Microsoft Patch Tuesday, July 2021 Edition
Summary: Microsoft released updates on July 13, 2021, patching at least 116 security holes in Windows and related software, including 13 rated critical and 103 rated important. Four vulnerabilities were under active attack, among them CVE-2021-34448, a remote code execution flaw in the Windows scripting engine, and the elevation of privilege flaws CVE-2021-33771 and CVE-2021-31979 in the Windows kernel. The batch also included the official fix for the PrintNightmare print spooler flaw (CVE-2021-34527), after an earlier rushed patch caused problems for Windows users.
Why it matters: Four of the flaws patched this month were already being exploited in the wild, and CVE-2021-34494 in Windows DNS Server affects core and full installations back to Windows Server 2008, where DNS often runs on the domain controller.