Patch days / July 2021

Microsoft Patch Tuesday — July 2021

Tuesday, 13 July 2021

Vulnerabilities: 90
Critical: 2
High: 66
Zero-days: 0
Public exploit: 4

Exploited 6

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 9.1
CVE-2021-34473 Exploited Public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 100%
Critical 9.0
CVE-2021-34523 Exploited Public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 100%
High 7.8
CVE-2021-31979 Exploited Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.5%
High 7.8
CVE-2021-33771 Exploited Windows Kernel Elevation of Privilege Vulnerability
EPSS 10%
High 7.3
CVE-2021-33766 Exploited Public exploit Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 98%
High 7.2
CVE-2021-31196 Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 54%

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.0
CVE-2021-34470 Public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 4.4%

All vulnerabilities 90

Critical2 Show

Critical 9.1
CVE-2021-34473 Exploited Public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 100%
Critical 9.0
CVE-2021-34523 Exploited Public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 100%

High66 Show

High 7.8
CVE-2021-31979 Exploited Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.5%
High 7.8
CVE-2021-33771 Exploited Windows Kernel Elevation of Privilege Vulnerability
EPSS 10%
High 7.3
CVE-2021-33766 Exploited Public exploit Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 98%
High 7.2
CVE-2021-31196 Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 54%
High 8.8
CVE-2021-33749 Windows DNS Snap-in Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2021-33750 Windows DNS Snap-in Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2021-33752 Windows DNS Snap-in Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2021-33756 Windows DNS Snap-in Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2021-33780 Windows DNS Server Remote Code Execution Vulnerability
EPSS 2.7%
High 8.8
CVE-2021-34494 Windows DNS Server Remote Code Execution Vulnerability
EPSS 4%
High 8.8
CVE-2021-34508 Windows Kernel Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2021-34525 Windows DNS Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.2
CVE-2021-33767 Open Enclave SDK Elevation of Privilege Vulnerability
High 8.2
CVE-2021-34469 Microsoft Office Security Feature Bypass Vulnerability
EPSS 3.7%
High 8.1
CVE-2021-33779 Windows AD FS Security Feature Bypass Vulnerability
EPSS 2.4%
High 8.1
CVE-2021-33781 Azure AD Security Feature Bypass Vulnerability
EPSS 2.4%
High 8.1
CVE-2021-33786 Windows LSA Security Feature Bypass Vulnerability
EPSS 2.1%
High 8.1
CVE-2021-34492 Windows Certificate Spoofing Vulnerability
EPSS 2.5%
High 8.1
CVE-2021-34520 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 4.4%
High 8.0
CVE-2021-34470 Public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 4.4%
High 8.0
CVE-2021-33746 Windows DNS Server Remote Code Execution Vulnerability
EPSS 2%
High 8.0
CVE-2021-33754 Windows DNS Server Remote Code Execution Vulnerability
EPSS 2%
High 8.0
CVE-2021-33768 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 1.2%
High 8.0
CVE-2021-34474 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2021-31947 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2021-33740 Windows Media Remote Code Execution Vulnerability
EPSS 2.8%
High 7.8
CVE-2021-33743 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2021-33759 Windows Desktop Bridge Elevation of Privilege Vulnerability
High 7.8
CVE-2021-33761 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2021-33773 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2021-33775 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-33776 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-33777 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-33778 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-33784 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34477 Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34479 Microsoft Visual Studio Spoofing Vulnerability
EPSS 3.4%
High 7.8
CVE-2021-34488 Windows Console Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34489 DirectWrite Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2021-34498 Windows GDI Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2021-34501 Microsoft Excel Remote Code Execution Vulnerability
EPSS 52%
High 7.8
CVE-2021-34503 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-34504 Windows Address Book Remote Code Execution Vulnerability
EPSS 3.5%
High 7.8
CVE-2021-34510 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34511 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34512 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2021-34513 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2021-34514 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34516 Win32k Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2021-34518 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-34521 Raw Image Extension Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-34522 Microsoft Defender Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-34528 Visual Studio Code Remote Code Execution Vulnerability
EPSS 3.1%
High 7.8
CVE-2021-34529 Visual Studio Code Remote Code Execution Vulnerability
EPSS 5.1%
High 7.7
CVE-2021-33758 Windows Hyper-V Denial of Service Vulnerability
EPSS 2.9%
High 7.6
CVE-2021-31206 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 13%
High 7.6
CVE-2021-31984 Power BI Remote Code Execution Vulnerability
EPSS 1.9%
High 7.5
CVE-2021-31183 Windows TCP/IP Driver Denial of Service Vulnerability
EPSS 3.8%
High 7.5
CVE-2021-33772 Windows TCP/IP Driver Denial of Service Vulnerability
EPSS 3.3%
High 7.5
CVE-2021-33785 Windows AF_UNIX Socket Provider Denial of Service Vulnerability
EPSS 3.3%
High 7.5
CVE-2021-33788 Windows LSA Denial of Service Vulnerability
EPSS 3.3%
High 7.5
CVE-2021-34476 Bowser.sys Denial of Service Vulnerability
EPSS 3.3%
High 7.5
CVE-2021-34490 Windows TCP/IP Driver Denial of Service Vulnerability
EPSS 3.3%
High 7.1
CVE-2021-34468 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 2.1%
High 7.0
CVE-2021-33751 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.0
CVE-2021-33774 Windows Event Tracing Elevation of Privilege Vulnerability

