level) attacker could exploit this Windows Storport driver elevation of privilege vulnerability by locally sending through a user mode application a specially crafted request to the driver specifying an IOCTL parameter, which could lead to an out-of-bounds buffer write.</p>
Windows Storage Spaces Controller
Microsoft
CVE-2021-40489
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
nghiadt12 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Storage Spaces Controller Elevation of Privilege Vulnerability
<p><strong>How could an attacker exploit this vulnerability?</strong></p>
<p>An authorized (medium integrity level) attacker could exploit this Windows Storport driver elevation of privilege vulnerability by locally sending through a user mode application a specially crafted request to the driver specifying an IOCTL parameter, which could lead to an out-of-bounds buffer write.</p>
Windows Storage Spaces Controller
Microsoft
CVE-2021-26441
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
nghiadt12 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows HTTP.sys Elevation of Privilege Vulnerability
Windows HTTP.sys
Microsoft
CVE-2021-26442
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/hexnomad">Erik Egsgard</a> with <a href="https://fieldeffect.com/">Field Effect Software</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Codecs Library
Microsoft
CVE-2021-41330
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11896
Remote Code Execution
11897
Remote Code Execution
11898
Remote Code Execution
11766
Remote Code Execution
11767
Remote Code Execution
11768
Remote Code Execution
11769
Remote Code Execution
11801
Remote Code Execution
11802
Remote Code Execution
11803
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
Zhihua Yao with KunLun Lab
<a href="https://www.linkedin.com/in/mkyselica/">Milan Kyselica</a> with <a href="https://www.istrosec.com/">IstroSec</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Media Audio Decoder Remote Code Execution Vulnerability
Microsoft Windows Codecs Library
Microsoft
CVE-2021-41331
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11896
Remote Code Execution
11897
Remote Code Execution
11898
Remote Code Execution
11766
Remote Code Execution
11767
Remote Code Execution
11768
Remote Code Execution
11769
Remote Code Execution
11801
Remote Code Execution
11802
Remote Code Execution
11803
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
HAO LI of VenusTech ADLab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Print Spooler Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Windows Print Spooler Components
Microsoft
CVE-2021-41332
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11896
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11568
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11569
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11570
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11571
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11572
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11712
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11713
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11714
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11896
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11897
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11898
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11766
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11767
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11768
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11769
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11801
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11802
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11803
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10729
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10735
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10852
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10853
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10816
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10855
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10047
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10048
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10481
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10482
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10484
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9312
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10287
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9318
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9344
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10051
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10049
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10378
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10379
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10483
6.5
5.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
Liubenjin with Codesafe Team of Legendsec at Qi'anxin Group
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Desktop Bridge Elevation of Privilege Vulnerability
Windows Desktop Bridge
Microsoft
CVE-2021-41334
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.0
6.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
Joe Bialek, MSRC Vulnerabilities and Mitigations Team
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel
Microsoft
CVE-2021-41335
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11896
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11897
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11898
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11766
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11767
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11768
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11769
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11801
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11802
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11803
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/waleedassar">Walied Assar</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Kernel
Microsoft
CVE-2021-41336
11923
11924
11926
11927
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11926
Information Disclosure
11927
Important
11923
Important
11924
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
Kyle Westhaus working with Microsoft Security Assurance & Vulnerability Research
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Active Directory Security Feature Bypass Vulnerability
<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>
<p>This vulnerability could allow an attacker to bypass Active Directory domain permissions for Key Admins groups.</p>
Role: Windows Active Directory Server
Microsoft
CVE-2021-41337
11571
11572
11923
11924
11769
11803
10816
10855
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
11923
Security Feature Bypass
11924
Security Feature Bypass
11769
Security Feature Bypass
11803
Security Feature Bypass
