Microsoft Patch Tuesday for July 2021 — Snort rules and prominent vulnerabilities

Summary: Microsoft's July 2021 Patch Tuesday disclosed 117 vulnerabilities, the most in a month that year, including 13 critical issues and three that Microsoft says are being exploited in the wild. The release patches the PrintNightmare print spooler flaw that allows remote code execution, a Scripting Engine memory corruption bug (CVE-2021-34448) triggered by opening a crafted file, and an Exchange Server flaw (CVE-2021-34473) already fixed in April but mistakenly not disclosed.
What you should know: One of the three exploited flaws, CVE-2021-34473 in Exchange Server, was part of a series of zero-days used in a wide-ranging APT attack, and PrintNightmare remained exploitable even after Microsoft's earlier out-of-band fix.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-34448 CVE-2021-34464 CVE-2021-34467 CVE-2021-34468 CVE-2021-34473 CVE-2021-34520
Related: Microsoft Patch Tuesday, July 2021 Edition Cyber Risks ·
CVE-2021-34448: Microsoft Windows Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
CVE-2021-34473: Microsoft Exchange Server Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021