Microsoft Patch Tuesday for May 2021 security updates address 55 vulnerabilities in Microsoft Windows, .NET Core and Visual Studio, Internet Explorer (IE), Microsoft Office, SharePoint Server, Open-Source Software, Hyper-V, Skype for Business and Microsoft Lync, and Exchange Server.
Four vulnerabilities are rated as Critical, 50 as Important and the remaining one as Moderate severity.
Three of these bugs are publicly known but none are actively exploited in the wild at the time of release, 13 of these bugs were reported through the ZDI program.
The critical issues addressed by Microsoft are:
CVE-2021-31166 – HTTP Protocol Stack Remote Code Execution Vulnerability
The flaw could be exploited by an unauthenticated attacker by sending a specially crafted packet to a targeted server utilizing the HTTP Protocol Stack (http.sys) to process packets
CVE-2021-28476 – Hyper-V Remote Code Execution Vulnerability
The flaw could allow a guest VM to force the Hyper-V host’s kernel to read from an arbitrary, potentially invalid address.
CVE-2021-27068 – Visual Studio Remote Code Execution Vulnerability
CVE-2020-24587 – Windows Wireless Networking Information Disclosure Vulnerability
An attacker can trigger this issue to disclose the contents of encrypted wireless packets on an affected system.
The full list of CVEs released by Microsoft for May 2021 is available here.
Follow me on Twitter: @securityaffairs and Facebook
[adrotate banner=”9″] | [adrotate banner=”12″] |
(SecurityAffairs – hacking, Microsoft Patch Tuesday)
[adrotate banner=”5″]
[adrotate banner=”13″]
FBI warns Silent Ransom Group has targeted U.S. law firms for 2 years using callback…
The U.S. indicted Russian Rustam Gallyamov for leading the Qakbot botnet, which infected 700K+ devices…
Law enforcement operation codenamed 'Operation RapTor' led to the arrest of 270 dark web vendors…
A Chinese threat actor, tracked as UAT-6382, exploited a patched Trimble Cityworks flaw to deploy…
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Samsung MagicINFO 9 Server vulnerability to its…
Signal implements new screen security on Windows 11, blocking screenshots by default to protect user…
This website uses cookies.