10816
Security Feature Bypass
10855
Important
11571
Important
11572
Important
11923
Important
11924
Important
11769
Important
11803
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11571
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11572
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11923
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11924
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11769
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
11803
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10816
4.9
4.3
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
10855
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11571
11572
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11769
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11769
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10816
10855
Yes
Security Update
10.0.14393.4704
<a href ="https://twitter.com/jbgalet"> Jean-Baptiste Galet working with <a href ="https://www.ssi.gouv.fr"> ANSSI </a>
1.1
2022-04-12T07:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
Windows AppContainer
Microsoft
CVE-2021-41338
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
Security Feature Bypass
11568
Security Feature Bypass
11569
Security Feature Bypass
11570
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
11712
Security Feature Bypass
11713
Security Feature Bypass
11714
Security Feature Bypass
11896
Security Feature Bypass
11897
Security Feature Bypass
11898
Security Feature Bypass
11923
Security Feature Bypass
11924
Security Feature Bypass
11766
Security Feature Bypass
11767
Security Feature Bypass
11768
Security Feature Bypass
11769
Security Feature Bypass
11801
Security Feature Bypass
11802
Security Feature Bypass
11803
Security Feature Bypass
11926
Security Feature Bypass
11927
Security Feature Bypass
10729
Security Feature Bypass
10735
Security Feature Bypass
10852
Security Feature Bypass
10853
Security Feature Bypass
10816
Security Feature Bypass
10855
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11896
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11897
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11898
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11923
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11924
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11766
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11767
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11768
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11769
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11801
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11802
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11803
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11926
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11927
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
James Forshaw of <a href="https://googleprojectzero.blogspot.com/">Google Project Zero</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library
Microsoft
CVE-2021-41339
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11896
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11897
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11898
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11923
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11924
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11766
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11767
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11768
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11769
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11801
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11802
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11803
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11926
4.7
4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11927
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
<a href="https://twitter.com/hillstone_lab">He YiSheng, Zhang WangJunJie, Li WenYue</a> with <a href="https://www.hillstonenet.com.cn/">Hillstone Security Technology Research Institute. 情報セキュリティ技術研究所</a>
<a href="https://twitter.com/hillstone_lab">He YiSheng, Zhang WangJunJie, Li WenYue</a> with <a href="https://www.hillstonenet.com.cn/">Hillstone Security Technology Research Institute. 情報セキュリティ技術研究所</a>
He YiSheng, Zhang WangJunJie, and Li WenYue of <a href="http://www.hillstonenet.com.cn/services/ips/">Hillstone Network Security Research Institute</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Graphics Component Remote Code Execution Vulnerability
<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p>
<ul>
<li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li>
<li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li>
</ul>
<p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>
Microsoft Graphics Component
Microsoft
CVE-2021-41340
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11896
Remote Code Execution
11897
Remote Code Execution
11898
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11766
Remote Code Execution
11767
Remote Code Execution
11768
Remote Code Execution
11769
Remote Code Execution
11801
Remote Code Execution
11802
Remote Code Execution
11803
Remote Code Execution
11926
Remote Code Execution
11927
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
dio0305
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows MSHTML Platform Remote Code Execution Vulnerability
<p><strong>The Security Updates table indicates that this vulnerability affects all supported versions of Microsoft Windows. Why are IE Cumulative updates listed for Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2?</strong></p>
<p>While Microsoft has announced retirement of the Internet Explorer 11 application on certain platforms and the Microsoft Edge Legacy application is deprecated, the underlying MSHTML, EdgeHTML, and scripting platforms are still supported. The MSHTML platform is used by Internet Explorer mode in Microsoft Edge as well as other applications through WebBrowser control. The EdgeHTML platform is used by WebView and some UWP applications. The scripting platforms are used by MSHTML and EdgeHTML but can also be used by other legacy applications. Updates to address vulnerabilities in the MSHTML platform and scripting engine are included in the IE Cumulative Updates; EdgeHTML and Chakra changes are not applicable to those platforms.</p>
<p>To stay fully protected, we recommend that customers who install Security Only updates install the IE Cumulative updates for this vulnerability.</p>
Windows MSHTML Platform
Microsoft
CVE-2021-41342
11923
11926
11927
11568
11569
11570
11571
11712
11713
11714
11896
11897
11898
11766
11767
11768
11801
11802
10729
10735
10852
10853
10816
10047
10048
10481
10482
10484
9312
9318
10051
10378
10483
Remote Code Execution
11923
Remote Code Execution
11926
Remote Code Execution
11927
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11896
Remote Code Execution
11897
Remote Code Execution
11898
Remote Code Execution
11766
