Weekly briefing
Week 46 · 15 Nov – 21 Nov 2021 UTC · assess the changes, then plan the next dates.
Coming up3
-
Microsoft Windows Win32k Privilege Escalation Vulnerability
CVE-2021-40449
Same day: CISA KEV deadline: Microsoft Excel Security Feature Bypass; CISA KEV deadline: Microsoft Exchange Server Remote Code Execution Vulnerability
-
Patch Tuesday, 14 December 2021
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft Defender Remote Code Execution Vulnerability
CVE-2021-1647
Same day: CISA KEV deadline: Microsoft Windows Print Spooler Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Office Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Exchange Server Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows NTFS Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Scripting Engine Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Exchange Server Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Exchange Server Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability; CISA KEV deadline: Microsoft Windows Update Medic Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft MSHTML Remote Code Execution Vulnerability
Changed4
-
VMSA-2021-0027:VMware vCenter Server updates address arbitrary file read and SSRF vulnerabilities
VMware security advisories (Broadcom)
-
Windows · 12 security records
CVE-2021-40449
-
Microsoft 365 Apps · 2 security records
CVE-2021-42292
-
Exchange · 4 security records
CVE-2021-42321
How this list is chosen
Changes from 15 Nov 2021 – 21 Nov 2021 UTC and dates due up to 21 Dec 2021. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.