WEEKLY BRIEFING · 1 NOV – 7 NOV 2021 · UTC
Full source inventory · public sources only
Week 44 sources
No new MSRC release that week. CISA added 79 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
79Microsoft CVEs added to CISA KEV
Security to act on79
- CVE-2021-40444 — Microsoft MSHTML Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-38649 — Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-38648 — Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-38647 — Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-38645 — Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-36955 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-36948 — Microsoft Windows Update Medic Service Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-36942 — Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityKEV 3 Nov
- CVE-2021-34527 — Microsoft Windows Print Spooler Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-34523 — Microsoft Exchange Server Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-34448 — Microsoft Windows Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-33742 — Microsoft Windows MSHTML Platform Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure VulnerabilityKEV 3 Nov
- CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass VulnerabilityKEV 3 Nov
- CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-28310 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-27085 — Microsoft Internet Explorer Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-27065 — Microsoft Exchange Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-27059 — Microsoft Office Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-26858 — Microsoft Exchange Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2021-1732 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2021-1647 — Microsoft Defender Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-17144 — Microsoft Exchange Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-17087 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2020-1472 — Microsoft Netlogon Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2020-1464 — Microsoft Windows Spoofing VulnerabilityKEV 3 Nov
- CVE-2020-1380 — Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2020-1350 — Microsoft Windows DNS Server Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-1147 — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-1054 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2020-1040 — Microsoft Hyper-V RemoteFX vGPU Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-1020 — Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-0986 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2020-0968 — Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2020-0938 — Microsoft Windows Adobe Font Manager Library Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-0878 — Microsoft Edge and Internet Explorer Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2020-0688 — Microsoft Exchange Server Validation Key Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-0683 — Microsoft Windows Installer Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2020-0674 — Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2020-0646 — Microsoft .NET Framework Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2020-0601 — Microsoft Windows CryptoAPI Spoofing VulnerabilityKEV 3 Nov
- CVE-2019-1429 — Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2019-1367 — Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2019-1215 — Microsoft Windows Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2019-1214 — Microsoft Windows Privilege Common Log File System (CLFS) Escalation VulnerabilityKEV 3 Nov
- CVE-2019-0863 — Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2019-0859 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2019-0808 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2019-0803 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2019-0797 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2019-0708 — Microsoft Remote Desktop Services Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2019-0604 — Microsoft SharePoint Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2019-0541 — Microsoft MSHTML Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2018-8653 — Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2018-0802 — Microsoft Office Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2018-0798 — Microsoft Office Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2017-8759 — Microsoft .NET Framework Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2017-7269 — Microsoft Windows Server Buffer Overflow VulnerabilityKEV 3 Nov
- CVE-2017-11882 — Microsoft Office Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2017-11774 — Microsoft Office Outlook Security Feature Bypass VulnerabilityKEV 3 Nov
- CVE-2017-0199 — Microsoft Office and WordPad Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2017-0143 — Microsoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2016-7255 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2016-3235 — Microsoft Office OLE DLL Side Loading VulnerabilityKEV 3 Nov
- CVE-2016-0185 — Microsoft Windows Media Center Remote Code Execution VulnerabilityKEV 3 Nov
- CVE-2016-0167 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2015-1641 — Microsoft Office Memory Corruption VulnerabilityKEV 3 Nov
- CVE-2014-1812 — Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityKEV 3 Nov
- CVE-2012-0158 — Microsoft MSCOMCTL.OCX Remote Code Execution VulnerabilityKEV 3 Nov
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.