Microsoft August 2021 Patch Tuesday fixes 3 zero-days, 44 flaws - BleepingComputer

Today is Microsoft's August 2021 Patch Tuesday, and with it comes fixes for three zero-day vulnerabilities and a total of 44 flaws, so please be nice to your Windows admins as they scramble to installed patches.

Microsoft has fixed 44 vulnerabilities (51 including Microsoft Edge) with today's update, with seven classified as Critical and 37 as Important.

Of the 44 vulnerabilities, 13 are remote code execution, eight are information disclosure, two are denial of service, and four are spoofing vulnerabilities.

For information about the non-security Windows updates, you can read about today's Windows 10 KB5005033 & KB5005031 cumulative updates.

Microsoft fixes PrintNightmare and PetitPotam attacks

Microsoft has released security updates for two eagerly anticipated zero-day vulnerabilities that were discovered over the past month.

One of the security updates fixes the PrintNightmare vulnerabilities that allow threat actors to gain SYSTEM level privileges simply by connecting to a remote print server under their control.

Microsoft has fixed this vulnerability by requiring users have administrative privileges to install printer drivers using the Point and Print Windows feature.

You can find more detailed information about the PrintNightmare vulnerability and the Point and Print mitigations in a dedicated article published today.

Microsoft also fixed the PetitPotam NTLM relay attack vector that uses the MS-EFSRPC API to force a device to negotiate with a remote relay server under an attacker's control.

A threat actor with low privileges could use this attack to take over a domain controller and thus the entire Windows domain.

Three zero-days fixed, with one actively exploited

August's Patch Tuesday includes three zero-day vulnerabilities, with one actively exploited in the wild.

Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official security updates or released.

The two publicly disclosed, but not actively exploited, zero-day vulnerabilities are:

The CVE-2021-36942 vulnerability is associated with the PetitPotam NTLM relay attack vector that allows the take over of domain controllers.

Finally, one actively exploited elevation of privileges vulnerability was discovered by the Microsoft Security Response Center (MSRC) and Microsoft Threat Intelligence Center (MSTIC).

• CVE-2021-36948 - Windows Update Medic Service Elevation of Privilege Vulnerability

It is unknown how threat actors used this vulnerability in attacks at this time.

Recent updates from other companies

Other vendors who released updates in July include:

The August 2021 Patch Tuesday Security Updates

Below is the complete list of resolved vulnerabilities and released advisories in the August 2021 Patch Tuesday updates. To access the full description of each vulnerability and the systems that it affects, you can view the full report here.

