Microsoft Patch Tuesday for Jan. 2021 — Snort rules and prominent vulnerabilities
Summary: Microsoft's January 2021 security update disclosed 83 vulnerabilities across its products, including 10 rated critical, two moderate-severity exploits, and the remainder rated important. The release covers Microsoft Defender, Remote Procedure Call tools, and Bluetooth communication, with the most serious flaw, CVE-2021-1647 in Microsoft Defender, affecting Windows versions back to Windows 2008 and allowing arbitrary code execution.
What's compelling: CVE-2021-1647 lets an attacker execute arbitrary code on affected Windows machines, and Microsoft says the fix arrives automatically through its regular anti-malware updates rather than any action from you, so the patch status of Defender is outside your normal change process.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-1647CVE-2021-1707CVE-2021-1709
- Related
- Microsoft Patch Tuesday, January 2021 Edition Cyber Risks ·CVE-2021-1647: Microsoft Defender Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Threat Source newsletter (Jan. 14, 2021) Cyber Risks ·