October 2021 - Microsoft Releases Security Patches
Publish date: November 12, 2021
Advisory Date: OCT 13, 2021
DESCRIPTION
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are some of the CVEs included in the October 2021 release:
- CVE-2021-38672 - Windows Hyper-V Remote Code Execution Vulnerability
CVSS:3.1 8.0/7.0
- CVE-2021-40461 - Windows Hyper-V Remote Code Execution Vulnerability
CVSS:3.1 8.0/7.0
- CVE-2021-40486 - Microsoft Word Remote Code Execution Vulnerability
CVSS:3.0 7.8/6.8
Featured Stories
One Flaw too Many: Vulnerabilities in SCADA SystemsWhat is the current state of SCADA vulnerabilities? Staying informed is essential in the fight against exploits and cyberattacks with real-world consequences.Read more
Drilling Deep: A Look at Cyberattacks on the Oil and Gas IndustryWe break down the digital attacks against the oil and gas industry and its supply chain.Read more
Halloween Exploits Scare: BlueKeep, Chrome’s Zero-Days in the WildPatch now: Two Chrome zero-days were reported, one of them actively exploited in a campaign. Meanwhile, BlueKeep was initially reported seen in the wild to install a malicious Monero miner.Read more
PHP-FPM Vulnerability (CVE-2019-11043) can Lead to Remote Code Execution in NGINX Web ServersAdministrators of NGINX web servers running PHP-FPM are advised to patch a vulnerability (CVE-2019-11043) that can let threat actors execute remote code on vulnerable, NGINX-enabled web servers. Here’s what you need to know.Read more