Microsoft Patch Tuesday for Nov. 2021 — Snort rules and prominent vulnerabilities
Summary: Microsoft's November 2021 security update disclosed 56 vulnerabilities across its software, hardware and firmware, including six critical flaws and 50 rated important. CVE-2021-42292, an important-rated Excel flaw that bypasses security settings, is the only one Microsoft reports as exploited in the wild, while CVE-2021-26443 in Microsoft Virtual Machine Bus carries a CVSS score of 9 out of 10.
Key Takeaway: The one vulnerability confirmed under active exploitation this month is rated only important, not critical, and it works by skipping a security prompt - meaning it quietly improves the success rate of the email attachments attackers already rely on. Cisco Talos released Snort rules 58519, 58520, 58539-58541 and Snort 3 rule 300054 to detect exploitation attempts against some of these flaws.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-26443CVE-2021-38666CVE-2021-42292CVE-2021-42298
- Related
- Microsoft Patch Tuesday, November 2021 Edition Cyber Risks ·CVE-2021-42292: Microsoft Excel Security Feature Bypass Known Exploited Vulnerabilities · Nov 17, 2021Threat Source newsletter (Nov. 11, 2021) Cyber Risks ·