Patch Tuesday Archive
Patch Tuesday October 2021
Total CVEs
73
Critical
3
Important
68
Exploited
1
Publicly Disclosed
3
All CVEs this month 73
| CVE | Title | Severity | CVSS | Product | Exploited | Disclosed | Diffed |
|---|---|---|---|---|---|---|---|
| CVE-2021-34453 | Microsoft Exchange Server Denial of Service Vulnerability | Important | 7.5 |
Microsoft Exchange Server | - | - | - |
| CVE-2021-36953 | Windows TCP/IP Denial of Service Vulnerability | Important | 7.5 |
Windows TCP/IP | - | - | - |
| CVE-2021-40443 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | - | - | - |
| CVE-2021-40449 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Win32K | Yes | - | - |
| CVE-2021-40454 | Rich Text Edit Control Information Disclosure Vulnerability | Important | 5.5 |
Rich Text Edit Control | - | - | - |
| CVE-2021-40455 | Windows Installer Spoofing Vulnerability | Important | 5.5 |
Windows Installer | - | - | - |
| CVE-2021-40456 | Windows AD FS Security Feature Bypass Vulnerability | Important | 5.3 |
Role: Windows AD FS Server | - | - | - |
| CVE-2021-40457 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | Important | 7.4 |
Microsoft Dynamics | - | - | - |
| CVE-2021-40475 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | Important | 5.5 |
Windows Cloud Files Mini Filter Driver | - | - | - |
| CVE-2021-40476 | Windows AppContainer Elevation Of Privilege Vulnerability | Important | 7.5 |
Windows AppContainer | - | - | - |
| CVE-2021-40477 | Windows Event Tracing Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Event Tracing | - | - | - |
| CVE-2021-40478 | Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Storage Spaces Controller | - | - | - |
| CVE-2021-41344 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important | 8.1 |
Microsoft Office SharePoint | - | - | - |
| CVE-2021-41348 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 8 |
Microsoft Exchange Server | - | - | - |
| CVE-2021-41350 | Microsoft Exchange Server Spoofing Vulnerability | Important | 6.5 |
Microsoft Exchange Server | - | - | - |
| CVE-2021-41355 | .NET Core and Visual Studio Information Disclosure Vulnerability | Important | 5.7 |
.NET Core & Visual Studio | - | - | - |
| CVE-2021-41361 | Active Directory Federation Server Spoofing Vulnerability | Important | 5.4 |
Active Directory Federation Services | - | - | - |
| CVE-2021-26427 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 9 |
Microsoft Exchange Server | - | - | - |
| CVE-2021-42299 | Microsoft Surface Pro 3 Security Feature Bypass Vulnerability | Important | 5.6 |
Microsoft Devices | - | - | - |
| CVE-2021-38662 | Windows Fast FAT File System Driver Information Disclosure Vulnerability | Important | 5.5 |
Windows Fast FAT Driver | - | - | - |
| CVE-2021-38663 | Windows exFAT File System Information Disclosure Vulnerability | Important | 5.5 |
Windows exFAT File System | - | - | - |
| CVE-2021-38672 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 8 |
Role: Windows Hyper-V | - | - | - |
| CVE-2021-40450 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Win32K | - | - | - |
| CVE-2021-40460 | Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability | Important | 6.5 |
Windows Remote Procedure Call Runtime | - | - | - |
| CVE-2021-40461 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 8 |
Role: Windows Hyper-V | - | - | - |
| CVE-2021-40462 | Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2021-40463 | Windows Network Address Translation (NAT) Denial of Service Vulnerability | Important | 7.7 |
Windows Network Address Translation (NAT) | - | - | - |
| CVE-2021-40464 | Windows Nearby Sharing Elevation of Privilege Vulnerability | Important | 8 |
Windows Nearby Sharing | - | - | - |
| CVE-2021-40465 | Windows Text Shaping Remote Code Execution Vulnerability | Important | 7.8 |
Windows Text Shaping | - | - | - |
| CVE-2021-40466 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | - | - | - |
| CVE-2021-40467 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | - | - | - |
| CVE-2021-40468 | Windows Bind Filter Driver Information Disclosure Vulnerability | Important | 5.5 |
Windows Bind Filter Driver | - | - | - |
| CVE-2021-40469 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | Yes | - |
| CVE-2021-40470 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows DirectX | - | - | - |
| CVE-2021-40471 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2021-40472 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office Excel | - | - | - |
| CVE-2021-40473 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2021-40474 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2021-40479 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2021-40480 | Microsoft Office Visio Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Visio | - | - | - |
| CVE-2021-40481 | Microsoft Office Visio Remote Code Execution Vulnerability | Important | 7.1 |
Microsoft Office Visio | - | - | - |
| CVE-2021-40482 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important | 5.3 |
Microsoft Office SharePoint | - | - | - |
| CVE-2021-40483 | Microsoft SharePoint Server Spoofing Vulnerability | Low | 7.6 |
Microsoft Office SharePoint | - | - | - |
| CVE-2021-40484 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 7.6 |
Microsoft Office SharePoint | - | - | - |
