{"id":8606,"date":"2021-08-19T04:59:57","date_gmt":"2021-08-19T11:59:57","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8606"},"modified":"2023-03-07T15:35:08","modified_gmt":"2023-03-07T22:35:08","slug":"august-microsoft-patches-44-security-vulnerabilities","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/august-microsoft-patches-44-security-vulnerabilities\/","title":{"rendered":"August: Microsoft Patches 44 Security Vulnerabilities"},"content":{"rendered":"<p dir=\"ltr\">Microsoft patched 44 unique security vulnerabilities in August 2021. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 800px; height: 550px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-1-8.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Microsoft Patches: Overview<\/h2>\n<p dir=\"ltr\">This August, Microsoft patched 44 vulnerabilities discovered in 2021, including two previously disclosed bugs.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">13 CVEs are classified as Remote Code Execution bugs<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">17 CVEs with Privilege Escalation capabilities<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">8 CVEs are linked to Information Disclosure<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs have Denial of Service capabilities<\/p>\n<\/li>\n<\/ul>\n<h2 dir=\"ltr\">Zero Days<\/h2>\n<p>Microsoft had released patches for three zero-day vulnerabilities this month:<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2021-36948\">CVE-2021-36948<\/a> Windows Update Medic Service Elevation of Privilege Vulnerability<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2021-36942\">CVE-2021-36942<\/a> Windows LSA Spoofing Vulnerability<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2021-36936\">CVE-2021-36936<\/a> Windows Print Spooler Remote Code Execution Vulnerability<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2021-36948\">CVE-2021-36948<\/a> in Windows Update Medic Service with Elevation of Privilege is the only one that has been exploited in the wild, according to <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2021-36948\">Microsoft&#8217;s research<\/a>. It&#8217;s conceivable that CVE-2021-36948 is a version of CVE-2020-17070, which was reported in November 2020, due to its exploitation status.<\/p>\n<\/li>\n<\/ul>\n<h2 dir=\"ltr\">RCE\/PE<\/h2>\n<p dir=\"ltr\">Microsoft has issued security fixes for two zero-day vulnerabilities found last month.<\/p>\n<p dir=\"ltr\">In July, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/ADV210003\">PetitPotam<\/a> was released\u2014a tool that could possibly launch a NTLM relay attack. Windows New Technology LAN Manager (NTLM) is a Microsoft authentication protocol in which the attacker intercepts authentication traffic between a client and a server on a network.<\/p>\n<p dir=\"ltr\">Next is the most notable fixes in the new batch (<a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2021-36958\">CVE-2021-36958<\/a>)\u2014address the Windows Print Spooler Remote Code Execution vulnerability, which has been a hot subject since its discovery in June. Microsoft was also chastised by the security community for botching the distribution of fixes to fix the problem.<\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">Interestingly, seven vulnerabilities are rated critical which are classified as Remote Code Execution bugs.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 504px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-2-10.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Product Analysis<\/h2>\n<p dir=\"ltr\">This month, Windows products received a fix for 28 vulnerabilities in which 10 accounted for Remote Code Execution, 12 for Privilege Escalation possibilities, 5 classified as Information disclosure bug and 1 as Spoofing.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 800px; height: 378px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-3-5.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrKUNMXUh9wtFYHi?backgroundColor=cyan&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: Microsoft August Patches 2021<\/strong><\/p>\n<p>CISA has <a href=\"https:\/\/us-cert.cisa.gov\/ncas\/current-activity\/2021\/08\/10\/microsoft-releases-august-2021-security-updates\">issued<\/a> an overall alert to address the vulnerabilities in Microsoft products. As always, we suggest patching systems as quickly as possible and monitoring your environment on a regular basis to detect systems that haven&#8217;t been patched.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft patched 44 unique security vulnerabilities in August 2021. We analyzed these weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority. Microsoft Patches: Overview This August, Microsoft patched 44 vulnerabilities discovered in 2021, including two previously disclosed bugs. 13 CVEs are classified as Remote Code Execution bugs 17 CVEs with [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14440,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[290,291],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8606"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14440"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8606"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}