Forest Global Training Partners

Cyber Risks · Cisco Talos

Microsoft Patch Tuesday for August 2021 — Snort rules and prominent vulnerabilities

Summary: Microsoft's August 2021 security update disclosed 44 vulnerabilities, the fewest patched in a month in more than two years, with nine rated critical and the rest important. The most serious is CVE-2021-26424, a remote code execution flaw in the Windows TCP/IP protocol implementation that an attacker could trigger from a Hyper-V guest by sending a specially crafted TCP/IP packet to a host, raising the possibility of a malicious program in a virtual machine compromising the host environment.

What you should know: CVE-2021-26432 in Windows Services for NFS carries a 9.8 severity score and a Microsoft advisory stating exploitation is "more likely," while CVE-2021-34535 in the Remote Desktop Client already has a public proof-of-concept at 8.8 - and the publicly released PetitPotam tool targets CVE-2021-36942, which can be used against domain controllers that grant attackers access to multiple systems once compromised.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2021-26424CVE-2021-26428CVE-2021-26430CVE-2021-26432CVE-2021-34535CVE-2021-36942
Related