Patch days / January 2021

Microsoft Patch Tuesday — January 2021

Tuesday, 12 January 2021

Vulnerabilities: 82
Critical: 0
High: 63
Zero-days: 0
Public exploit: 5

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2021-1647 Exploited Public exploit Microsoft Defender Remote Code Execution Vulnerability
EPSS 40%

Public exploit code 4

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2021-1636 Public exploit Microsoft SQL Elevation of Privilege Vulnerability
EPSS 6.5%
High 8.8
CVE-2021-1678 Public exploit Windows Print Spooler Spoofing Vulnerability
EPSS 10%
Medium 5.5
CVE-2021-1656 Public exploit TPM Device Driver Information Disclosure Vulnerability
EPSS 3%
Medium 5.5
CVE-2021-1699 Public exploit Windows (modem.sys) Information Disclosure Vulnerability
EPSS 2.1%

All vulnerabilities 82

High63 Show

High 7.8
CVE-2021-1647 Exploited Public exploit Microsoft Defender Remote Code Execution Vulnerability
EPSS 40%
High 8.8
CVE-2021-1636 Public exploit Microsoft SQL Elevation of Privilege Vulnerability
EPSS 6.5%
High 8.8
CVE-2021-1678 Public exploit Windows Print Spooler Spoofing Vulnerability
EPSS 10%
High 8.8
CVE-2021-1658 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1660 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1664 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1666 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1667 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.9%
High 8.8
CVE-2021-1669 Windows Remote Desktop Security Feature Bypass Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1671 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1673 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1674 Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
EPSS 3.2%
High 8.8
CVE-2021-1700 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.9%
High 8.8
CVE-2021-1701 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 3.9%
High 8.8
CVE-2021-1707 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3.9%
High 8.0
CVE-2021-1712 Microsoft SharePoint Elevation of Privilege Vulnerability
EPSS 2.4%
High 8.0
CVE-2021-1718 Microsoft SharePoint Server Tampering Vulnerability
EPSS 2.8%
High 8.0
CVE-2021-1719 Microsoft SharePoint Elevation of Privilege Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-1642 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1643 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 4.2%
High 7.8
CVE-2021-1644 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2021-1648 Microsoft splwow64 Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2021-1649 Active Template Library Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1650 Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1651 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1652 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1653 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1654 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1655 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1657 Windows Fax Compose Form Remote Code Execution Vulnerability
High 7.8
CVE-2021-1659 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1661 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1662 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1665 GDI+ Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2021-1668 Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
EPSS 3.9%
High 7.8
CVE-2021-1680 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1681 Windows WalletService Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1686 Windows WalletService Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1687 Windows WalletService Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1688 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1689 Windows Multipoint Management Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1690 Windows WalletService Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1693 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1695 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1697 Windows InstallService Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1702 Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1703 Windows Event Logging Service Elevation of Privilege Vulnerability
High 7.8
CVE-2021-1710 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
EPSS 3.2%
High 7.8
CVE-2021-1711 Microsoft Office Remote Code Execution Vulnerability
EPSS 3.9%
High 7.8
CVE-2021-1713 Microsoft Excel Remote Code Execution Vulnerability
EPSS 3.3%
High 7.8
CVE-2021-1714 Microsoft Excel Remote Code Execution Vulnerability
EPSS 3.3%
High 7.8
CVE-2021-1715 Microsoft Word Remote Code Execution Vulnerability
EPSS 3.9%
High 7.8
CVE-2021-1716 Microsoft Word Remote Code Execution Vulnerability
EPSS 3.9%
High 7.7
CVE-2021-1638 Windows Bluetooth Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.7
CVE-2021-1691 Windows Hyper-V Denial of Service Vulnerability
EPSS 4.1%
High 7.7
CVE-2021-1692 Windows Hyper-V Denial of Service Vulnerability
EPSS 4.2%
High 7.5
CVE-2021-1694 Windows Update Stack Elevation of Privilege Vulnerability
EPSS 3.5%
High 7.5
CVE-2021-1723 ASP.NET Core and Visual Studio Denial of Service Vulnerability
EPSS 5.3%
High 7.3
CVE-2021-1685 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
High 7.3
CVE-2021-1704 Windows Hyper-V Elevation of Privilege Vulnerability
EPSS 1%
High 7.3
CVE-2021-1706 Windows LUAFV Elevation of Privilege Vulnerability
EPSS 2.2%
High 7.0
CVE-2021-1682 Windows Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2021-1709 Windows Win32k Elevation of Privilege Vulnerability

Medium19 Show

Medium 6.6
CVE-2021-1646 Windows WLAN Service Elevation of Privilege Vulnerability
Medium 6.5
CVE-2021-1679 Windows CryptoAPI Denial of Service Vulnerability
EPSS 3.7%
Medium 5.7
CVE-2021-1708 Windows GDI+ Information Disclosure Vulnerability
EPSS 3.7%
Medium 5.5
CVE-2021-1656 Public exploit TPM Device Driver Information Disclosure Vulnerability
EPSS 3%
Medium 5.5
CVE-2021-1699 Public exploit Windows (modem.sys) Information Disclosure Vulnerability
EPSS 2.1%
Medium 5.5
CVE-2021-1637 Windows DNS Query Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2021-1663 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2021-1670 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2021-1672 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2021-1676 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2021-1677 Azure Active Directory Pod Identity Spoofing Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2021-1696 Windows Graphics Component Information Disclosure Vulnerability
EPSS 4.7%
Medium 5.5
CVE-2021-1725 Bot Framework SDK Information Disclosure Vulnerability
EPSS 1.1%
Medium 5.0
CVE-2021-1645 Windows Docker Information Disclosure Vulnerability
EPSS 7.8%
Medium 5.0
CVE-2021-1683 Windows Bluetooth Security Feature Bypass Vulnerability
EPSS 1.7%
Medium 5.0
CVE-2021-1684 Windows Bluetooth Security Feature Bypass Vulnerability
EPSS 1.6%
Medium 4.6
CVE-2021-1641 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 2%
Medium 4.6
CVE-2021-1717 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 2%
Medium 4.2
CVE-2021-1705 Microsoft Edge (HTML-based) Memory Corruption Vulnerability
EPSS 2.1%