Medium22 Show

Medium 6.8
CVE-2021-34497 Windows MSHTML Platform Remote Code Execution Vulnerability
EPSS 2.1%
Medium 6.7
CVE-2021-34493 Windows Partition Management Driver Elevation of Privilege Vulnerability
Medium 6.5
CVE-2021-33745 Windows DNS Server Denial of Service Vulnerability
EPSS 2.9%
Medium 6.5
CVE-2021-33783 Windows SMB Information Disclosure Vulnerability
EPSS 2.8%
Medium 6.5
CVE-2021-34499 Windows DNS Server Denial of Service Vulnerability
EPSS 2.9%
Medium 6.5
CVE-2021-34507 Windows Remote Assistance Information Disclosure Vulnerability
EPSS 3.3%
Medium 6.3
CVE-2021-33755 Windows Hyper-V Denial of Service Vulnerability
EPSS 3.1%
Medium 6.3
CVE-2021-34500 Windows Kernel Memory Information Disclosure Vulnerability
EPSS 2.7%
Medium 6.2
CVE-2021-33765 Windows Installer Spoofing Vulnerability
Medium 6.1
CVE-2021-31961 Windows InstallService Elevation of Privilege Vulnerability
Medium 5.9
CVE-2021-33764 Windows Key Distribution Center Information Disclosure Vulnerability
EPSS 3%
Medium 5.5
CVE-2021-33760 Media Foundation Information Disclosure Vulnerability
Medium 5.5
CVE-2021-33763 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2021-33782 Windows Authenticode Spoofing Vulnerability
EPSS 2.2%
Medium 5.5
CVE-2021-34491 Win32k Information Disclosure Vulnerability
Medium 5.5
CVE-2021-34496 Windows GDI Information Disclosure Vulnerability
EPSS 2%
Medium 5.5
CVE-2021-34509 Storage Spaces Controller Information Disclosure Vulnerability
Medium 5.3
CVE-2021-33744 Windows Secure Kernel Mode Security Feature Bypass Vulnerability
Medium 5.3
CVE-2021-33757 Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
EPSS 3%
Medium 5.3
CVE-2021-34517 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 2%
Medium 5.3
CVE-2021-34519 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 6.1%
Medium 4.7
CVE-2021-33753 Microsoft Bing Search Spoofing Vulnerability
EPSS 1.9%