Remote Code Execution
11767
Remote Code Execution
11768
Remote Code Execution
11801
Remote Code Execution
11802
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
9318
Remote Code Execution
10051
Remote Code Execution
10378
Remote Code Execution
10483
Important
11923
Important
11926
Important
11927
Important
11568
Important
11569
Important
11570
Important
11571
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11766
Important
11767
Important
11768
Important
11801
Important
11802
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
9318
Important
10051
Important
10378
Important
10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11923
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11926
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11927
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11568
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11569
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11570
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11571
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11712
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11713
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11714
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11896
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11897
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11898
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11766
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11767
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11768
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11801
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
11802
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10729
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10735
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10852
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10853
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10816
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10047
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10048
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10481
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10482
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10484
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
9312
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
9318
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10051
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10378
6.8
6.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10483
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
Yes
Security Update
10.0.20348.288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11801
11802
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
Yes
Security Update
10.0.19042.1288
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
5006671
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006671
5005563
10047
10048
10481
10482
9312
9318
10051
10378
10483
Yes
IE Cumulative
1.001
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
9318
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
9318
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
<a href="https://twitter.com/j00sean">j00sean</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Fast FAT File System Driver Information Disclosure Vulnerability
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Fast FAT Driver
Microsoft
CVE-2021-41343
11568
11569
11570
11571
11572
11712
11713
11714
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11897
Information Disclosure
11898
Information Disclosure
11923
Information Disclosure
11924
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Information Disclosure
11801
Information Disclosure
11802
Information Disclosure
11803
Information Disclosure
11926
Information Disclosure
11927
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11568
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11569
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11570
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11571
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11572
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11712
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11713
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11714
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11897
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11898
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11923
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11924
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11766
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11767
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11768
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11769
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11801
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11802
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11803
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11926
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11927
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10729
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10735
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10852
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10853
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10816
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10855
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10047
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10048
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10481
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10482
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10484
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9312
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10287
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9318
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
9344
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10051
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10049
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10378
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10379
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10483
5.5
4.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
OldStone of Kunlun Lab
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller
Microsoft
CVE-2021-41345
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
nghiadt12 from Viettel Cyber Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows Print Spooler Spoofing Vulnerability
Windows Print Spooler Components
Microsoft
CVE-2021-36970
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Spoofing
11568
Spoofing
11569
Spoofing
11570
Spoofing
11571
Spoofing
11572
Spoofing
11712
Spoofing
11713
Spoofing
11714
Spoofing
11896
Spoofing
11897
Spoofing
11898
Spoofing
11923
Spoofing
11924
Spoofing
11766
Spoofing
11767
Spoofing
11768
Spoofing
11769
Spoofing
11801
Spoofing
11802
Spoofing
11803
Spoofing
11926
Spoofing
11927
Spoofing
10729
Spoofing
10735
Spoofing
10852
Spoofing
