{"id":8420,"date":"2021-12-30T12:09:13","date_gmt":"2021-12-30T19:09:13","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8420"},"modified":"2023-03-07T16:03:39","modified_gmt":"2023-03-07T23:03:39","slug":"december-microsoft-patches-74-security-vulnerabilities","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/december-microsoft-patches-74-security-vulnerabilities\/","title":{"rendered":"December 2021: Microsoft Patches 74 Security Vulnerabilities"},"content":{"rendered":"<p dir=\"ltr\">Microsoft patched 74 unique security vulnerabilities in December 2021, including six zero-day exploits. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 800px; height: 406px;\" src=\"\/wp-content\/uploads\/2022\/10\/patch-watch-revamp-1-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Microsoft Patches &#8211; Overview<\/h2>\n<p dir=\"ltr\">This December, Microsoft patched 74 vulnerabilities discovered in 2021.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">The number of CVEs classified as remote code execution bugs: 26<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">The number of CVEs with privilege escalation capabilities: 22<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">The number of CVEs linked to information disclosure: 10<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">The number of CVEs with denial-of-service capabilities: 3<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">The number of CVEs with spoofing possibilities: 7<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\">Five of these bugs are listed as publicly known, and one is listed as being publicly exploited.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 316px;\" src=\"\/wp-content\/uploads\/2022\/10\/weaponized-vulnerabilities.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Zero-Days<\/h2>\n<p dir=\"ltr\">Microsoft had released fixes for six zero-day vulnerabilities this month.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43890\">CVE-2021-43890<\/a>: Windows AppX Installer<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43240\">CVE-2021-43240<\/a>: NTFS Set Short Name<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-41333\">CVE-2021-41333<\/a>: Windows Print Spooler<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43880\">CVE-2021-43880<\/a>: Windows Mobile Device Management<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43883\">CVE-2021-43883<\/a>: Windows Installer<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43893\">CVE-2021-43893<\/a>: Windows Encrypting File System (EFS)<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43890\">CVE-2021-43890<\/a> is a zero-day spoofing vulnerability in Windows AppX Installer, issued a CVSS severity score of 7.1 (High), and is publicly known and under exploitation. According to Microsoft, it has been linked to attacks tied to the Emotet\/TrickBot\/BazaLoader malware families. An attacker would need to force a user to open a malicious attachment to exploit this vulnerability, which would most likely be done through a phishing attack.<\/p>\n<p dir=\"ltr\">For those who have not been able to install a patch, Microsoft has provided a few <a href=\"http:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2021-43890\">workarounds<\/a>.<\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 429px;\" src=\"\/wp-content\/uploads\/2022\/10\/patch-watch-revamp-3-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">CWE Analysis<\/h2>\n<p dir=\"ltr\">When analyzing these vulnerabilities based on the Common Weakness Enumeration (CWE) categorization, 19 CVEs carry a CWE of CWE-269 (Improper Privilege Management) that falls under <a href=\"https:\/\/cwe.mitre.org\/top25\/archive\/2021\/2021_cwe_top25.html\">2021 CWE Top 30 Most Dangerous Software Weaknesses<\/a>. On the whole, 25 CVEs have not been assigned a CWE Identifier yet.<\/p>\n<h2 dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 412px;\" src=\"\/wp-content\/uploads\/2022\/10\/patch-watch-revamp-2-2.png\" alt=\"\" \/><\/h2>\n<h2 dir=\"ltr\">Product Analysis<\/h2>\n<p dir=\"ltr\">The December patch package influences the following products: Microsoft Azure, the Chromium-based Edge browser, and Microsoft Office, as well as associated products such SP.NET Core and Visual Studio, Microsoft PowerShell, Windows Codecs Library, Remote Desktop Client, Windows Hyper-V, Visual Studio Code, Windows Installer, Windows Encrypting file system, Windows Kernel, Windows Media, Windows NTFS, Windows Print Spooler Components, and Windows Mobile Device Management. Windows products received a fix for 21 vulnerabilities.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 332px;\" src=\"\/wp-content\/uploads\/2022\/10\/patch-watch-revamp-4-2.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrss7Z4DkCFdBD0N?backgroundColor=cyan&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: Microsoft December Patches 2021<\/strong><\/p>\n<p dir=\"ltr\">Microsoft fixed a total of 887 CVEs this year, a 29% drop from 2020. We recommend prompt patching in all circumstances, and priority should be given to the critical and zero-day bugs.<\/p>\n<p dir=\"ltr\">\n","protected":false},"excerpt":{"rendered":"<p>Microsoft patched 74 unique security vulnerabilities in December 2021, including six zero-day exploits. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority. Microsoft Patches &#8211; Overview This December, Microsoft patched 74 vulnerabilities discovered in 2021. The number of CVEs classified as remote code execution bugs: 26 The [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14440,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[290],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8420"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14440"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8420"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}