MSRC-CVE-2021-33781 — Azure AD Security Feature Bypass Vulnerability

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

Details

Security updates
10.0.17763.2061 — https://support.microsoft.com/help/5004244
10.0.18363.1679 — https://support.microsoft.com/help/5004245
10.0.19043.1110 — https://support.microsoft.com/help/5004237
10.0.22000.258 — https://support.microsoft.com/help/5006674
10.0.14393.4704 — https://support.microsoft.com/help/5006669

Vulnerabilities 1

High 8.1

CVE-2021-33781

Azure AD Security Feature Bypass Vulnerability

Azure AD Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2021

Revision history

2021-10-12 #3
In the Security Updates table, added all supported versions of Windows 10 Version 1607, Windows Server 2016, and Windows 11 because these versions of Windows 10, Windows Server, and Windows 11 are also affected by this vulnerability. Microsoft strongly recommends that customers running any of these versions install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.
2021-07-14 #2
Corrected CVE title. This is an informational change only.
2021-07-13 #1
Information published.

References

CVE-2021-33781 Azure AD Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33781
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss