VMSA-2021-0027:VMware vCenter Server updates address arbitrary file read and SSRF vulnerabilities
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it high
Weekly briefing
Week 46 · 15 Nov – 21 Nov 2021 UTC · assess the changes, then plan the next dates.
All dated changes in this period
31 source records · 12 groupsSecurityExchange4 source records
Added to CISA KEV · 4 entries
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-42321
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-34523
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-34473
Assessment context
CISA deadline passed 1803 days ago
Show the other 1 entries
- Microsoft Exchange Server Security Feature Bypass Vulnerability
CISA KEV deadline
CVE-2021-31207
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft 365 Apps2 source records
Added to CISA KEV · 2 entries
- Microsoft Excel Security Feature Bypass
Added to CISA KEV
CVE-2021-42292
Assessment context
CISA lists it as exploited
- Microsoft Office Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-27059
Assessment context
CISA deadline passed 1803 days ago
SecurityWindows12 source records
Added to CISA KEV · 12 entries
- Microsoft Windows Win32k Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-40449
Assessment context
CISA lists it as exploited
- Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-33739
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-36955
Assessment context
CISA deadline passed 1803 days ago
Show the other 9 entries
- Microsoft Windows Kernel Information Disclosure Vulnerability
CISA KEV deadline
CVE-2021-31955
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-31979
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-33771
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
CISA KEV deadline
CVE-2021-36942
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-33742
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows NTFS Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-31956
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Print Spooler Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-1675
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2021-34448
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-36948
Assessment context
CISA deadline passed 1803 days ago
SecurityDefender
Microsoft Defender Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-1647
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability2 source records
CISA KEV deadline · 2 entries
- Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-31199
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-31201
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer Memory Corruption Vulnerability
CISA KEV deadline
CVE-2021-26411
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft Internet Explorer Remote Code Execution Vulnerability
Microsoft Internet Explorer Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-27085
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft MSHTML Remote Code Execution Vulnerability
Microsoft MSHTML Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-40444
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability3 source records
CISA KEV deadline · 3 entries
- Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-38645
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-38648
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-38649
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-38647
Assessment context
CISA deadline passed 1803 days ago
SecurityMicrosoft Win32k Privilege Escalation Vulnerability2 source records
CISA KEV deadline · 2 entries
- Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-1732
Assessment context
CISA deadline passed 1803 days ago
- Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-28310
Assessment context
CISA deadline passed 1803 days ago
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.