10853
Spoofing
10816
Spoofing
10855
Spoofing
10047
Spoofing
10048
Spoofing
10481
Spoofing
10482
Spoofing
10484
Spoofing
9312
Spoofing
10287
Spoofing
9318
Spoofing
9344
Spoofing
10051
Spoofing
10049
Spoofing
10378
Spoofing
10379
Spoofing
10483
Spoofing
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11568
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11569
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11570
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11571
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11572
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11712
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11713
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11714
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11896
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11897
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11898
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11923
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11924
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11766
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11767
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11768
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11769
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11801
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11802
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11803
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11926
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11927
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10729
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10735
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10852
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10853
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10816
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10855
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10047
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10048
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10481
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10482
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10484
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9312
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10287
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9318
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9344
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10051
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10049
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10378
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10379
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10483
8.8
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10543
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
5006743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006743
5005633
10047
10048
10051
10049
Yes
Monthly Rollup
6.1.7601.25740
5006743
https://support.microsoft.com/help/5006743
10047
10048
10051
10049
5006728
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006728
10047
10048
10051
10049
Yes
Security Only
6.1.7601.25740
5006728
https://support.microsoft.com/help/5006728
10047
10048
10051
10049
5006714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006714
5005613
10481
10482
10484
10483
10543
Yes
Monthly Rollup
6.3.9600.20144
5006714
https://support.microsoft.com/help/5006714
10481
10482
10484
10483
10543
5006729
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006729
10481
10482
10483
10543
Yes
Security Only
6.3.9600.20144
5006729
https://support.microsoft.com/help/5006729
10481
10482
10483
10543
5006736
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006736
5005606
9312
10287
9318
9344
Yes
Monthly Rollup
6.0.6003.21251
5006736
https://support.microsoft.com/help/5006736
9312
10287
9318
9344
5006715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006715
9312
10287
9318
9344
Yes
Security Only
6.0.6003.21251
5006715
https://support.microsoft.com/help/5006715
9312
10287
9318
9344
5006739
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006739
5005623
10378
10379
Yes
Monthly Rollup
6.2.9200.23490
5006739
https://support.microsoft.com/help/5006739
10378
10379
5006732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006732
10378
10379
Yes
Security Only
6.2.9200.23490
5006732
https://support.microsoft.com/help/5006732
10378
10379
<a href="https://twitter.com/lxf02942370">XueFeng Li</a> and <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> with <a href="https://www.sangfor.com/">Sangfor</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Console Window Host Security Feature Bypass Vulnerability
Console Window Host
Microsoft
CVE-2021-41346
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
Security Feature Bypass
11896
Security Feature Bypass
11897
Security Feature Bypass
11898
Security Feature Bypass
11766
Security Feature Bypass
11767
Security Feature Bypass
11768
Security Feature Bypass
11769
Security Feature Bypass
11801
Security Feature Bypass
11802
Security Feature Bypass
11803
Important
11896
Important
11897
Important
11898
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11896
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11897
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11898
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11766
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11767
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11768
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11769
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11801
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11802
5.3
4.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
<a href="https://twitter.com/masthoon">Thomas Imbert @masthoon</a> of <a href="https://www.synacktiv.com/">Synacktiv</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Windows AppX Deployment Service
Microsoft
CVE-2021-41347
11568
11569
11570
11571
11572
11712
11713
11714
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
10729
10735
10852
10853
10816
10855
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11712
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11713
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11714
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11896
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11897
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11898
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11766
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11767
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11768
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11769
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11801
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11802
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11803
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
7.8
6.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
5006672
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006672
5005568
11568
