Microsoft Patch Tuesday for June 2021 — Snort rules and prominent vulnerabilities
Summary: Microsoft released its June 2021 security update disclosing 51 vulnerabilities across its products, four of them rated critical and the rest important, with several that Microsoft says are being actively exploited in the wild. The update covers SharePoint Server, the Windows kernel and Outlook, and includes CVE-2021-31199 and CVE-2021-31201 in the Enhanced Cryptographic Provider, which are tied to an Adobe Acrobat Reader flaw and require a user to open a crafted PDF on an affected Windows system.
Bottom line: Microsoft states that several of these vulnerabilities, including the DWM Core Library flaw CVE-2021-33739 and the kernel memory disclosure CVE-2021-31955, are already being exploited in the wild, so the patch window is not theoretical for anyone running affected Windows and Office systems.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-28550CVE-2021-31199CVE-2021-31201CVE-2021-31939CVE-2021-31955CVE-2021-31985CVE-2021-33739
- Related
- Microsoft Patches Six Zero-Day Security Holes Cyber Risks ·CVE-2021-31201: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021CVE-2021-31199: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021