In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload covers in the September 2021 release:
CVE-2021-26435 - Windows Scripting Engine Memory Corruption Vulnerability CVSS:3.0 8.1/7.1
CVE-2021-36965 - Windows WLAN AutoConfig Service Remote Code Execution Vulnerability CVSS:3.0 8.8/7.7
Malicious attacks have consistently been launched on weak points in the supply chain. Like all attacks, these will evolve into more advanced forms. Software development, with multiple phases that could be placed at risk, is particularly vulnerable.