Microsoft Patch Tuesday for Sept. 2021 — Snort rules and prominent vulnerabilities
Summary: Microsoft's September 2021 security update disclosed 85 vulnerabilities across its firmware and software, headlined by the first official patch for the MSHTML remote code execution flaw CVE-2021-40444, which Microsoft says is being actively exploited in the wild and for which proof-of-concept code is now available. The release includes three other critical vulnerabilities, including CVE-2021-36965, a Windows WLAN remote code execution flaw scoring 8.8 out of 10, and CVE-2021-38647, a remote code execution flaw in the Open Management Infrastructure.
Key Takeaway: CVE-2021-40444 is already being exploited in the wild and now has public proof-of-concept code, which lowers the bar for attackers to copy the attack; Microsoft also rates CVE-2021-36955 in the Windows Common Log File System as having low attack complexity and being more likely to be exploited.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-26435CVE-2021-36955CVE-2021-36956CVE-2021-36965CVE-2021-38647CVE-2021-40444
- Related
- Threat Source newsletter (Sept. 16, 2021) Cyber Risks ·Microsoft Patch Tuesday, September 2021 Edition Cyber Risks ·CVE-2021-36955: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021