Microsoft Patch Tuesday for Feb. 2021 — Snort rules and prominent vulnerabilities
Summary: Microsoft's February 2021 security update disclosed 56 vulnerabilities across its products, the smallest monthly total since January 2020, including 11 critical flaws and three moderate-severity exploits. Critical issues included CVE-2021-24074 and CVE-2021-24094 in Windows TCP/IP settings, which could allow arbitrary code execution with a CVSS score of 8.1, and CVE-2021-24072 in SharePoint, which requires no user interaction and scores 8.8.
Bottom line: CVE-2021-1732, a Win32k privilege escalation flaw Microsoft rated only "important," has already been exploited in the wild across multiple Windows 10 versions and some Windows Server 2019 systems, so severity ratings alone do not tell you which bugs are being used against you.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-1732CVE-2021-24072CVE-2021-24074CVE-2021-24094
- Related
- Threat Brief: Windows IPv4 and IPv6 Stack Vulnerabilities (CVE-2021-24074, CVE-2021-24086 and CVE-2021-24094) Cyber Risks ·CVE-2021-1732: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Microsoft Patch Tuesday, February 2021 Edition Cyber Risks ·