November 2021 - Microsoft Releases Security Patches
Publish date: November 16, 2021
Advisory Date: NOV 10, 2021
DESCRIPTION
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are some of the CVEs included in the November 2021 release:
- CVE-2021-42298 - Microsoft Defender Remote Code Execution Vulnerability
CVSS:3.1 7.8/6.8
- CVE-2021-40461 - Windows Hyper-V Remote Code Execution Vulnerability
CVSS:3.1 8.0/7.0
- CVE-2021-38666 - Remote Desktop Client Remote Code Execution Vulnerability
CVSS:3.1 8.8/7.7
- CVE-2021-26443 - Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVSS:3.1 9.0/7.8
Featured Stories
One Flaw too Many: Vulnerabilities in SCADA SystemsWhat is the current state of SCADA vulnerabilities? Staying informed is essential in the fight against exploits and cyberattacks with real-world consequences.Read more
Drilling Deep: A Look at Cyberattacks on the Oil and Gas IndustryWe break down the digital attacks against the oil and gas industry and its supply chain.Read more
Halloween Exploits Scare: BlueKeep, Chrome’s Zero-Days in the WildPatch now: Two Chrome zero-days were reported, one of them actively exploited in a campaign. Meanwhile, BlueKeep was initially reported seen in the wild to install a malicious Monero miner.Read more
PHP-FPM Vulnerability (CVE-2019-11043) can Lead to Remote Code Execution in NGINX Web ServersAdministrators of NGINX web servers running PHP-FPM are advised to patch a vulnerability (CVE-2019-11043) that can let threat actors execute remote code on vulnerable, NGINX-enabled web servers. Here’s what you need to know.Read more