Critical Vulnerabilities revealed in Microsoft’s Patch Tuesday

THREAT LEVEL: Red.

For a detailed advisory, download the pdf file here.

Multiple vulnerabilities have been patched by Microsoft in August 2021 Patch Tuesday. Three of them have been labeled as zero-day vulnerabilities (CVE-2021-36936, CVE-2021-36942, and CVE-2021-36948). One of them (CVE-2021-36948) has already been exploited in the wild. The attacker is yet to be identified. Microsoft has classified six vulnerabilities as critical, and patches for all of them are now available.

Vulnerability Details

Patch Links

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-36948&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34530&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34534&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-36936&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26432&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34480&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34535&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26424&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-36942&gt;

References

<https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2021-patch-tuesday-fixes-3-zero-days-44-flaws/&gt;