| CVE-2021-40485 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2021-40486 | Microsoft Word Remote Code Execution Vulnerability | Critical | 7.8 |
Microsoft Office Word | - | - | - |
| CVE-2021-40487 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important | 8.1 |
Microsoft Office SharePoint | - | - | - |
| CVE-2021-40488 | Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Storage Spaces Controller | - | - | - |
| CVE-2021-40489 | Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Storage Spaces Controller | - | - | - |
| CVE-2021-26441 | Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Storage Spaces Controller | - | - | - |
| CVE-2021-26442 | Windows HTTP.sys Elevation of Privilege Vulnerability | Important | 7 |
Windows HTTP.sys | - | - | - |
| CVE-2021-41330 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2021-41331 | Windows Media Audio Decoder Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2021-41332 | Windows Print Spooler Information Disclosure Vulnerability | Important | 6.5 |
Windows Print Spooler Components | - | - | - |
| CVE-2021-41334 | Windows Desktop Bridge Elevation of Privilege Vulnerability | Important | 7 |
Windows Desktop Bridge | - | - | - |
| CVE-2021-41335 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | Yes | - |
| CVE-2021-41336 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2021-41337 | Active Directory Security Feature Bypass Vulnerability | Important | 4.9 |
Role: Windows Active Directory Server | - | - | - |
| CVE-2021-41338 | Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability | Important | 5.5 |
Windows AppContainer | - | Yes | - |
| CVE-2021-41339 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Important | 4.7 |
Windows DWM Core Library | - | - | - |
| CVE-2021-41340 | Windows Graphics Component Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2021-41342 | Windows MSHTML Platform Remote Code Execution Vulnerability | Important | 6.8 |
Windows MSHTML Platform | - | - | - |
| CVE-2021-41343 | Windows Fast FAT File System Driver Information Disclosure Vulnerability | Important | 5.5 |
Windows Fast FAT Driver | - | - | - |
| CVE-2021-41345 | Storage Spaces Controller Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Storage Spaces Controller | - | - | - |
| CVE-2021-36970 | Windows Print Spooler Spoofing Vulnerability | Important | 8.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2021-41346 | Console Window Host Security Feature Bypass Vulnerability | Important | 5.3 |
Console Window Host | - | - | - |
| CVE-2021-41347 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | Important | 7.8 |
Windows AppX Deployment Service | - | - | - |
| CVE-2021-41352 | SCOM Information Disclosure Vulnerability | Important | 7.5 |
System Center | - | - | - |
| CVE-2021-41353 | Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability | Important | 5.4 |
Microsoft Dynamics | - | - | - |
| CVE-2021-41354 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | Important | 5.4 |
Microsoft Dynamics | - | - | - |
| CVE-2021-41357 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Win32K | - | - | - |
| CVE-2021-41363 | Intune Management Extension Security Feature Bypass Vulnerability | Important | 4.2 |
Microsoft Intune | - | - | - |
| CVE-2021-42307 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Low | 4.3 |
Microsoft Edge (Chromium-based) | - | - | - |
Threat Categories 6
| Threat Category | CVEs | Critical |
|---|---|---|
| Elevation of Privilege | 21 | - |
| Remote Code Execution | 20 | 3 |
| Information Disclosure | 13 | - |
| Spoofing | 9 | - |
| Security Feature Bypass | 7 | - |
| Denial of Service | 3 | - |
Affected Products 43
| Product | CVEs | Exploited |
|---|---|---|
| Microsoft Office Excel | 6 | - |
| Microsoft Office SharePoint | 5 | - |
| Windows Storage Spaces Controller | 5 | - |
| Microsoft Exchange Server | 4 | - |
| Microsoft Dynamics | 3 | - |
| Microsoft Windows Codecs Library | 3 | - |
| Windows Common Log File System Driver | 3 | - |
| Windows Win32K | 3 | 1 |
| Microsoft Office Visio | 2 | - |
| Role: Windows Hyper-V | 2 | - |
| Windows AppContainer | 2 | - |
| Windows Fast FAT Driver | 2 | - |
| Windows Kernel | 2 | - |
| Windows Print Spooler Components | 2 | - |
| .NET Core & Visual Studio | 1 | - |
| Active Directory Federation Services | 1 | - |
| Console Window Host | 1 | - |
| Microsoft Devices | 1 | - |
| Microsoft Edge (Chromium-based) | 1 | - |
| Microsoft Graphics Component | 1 | - |
| Microsoft Intune | 1 | - |
| Microsoft Office Word | 1 | - |
| Rich Text Edit Control | 1 | - |
| Role: DNS Server | 1 | - |
| Role: Windows AD FS Server | 1 | - |
| Role: Windows Active Directory Server | 1 | - |
| System Center | 1 | - |
| Windows AppX Deployment Service | 1 | - |
| Windows Bind Filter Driver | 1 | - |
| Windows Cloud Files Mini Filter Driver | 1 | - |
| Windows DWM Core Library | 1 | - |
| Windows Desktop Bridge | 1 | - |
| Windows DirectX | 1 | - |
| Windows Event Tracing | 1 | - |
| Windows HTTP.sys | 1 | - |
| Windows Installer | 1 | - |
| Windows MSHTML Platform | 1 | - |
| Windows Nearby Sharing | 1 | - |
| Windows Network Address Translation (NAT) | 1 | - |
| Windows Remote Procedure Call Runtime | 1 | - |
| Windows TCP/IP | 1 | - |
| Windows Text Shaping | 1 | - |
| Windows exFAT File System | 1 | - |