Patch days / October 2021

Microsoft Patch Tuesday — October 2021

Tuesday, 12 October 2021

Vulnerabilities: 71
Critical: 1
High: 46
Zero-days: 0
Public exploit: 2

Exploited 3

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2021-40449 Exploited Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 82%
High 7.8
CVE-2021-40450 Exploited Win32k Elevation of Privilege Vulnerability
EPSS 1.5%
High 7.8
CVE-2021-41357 Exploited Win32k Elevation of Privilege Vulnerability
EPSS 1.5%

Critical 1

Critical 9.0
CVE-2021-26427 Microsoft Exchange Server Remote Code Execution Vulnerability

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Medium 5.5
CVE-2021-41338 Public exploit Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
EPSS 3.3%

All vulnerabilities 71

Critical1 Show

Critical 9.0
CVE-2021-26427 Microsoft Exchange Server Remote Code Execution Vulnerability

High46 Show

High 7.8
CVE-2021-40449 Exploited Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 82%
High 7.8
CVE-2021-40450 Exploited Win32k Elevation of Privilege Vulnerability
EPSS 1.5%
High 7.8
CVE-2021-41357 Exploited Win32k Elevation of Privilege Vulnerability
EPSS 1.5%
High 8.8
CVE-2021-36970 Windows Print Spooler Spoofing Vulnerability
EPSS 3.1%
High 8.1
CVE-2021-40487 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 48%
High 8.1
CVE-2021-41344 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 6.5%
High 8.0
CVE-2021-38672 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.1%
High 8.0
CVE-2021-40461 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.4%
High 8.0
CVE-2021-40464 Windows Nearby Sharing Elevation of Privilege Vulnerability
High 8.0
CVE-2021-41348 Microsoft Exchange Server Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26441 Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40443 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40462 Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2021-40465 Windows Text Shaping Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2021-40466 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40467 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40470 DirectX Graphics Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40471 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-40473 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-40474 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-40477 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40478 Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-40479 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2021-40480 Microsoft Office Visio Remote Code Execution Vulnerability
EPSS 5.7%
High 7.8
CVE-2021-40485 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-40486 Microsoft Word Remote Code Execution Vulnerability
EPSS 6%
High 7.8
CVE-2021-40488 Storage Spaces Controller Elevation of Privilege Vulnerability
EPSS 1%
High 7.8
CVE-2021-40489 Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-41330 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
EPSS 2%
High 7.8
CVE-2021-41331 Windows Media Audio Decoder Remote Code Execution Vulnerability
EPSS 2%
High 7.8
CVE-2021-41335 Windows Kernel Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2021-41340 Windows Graphics Component Remote Code Execution Vulnerability
EPSS 2%
High 7.8
CVE-2021-41345 Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-41347 Windows AppX Deployment Service Elevation of Privilege Vulnerability
High 7.7
CVE-2021-40463 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 2.6%
High 7.6
CVE-2021-40483 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.4%
High 7.6
CVE-2021-40484 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.4%
High 7.5
CVE-2021-34453 Microsoft Exchange Server Denial of Service Vulnerability
EPSS 2.8%
High 7.5
CVE-2021-36953 Windows TCP/IP Denial of Service Vulnerability
EPSS 5%
High 7.5
CVE-2021-40476 Windows AppContainer Elevation Of Privilege Vulnerability
EPSS 2.4%
High 7.5
CVE-2021-41352 SCOM Information Disclosure Vulnerability
EPSS 2.9%
High 7.4
CVE-2021-40457 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
EPSS 1.6%
High 7.2
CVE-2021-40469 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7.6%
High 7.1
CVE-2021-40481 Microsoft Office Visio Remote Code Execution Vulnerability
EPSS 5.9%
High 7.0
CVE-2021-26442 Windows HTTP.sys Elevation of Privilege Vulnerability
High 7.0
CVE-2021-41334 Windows Desktop Bridge Elevation of Privilege Vulnerability

Medium24 Show

Medium 6.8
CVE-2021-41342 Windows MSHTML Platform Remote Code Execution Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2021-40460 Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2021-41332 Windows Print Spooler Information Disclosure Vulnerability
EPSS 2.7%
Medium 6.5
CVE-2021-41350 Microsoft Exchange Server Spoofing Vulnerability
EPSS 1.9%
Medium 5.7
CVE-2021-41355 .NET Core and Visual Studio Information Disclosure Vulnerability
EPSS 20%
Medium 5.5
CVE-2021-41338 Public exploit Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
EPSS 3.3%
Medium 5.5
CVE-2021-38662 Windows Fast FAT File System Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2021-38663 Windows exFAT File System Information Disclosure Vulnerability
Medium 5.5
CVE-2021-40454 Rich Text Edit Control Information Disclosure Vulnerability
Medium 5.5
CVE-2021-40455 Windows Installer Spoofing Vulnerability
Medium 5.5
CVE-2021-40468 Windows Bind Filter Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2021-40472 Microsoft Excel Information Disclosure Vulnerability
Medium 5.5
CVE-2021-40475 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2021-41336 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2021-41343 Windows Fast FAT File System Driver Information Disclosure Vulnerability
Medium 5.4
CVE-2021-41353 Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
Medium 5.4
CVE-2021-41354 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.4
CVE-2021-41361 Active Directory Federation Server Spoofing Vulnerability
Medium 5.3
CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability
EPSS 2.3%
Medium 5.3
CVE-2021-40482 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 2.3%
Medium 5.3
CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability
Medium 4.9
CVE-2021-41337 Active Directory Security Feature Bypass Vulnerability
EPSS 1.6%
Medium 4.7
CVE-2021-41339 Microsoft DWM Core Library Elevation of Privilege Vulnerability
Medium 4.2
CVE-2021-41363 Intune Management Extension Security Feature Bypass Vulnerability