11569
11570
11571
11572
Yes
Security Update
10.0.17763.2237
5006672
https://support.microsoft.com/help/5006672
11568
11569
11570
11571
11572
5006667
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006667
5005566
11712
11713
11714
Yes
Security Update
10.0.18363.1854
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
Yes
Security Update
10.0.19041.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
5006675
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006675
5005569
10729
10735
Yes
Security Update
10.0.10240.19086
5006669
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006669
5005573
10852
10853
10816
10855
Yes
Security Update
10.0.14393.4704
Abdelhamid Naceri working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
SCOM Information Disclosure Vulnerability
<p><strong>In what instances do I need to install the security update for this vulnerability?</strong></p>
<p>This vulnerability only affects machines that have the SCOM web console installed. SCOM web console server machines should have this update installed to be protected from the vulnerability.</p>
<p><strong>Do I need to install the update if my machine is not set up as a web console server?</strong></p>
<p>No. Customers whose machines are not SCOM web console server machines do not need to install this update.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p>
System Center
Microsoft
CVE-2021-41352
11774
11854
11959
Information Disclosure
11774
Information Disclosure
11854
Information Disclosure
11959
Important
11774
Important
11854
Important
11959
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11774
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11854
7.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
11959
5006871
https://download.microsoft.com/download/3/e/e/3eec1274-64d5-4285-84b9-c50800eb2dd2/KB5006871.EXE
11774
Maybe
Security Update
7.2.12335.0
5006871
https://download.microsoft.com/download/3/e/e/3eec1274-64d5-4285-84b9-c50800eb2dd2/KB5006871.EXE
11854
Maybe
Security Update
10.19.10550.0
5006871
https://download.microsoft.com/download/3/e/e/3eec1274-64d5-4285-84b9-c50800eb2dd2/KB5006871.EXE
11959
Maybe
Security Update
7.1.10226.1413
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
Microsoft Dynamics
Microsoft
CVE-2021-41353
11664
11921
Spoofing
11664
Spoofing
11921
Important
11664
Important
11921
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11664
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11921
4618795
https://www.microsoft.com/en-us/download/details.aspx?id=103377
11664
Maybe
Security Update
9.0.31.7
4618810
https://www.microsoft.com/en-us/download/details.aspx?id=103437
11921
Maybe
Security Update
9.1.4
<a href="https://twitter.com/soaj1664ashar">Ashar Javed</a> of <a href="https://www.hyundai-autoever.eu/">Hyundai AutoEver Europe GmbH</a>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
1.1
2021-10-15T07:00:00
<p>Added Exploitation ratings for this CVE. This is an informational change only.</p>
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics
Microsoft
CVE-2021-41354
11664
11921
Spoofing
11664
Spoofing
11921
Important
11664
Important
11921
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11664
5.4
4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
11921
4618795
https://www.microsoft.com/en-us/download/details.aspx?id=103377
11664
Maybe
Security Update
9.0.31.7
4618810
https://www.microsoft.com/en-us/download/details.aspx?id=103437
11921
Maybe
Security Update
9.1.4
<a href="https://twitter.com/soaj1664ashar">Ashar Javed</a> of <a href="https://www.hyundai-autoever.eu/">Hyundai AutoEver Europe GmbH</a>
1.2
2021-10-19T07:00:00
<p>Updated one or more CVSS scores for the affected products. This is an informational change only.</p>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
1.1
2021-10-15T07:00:00
<p>Added Exploitation ratings for this CVE. This is an informational change only.</p>
Win32k Elevation of Privilege Vulnerability
Windows Win32K
Microsoft
CVE-2021-41357
11896
11897
11898
11923
11924
11766
11767
11768
11769
11801
11802
11803
11926
11927
Elevation of Privilege
11896
Elevation of Privilege
11897
Elevation of Privilege
11898
Elevation of Privilege
11923
Elevation of Privilege
11924
Elevation of Privilege
11766
Elevation of Privilege
11767
Elevation of Privilege
11768
Elevation of Privilege
11769
Elevation of Privilege
11801
Elevation of Privilege
11802
Elevation of Privilege
11803
Elevation of Privilege
11926
Elevation of Privilege
11927
Important
11896
Important
11897
Important
11898
Important
11923
Important
11924
Important
11766
Important
11767
Important
11768
Important
11769
Important
11801
Important
11802
Important
11803
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11896
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11897
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11898
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11923
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11924
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11766
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11767
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11768
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11769
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11801
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11802
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11803
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11926
7.8
7.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
11927
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11896
11897
11898
Yes
Security Update
10.0.19043.1288
5006670
https://support.microsoft.com/help/5006670
11896
11897
11898
11766
11767
11768
11769
11801
11802
11803
5006699
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
5005575
11923
11924
Yes
Security Update
10.0.20348.288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11766
11767
11768
11769
Yes
Security Update
10.0.19041.1288
5006670
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006670
5005565
11801
11802
11803
Yes
Security Update
10.0.19042.1288
5006674
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674
11926
11927
Yes
Security Update
10.0.22000.258
Anonymous
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Intune Management Extension Security Feature Bypass Vulnerability
<p><strong>Are there any pre-requisites for this vulnerability to be exploited in Intune Management Extension?</strong></p>
<p>This vulnerability only exists when Intune Management Extension is enabled as managed installer. Enabling IME as managed installer requires local administrator privileges.</p>
<p><strong>What should I do to protect myself from this vulnerability?</strong></p>
<p>No action is required. As soon as the client connects to the service, it automatically receives a message to update.</p>
Microsoft Intune
Microsoft
CVE-2021-41363
11899
Security Feature Bypass
11899
Important
11899
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.2
3.8
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
11899
What's New?