Tag	CVE ID	CVE Title	Severity
.NET Core & Visual Studio	CVE-2021-34485	.NET Core and Visual Studio Information Disclosure Vulnerability	Important
.NET Core & Visual Studio	CVE-2021-26423	.NET Core and Visual Studio Denial of Service Vulnerability	Important
ASP.NET Core & Visual Studio	CVE-2021-34532	ASP.NET Core and Visual Studio Information Disclosure Vulnerability	Important
Azure	CVE-2021-36943	Azure CycleCloud Elevation of Privilege Vulnerability	Important
Azure	CVE-2021-33762	Azure CycleCloud Elevation of Privilege Vulnerability	Important
Azure Sphere	CVE-2021-26428	Azure Sphere Information Disclosure Vulnerability	Important
Azure Sphere	CVE-2021-26430	Azure Sphere Denial of Service Vulnerability	Important
Azure Sphere	CVE-2021-26429	Azure Sphere Elevation of Privilege Vulnerability	Important
Microsoft Azure Active Directory Connect	CVE-2021-36949	Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability	Important
Microsoft Dynamics	CVE-2021-36946	Microsoft Dynamics Business Central Cross-site Scripting Vulnerability	Important
Microsoft Dynamics	CVE-2021-36950	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Important
Microsoft Dynamics	CVE-2021-34524	Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability	Important
Microsoft Edge (Chromium-based)	CVE-2021-30591	Chromium: CVE-2021-30591 Use after free in File System API	Unknown
Microsoft Edge (Chromium-based)	CVE-2021-30592	Chromium: CVE-2021-30592 Out of bounds write in Tab Groups	Unknown
Microsoft Edge (Chromium-based)	CVE-2021-30597	Chromium: CVE-2021-30597 Use after free in Browser UI	Unknown
Microsoft Edge (Chromium-based)	CVE-2021-30594	Chromium: CVE-2021-30594 Use after free in Page Info UI	Unknown
Microsoft Edge (Chromium-based)	CVE-2021-30596	Chromium: CVE-2021-30596 Incorrect security UI in Navigation	Unknown
Microsoft Edge (Chromium-based)	CVE-2021-30590	Chromium: CVE-2021-30590 Heap buffer overflow in Bookmarks	Unknown
Microsoft Edge (Chromium-based)	CVE-2021-30593	Chromium: CVE-2021-30593 Out of bounds read in Tab Strip	Unknown
Microsoft Graphics Component	CVE-2021-34530	Windows Graphics Component Remote Code Execution Vulnerability	Critical
Microsoft Graphics Component	CVE-2021-34533	Windows Graphics Component Font Parsing Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2021-34478	Microsoft Office Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-36940	Microsoft SharePoint Server Spoofing Vulnerability	Important
Microsoft Office Word	CVE-2021-36941	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft Scripting Engine	CVE-2021-34480	Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Windows Codecs Library	CVE-2021-36937	Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability	Important
Remote Desktop Client	CVE-2021-34535	Remote Desktop Client Remote Code Execution Vulnerability	Critical
Windows Bluetooth Service	CVE-2021-34537	Windows Bluetooth Driver Elevation of Privilege Vulnerability	Important
Windows Cryptographic Services	CVE-2021-36938	Windows Cryptographic Primitives Library Information Disclosure Vulnerability	Important
Windows Defender	CVE-2021-34471	Microsoft Windows Defender Elevation of Privilege Vulnerability	Important
Windows Event Tracing	CVE-2021-34486	Windows Event Tracing Elevation of Privilege Vulnerability	Important
Windows Event Tracing	CVE-2021-34487	Windows Event Tracing Elevation of Privilege Vulnerability	Important
Windows Event Tracing	CVE-2021-26425	Windows Event Tracing Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2021-36927	Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability	Important
Windows MSHTML Platform	CVE-2021-34534	Windows MSHTML Platform Remote Code Execution Vulnerability	Critical
Windows NTLM	CVE-2021-36942	Windows LSA Spoofing Vulnerability	Important
Windows Print Spooler Components	CVE-2021-34483	Windows Print Spooler Elevation of Privilege Vulnerability	Important
Windows Print Spooler Components	CVE-2021-36947	Windows Print Spooler Remote Code Execution Vulnerability	Important
Windows Print Spooler Components	CVE-2021-36936	Windows Print Spooler Remote Code Execution Vulnerability	Critical
Windows Services for NFS ONCRPC XDR Driver	CVE-2021-36933	Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability	Important
Windows Services for NFS ONCRPC XDR Driver	CVE-2021-26433	Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability	Important
Windows Services for NFS ONCRPC XDR Driver	CVE-2021-36932	Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability	Important
Windows Services for NFS ONCRPC XDR Driver	CVE-2021-26432	Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	Critical
Windows Services for NFS ONCRPC XDR Driver	CVE-2021-36926	Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability	Important
Windows Storage Spaces Controller	CVE-2021-34536	Storage Spaces Controller Elevation of Privilege Vulnerability	Important
Windows TCP/IP	CVE-2021-26424	Windows TCP/IP Remote Code Execution Vulnerability	Critical
Windows Update	CVE-2021-36948	Windows Update Medic Service Elevation of Privilege Vulnerability	Important
Windows Update Assistant	CVE-2021-36945	Windows 10 Update Assistant Elevation of Privilege Vulnerability	Important
Windows Update Assistant	CVE-2021-26431	Windows Recovery Environment Agent Elevation of Privilege Vulnerability	Important
Windows User Profile Service	CVE-2021-34484	Windows User Profile Service Elevation of Privilege Vulnerability	Important
Windows User Profile Service	CVE-2021-26426	Windows User Account Profile Picture Elevation of Privilege Vulnerability	Important

Adblock test (Why?)

Article From & Read More ( Microsoft August 2021 Patch Tuesday fixes 3 zero-days, 44 flaws - BleepingComputer )
https://ift.tt/2VJwKUC
Technology

Bagikan Berita Ini