Microsoft Patch Tuesday — August 2021

Tuesday, 10 August 2021

Vulnerabilities: 45
Critical: 2
High: 33
Zero-days: 0
Public exploit: 3

Exploited 4

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2021-34486 Exploited Public exploit Windows Event Tracing Elevation of Privilege Vulnerability
EPSS 9.3%
High 7.8
CVE-2021-34484 Exploited Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 22%
High 7.8
CVE-2021-36948 Exploited Windows Update Medic Service Elevation of Privilege Vulnerability
EPSS 23%
High 7.5
CVE-2021-36942 Exploited Public exploit Windows LSA Spoofing Vulnerability
EPSS 66%

Critical 2

Critical 9.9
CVE-2021-26424 Windows TCP/IP Remote Code Execution Vulnerability
EPSS 61%
Critical 9.8
CVE-2021-26432 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
EPSS 11%

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.1
CVE-2021-36949 Public exploit Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
EPSS 1.4%

All vulnerabilities 45

Critical2 Show

Critical 9.9
CVE-2021-26424 Windows TCP/IP Remote Code Execution Vulnerability
EPSS 61%
Critical 9.8
CVE-2021-26432 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
EPSS 11%

High33 Show

High 7.8
CVE-2021-34486 Exploited Public exploit Windows Event Tracing Elevation of Privilege Vulnerability
EPSS 9.3%
High 7.8
CVE-2021-34484 Exploited Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 22%
High 7.8
CVE-2021-36948 Exploited Windows Update Medic Service Elevation of Privilege Vulnerability
EPSS 23%
High 7.5
CVE-2021-36942 Exploited Public exploit Windows LSA Spoofing Vulnerability
EPSS 66%
High 8.8
CVE-2021-34535 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 22%
High 8.8
CVE-2021-36936 Windows Print Spooler Remote Code Execution Vulnerability
EPSS 7.5%
High 8.8
CVE-2021-36947 Windows Print Spooler Remote Code Execution Vulnerability
EPSS 7.6%
High 8.1
CVE-2021-34524 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
EPSS 3.6%
High 7.8
CVE-2021-26425 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26431 Windows Recovery Environment Agent Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2021-34471 Microsoft Defender Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34478 Microsoft Office Remote Code Execution Vulnerability
EPSS 52%
High 7.8
CVE-2021-34483 Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2021-34530 Windows Graphics Component Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-34533 Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-34536 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-34537 Windows Bluetooth Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-36927 Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
High 7.8
CVE-2021-36937 Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-36941 Microsoft Word Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2021-36958 Windows Print Spooler Remote Code Execution Vulnerability
EPSS 31%
High 7.7
CVE-2021-26429 Azure Sphere Elevation of Privilege Vulnerability
High 7.6
CVE-2021-36940 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 4%
High 7.5
CVE-2021-26423 .NET Core and Visual Studio Denial of Service Vulnerability
EPSS 3.9%
High 7.5
CVE-2021-26433 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
EPSS 3.6%
High 7.5
CVE-2021-36926 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
EPSS 3.5%
High 7.5
CVE-2021-36932 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
EPSS 3.5%
High 7.5
CVE-2021-36933 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
EPSS 3.5%
High 7.3
CVE-2021-36945 Windows 10 Update Assistant Elevation of Privilege Vulnerability
EPSS 1.9%
High 7.1
CVE-2021-36949 Public exploit Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
EPSS 1.4%
High 7.0
CVE-2021-26426 Windows User Account Profile Picture Elevation of Privilege Vulnerability
High 7.0
CVE-2021-33762 Azure CycleCloud Elevation of Privilege Vulnerability
High 7.0
CVE-2021-34487 Windows Event Tracing Elevation of Privilege Vulnerability

Medium10 Show

Medium 6.8
CVE-2021-34480 Scripting Engine Memory Corruption Vulnerability
EPSS 34%
Medium 6.8
CVE-2021-34534 Windows MSHTML Platform Remote Code Execution Vulnerability
EPSS 2.2%
Medium 6.0
CVE-2021-26430 Azure Sphere Denial of Service Vulnerability
Medium 5.5
CVE-2021-34532 ASP.NET Core and Visual Studio Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2021-36938 Windows Cryptographic Primitives Library Information Disclosure Vulnerability
Medium 5.4
CVE-2021-36946 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
EPSS 1%
Medium 5.4
CVE-2021-36950 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
EPSS 1%
Medium 5.0
CVE-2021-34485 .NET Core and Visual Studio Information Disclosure Vulnerability
EPSS 2.1%
Medium 4.4
CVE-2021-26428 Azure Sphere Information Disclosure Vulnerability
Medium 4.0
CVE-2021-36943 Azure CycleCloud Elevation of Privilege Vulnerability