11899
No
Security Update
1.45.204.0
<a href="https://twitter.com/thewmiguy">Kim Oppalfens</a> with <a href="https://www.oscc.be">OSCC</a>
1.1
2021-10-14T07:00:00
<p>The following revisions have been made: 1) In the Security Updates table, Build Number and Article link have been added. 2) FAQs have been updated to provide information about what to do to be protected from this vulnerability.</p>
1.0
2021-10-12T07:00:00
<p>Information published.</p>
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
Microsoft Edge (Chromium-based)
Microsoft
CVE-2021-42307
11655
Information Disclosure
11655
Low
11655
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.3
3.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11655
Release Notes
11655
No
Security Update
95.0.1020.30
k0shl of Kunlun Lab
1.0
2021-10-21T07:00:00
<p>Information published.</p>
1.1
2023-08-01T07:00:00
<p>Updated one or more CVSS scores for the affected products. This is an informational change only.</p>
Chromium: CVE-2021-37981 Heap buffer overflow in Skia
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37981
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37982 Use after free in Incognito
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37982
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37983 Use after free in Dev Tools
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37983
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37984 Heap buffer overflow in PDFium
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37984
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37985 Use after free in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37985
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37986 Heap buffer overflow in Settings
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37986
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37987 Use after free in Network APIs
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37987
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37988 Use after free in Profiles
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37988
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37989 Inappropriate implementation in Blink
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37989
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37990 Inappropriate implementation in WebView
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37990
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37991 Race in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37991
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37992 Out of bounds read in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37992
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37993 Use after free in PDF Accessibility
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37993
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37994 Inappropriate implementation in iFrame Sandbox
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37994
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37995 Inappropriate implementation in WebApp Installer
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37995
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37996 Insufficient validation of untrusted input in Downloads
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.30</td>
<td>10/21/2021</td>
<td>95.0.4638.54</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37996
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.30
1.0
2021-10-21T07:00:00
<p>Information published.</p>
Chromium: CVE-2021-37997 Use after free in Sign-In
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37997
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:51:50
<p>Information published.</p>
Chromium: CVE-2021-37998 Use after free in Garbage Collection
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37998
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:52:00
<p>Information published.</p>
Chromium: CVE-2021-37999 Insufficient data validation in New Tab Page
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-37999
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:52:08
<p>Information published.</p>
Chromium: CVE-2021-38000 Insufficient validation of untrusted input in Intents
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information. Google is aware that exploits for this vulnerability exist in the wild.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-38000
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:52:18
<p>Information published.</p>
Chromium: CVE-2021-38001 Type Confusion in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-38001
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:52:26
<p>Information published.</p>
Chromium: CVE-2021-38002 Use after free in Web Transport
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-38002
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:52:36
<p>Information published.</p>
Chromium: CVE-2021-38003 Inappropriate implementation in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information. Google is aware that exploits for this vulnerability exist in the wild.</p>
<p><strong>What is the version information for this release?</strong></p>
<table>
<thead>
<tr>
<th>Microsoft Edge Version</th>
<th>Date Released</th>
<th>Based on Chromium Version</th>
</tr>
</thead>
<tbody>
<tr>
<td>95.0.1020.40</td>
<td>10/29/2021</td>
<td>95.0.4638.69</td>
</tr>
</tbody>
</table>
<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>
<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>
<p><strong>How can I see the version of the browser?</strong></p>
<ol>
<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>
<li>Click on <strong>Help and Feedback</strong></li>
<li>Click on <strong>About Microsoft Edge</strong></li>
</ol>
Microsoft Edge (Chromium-based)
Chrome
CVE-2021-38003
11655
11655
11655
DOS:N/A
Release Notes
11655
No
Security Update
95.0.1020.40
1.0
2021-10-29T16:52:46
<p>Information published.</p>