Threat Source newsletter (Jan. 14, 2021)
Summary: Microsoft released its monthly security update on Tuesday, disclosing 83 vulnerabilities across its product suite to start 2021, of which 10 are rated critical, two are moderate-severity exploits, and the remainder are considered important. The most serious is CVE-2021-1647 in Microsoft Defender, affecting some Windows versions dating back to Windows 2008 and allowing an attacker to execute arbitrary code, with the fix delivered as part of Microsoft's regular anti-malware updates.
Key Takeaway: A Defender flaw that lets an attacker run arbitrary code on machines going back to Windows 2008 sits in the software you rely on to catch everything else, and Microsoft says the fix installs with no action required - so the exposure lasts until those regular updates actually land.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-1647
- Related
- CVE-2021-1647: Microsoft Defender Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Microsoft Patch Tuesday, January 2021 Edition Cyber Risks ·