Microsoft Patch Tuesday — June 2021

Tuesday, 8 June 2021

Vulnerabilities: 50
Critical: 1
High: 36
Zero-days: 0
Public exploit: 6

Exploited 7

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.4
CVE-2021-33739 Exploited Public exploit Microsoft DWM Core Library Elevation of Privilege Vulnerability
EPSS 6.6%
High 7.8
CVE-2021-1675 Exploited Public exploit Windows Print Spooler Remote Code Execution Vulnerability
EPSS 85%
High 7.8
CVE-2021-31956 Exploited Public exploit Windows NTFS Elevation of Privilege Vulnerability
EPSS 22%
High 7.5
CVE-2021-33742 Exploited Windows MSHTML Platform Remote Code Execution Vulnerability
EPSS 59%
Medium 5.5
CVE-2021-31955 Exploited Public exploit Windows Kernel Information Disclosure Vulnerability
EPSS 81%
Medium 5.2
CVE-2021-31199 Exploited Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
EPSS 3%
Medium 5.2
CVE-2021-31201 Exploited Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
EPSS 2.6%

Critical 1

Critical 9.4
CVE-2021-31962 Kerberos AppContainer Security Feature Bypass Vulnerability
EPSS 3.8%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.6
CVE-2021-31950 Public exploit Microsoft SharePoint Server Spoofing Vulnerability
EPSS 4.6%
Medium 4.8
CVE-2021-26414 Public exploit Windows DCOM Server Security Feature Bypass
EPSS 50%

All vulnerabilities 50

Critical1 Show

Critical 9.4
CVE-2021-31962 Kerberos AppContainer Security Feature Bypass Vulnerability
EPSS 3.8%

High36 Show

High 8.4
CVE-2021-33739 Exploited Public exploit Microsoft DWM Core Library Elevation of Privilege Vulnerability
EPSS 6.6%
High 7.8
CVE-2021-1675 Exploited Public exploit Windows Print Spooler Remote Code Execution Vulnerability
EPSS 85%
High 7.8
CVE-2021-31956 Exploited Public exploit Windows NTFS Elevation of Privilege Vulnerability
EPSS 22%
High 7.5
CVE-2021-33742 Exploited Windows MSHTML Platform Remote Code Execution Vulnerability
EPSS 59%
High 8.6
CVE-2021-31977 Windows Hyper-V Denial of Service Vulnerability
EPSS 3.2%
High 8.2
CVE-2021-33741 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 2.7%
High 8.1
CVE-2021-31980 Microsoft Intune Management Extension Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2021-31939 Microsoft Excel Remote Code Execution Vulnerability
EPSS 13%
High 7.8
CVE-2021-31940 Microsoft Office Graphics Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-31941 Microsoft Office Graphics Remote Code Execution Vulnerability
EPSS 2.9%
High 7.8
CVE-2021-31942 3D Viewer Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2021-31943 3D Viewer Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-31945 Paint 3D Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-31946 Paint 3D Remote Code Execution Vulnerability
EPSS 2.9%
High 7.8
CVE-2021-31951 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2021-31952 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-31953 Windows Filter Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2021-31967 VP9 Video Extensions Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2021-31969 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2021-31973 Windows GPSVC Elevation of Privilege Vulnerability
High 7.8
CVE-2021-31983 Paint 3D Remote Code Execution Vulnerability
EPSS 2.1%
High 7.8
CVE-2021-31985 Microsoft Defender Remote Code Execution Vulnerability
EPSS 7.8%
High 7.6
CVE-2021-31950 Public exploit Microsoft SharePoint Server Spoofing Vulnerability
EPSS 4.6%
High 7.6
CVE-2021-31948 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.3%
High 7.6
CVE-2021-31964 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.5%
High 7.5
CVE-2021-31958 Windows NTLM Elevation of Privilege Vulnerability
EPSS 2.6%
High 7.5
CVE-2021-31968 Windows Remote Desktop Services Denial of Service Vulnerability
EPSS 3.2%
High 7.5
CVE-2021-31974 Server for NFS Denial of Service Vulnerability
EPSS 6.7%
High 7.5
CVE-2021-31975 Server for NFS Information Disclosure Vulnerability
EPSS 3.7%
High 7.5
CVE-2021-31976 Server for NFS Information Disclosure Vulnerability
EPSS 3.7%
High 7.3
CVE-2021-31938 Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
EPSS 2%
High 7.3
CVE-2021-31949 Microsoft Outlook Remote Code Execution Vulnerability
EPSS 2.6%
High 7.2
CVE-2021-31966 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 4.6%
High 7.1
CVE-2021-26420 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3%
High 7.1
CVE-2021-31963 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 2.1%

Medium13 Show

Medium 5.5
CVE-2021-31955 Exploited Public exploit Windows Kernel Information Disclosure Vulnerability
EPSS 81%
Medium 5.2
CVE-2021-31199 Exploited Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
EPSS 3%
Medium 5.2
CVE-2021-31201 Exploited Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
EPSS 2.6%
Medium 6.8
CVE-2021-31971 Windows HTML Platforms Security Feature Bypass Vulnerability
EPSS 2.1%
Medium 6.4
CVE-2021-31959 Scripting Engine Memory Corruption Vulnerability
EPSS 9.2%
Medium 5.9
CVE-2021-31957 ASP.NET Core Denial of Service Vulnerability
EPSS 5.1%
Medium 5.7
CVE-2021-31965 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 4.5%
Medium 5.5
CVE-2021-31960 Windows Bind Filter Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2021-31970 Windows TCP/IP Driver Security Feature Bypass Vulnerability
Medium 5.5
CVE-2021-31972 Event Tracing for Windows Information Disclosure Vulnerability
Medium 5.5
CVE-2021-31978 Microsoft Defender Denial of Service Vulnerability
EPSS 1.2%
Medium 5.0
CVE-2021-31944 3D Viewer Information Disclosure Vulnerability
EPSS 2.8%
Medium 4.8
CVE-2021-26414 Public exploit Windows DCOM Server Security Feature Bypass
EPSS 50%