Microsoft Patch Tuesday for Oct. 2021 — Snort rules and prominent vulnerabilities
Summary: Microsoft's October 2021 Patch Tuesday disclosed 78 vulnerabilities, only two of them rated critical - the fewest critical flaws in a Patch Tuesday in at least a year. The two critical bugs, CVE-2021-40461 in the Network Virtualization Service Provider and CVE-2021-38672 in Windows Hyper-V, both allow remote code execution and carry a severity rating of 9.9 out of 10.
Key Takeaway: CVE-2021-40449, a Win32k flaw requiring no user interaction that allows an attacker to gain elevated privileges, has already been exploited in the wild - and Microsoft rates the Exchange Server flaw CVE-2021-26427 as only 'less likely' to be exploited, after Hafnium's high-profile attack on Exchange Servers.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-26427CVE-2021-36970CVE-2021-38672CVE-2021-40449CVE-2021-40450CVE-2021-40461CVE-2021-40474CVE-2021-41332CVE-2021-41357
- Related
- Patch Tuesday, October 2021 Edition Cyber Risks ·Threat Source newsletter (Oct. 14, 2021) Cyber Risks ·CVE-2021-40450: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Apr 25, 2022