Latest Security Advisories & Notable Vulnerabilities
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are some of the CVEs included in the November 2021 release:
- CVE-2021-42298 - Microsoft Defender Remote Code Execution Vulnerability
CVSS:3.1 7.8/6.8
- CVE-2021-40461 - Windows Hyper-V Remote Code Execution Vulnerability
CVSS:3.1 8.0/7.0
- CVE-2021-38666 - Remote Desktop Client Remote Code Execution Vulnerability
CVSS:3.1 8.8/7.7
- CVE-2021-26443 - Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVSS:3.1 9.0/7.8
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are some of the CVEs included in the October 2021 release:
- CVE-2021-38672 - Windows Hyper-V Remote Code Execution Vulnerability
CVSS:3.1 8.0/7.0
- CVE-2021-40461 - Windows Hyper-V Remote Code Execution Vulnerability
CVSS:3.1 8.0/7.0
- CVE-2021-40486 - Microsoft Word Remote Code Execution Vulnerability
CVSS:3.0 7.8/6.8
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload covers in the September 2021 release:
- CVE-2021-26435 - Windows Scripting Engine Memory Corruption Vulnerability
CVSS:3.0 8.1/7.1
- CVE-2021-36965 - Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
CVSS:3.0 8.8/7.7
- CVE-2021-38647 - Open Management Infrastructure Remote Code Execution Vulnerability
CVSS:3.0 9.8/8.5
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload covers in the July 2021 release:
- CVE-2021-34480 - Scripting Engine Memory Corruption Vulnerability
CVSS:3.0 6.8/5.9
- CVE-2021-26432 - Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVSS:3.0 9.8/8.5
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload covers in the July 2021 release:
- CVE-2021-34527 - Windows Print Spooler Remote Code Execution Vulnerability
CVSS:3.0 8.8/8.2
- CVE-2021-34448 - Scripting Engine Memory Corruption Vulnerability
CVSS:3.0 6.8/6.3
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below is the CVE that Trend Micro Cloud One Workload covers in the June 2021 release:
- CVE-2021-31959 - Scripting Engine Memory Corruption Vulnerability
CVSS:3.0 6.4/5.6
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload covers in the May 2021 release:
- CVE-2021-26419 - Scripting Engine Memory Corruption Vulnerability
CVSS:3.0 7.5/6.7
- CVE-2021-31181 - Microsoft SharePoint Remote Code Execution Vulnerability
CVSS:3.0 8.8/7.7
- CVE-2021-31166 - HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS:3.0 9.8/8.5
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload and Vulnerability Protection cover in the April 2021 release:
- CVE-2021-28310 - Win32k Elevation of Privilege Vulnerability
CVSS:3.0 7.8/7.2
- CVE-2021-28325 - Windows SMB Information Disclosure Vulnerability
CVSS:3.0 6.5/5.7
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. This update is of critical importance as it directly addresses the vulnerabilities that have been exploited by a threat actor group known as Hafnium. Microsoft acknowledged there are attacks based on these vulnerabilities.
Following the new patch information format, below are the CVEs that Trend Micro Cloud One Workload covers in the March 2021 release:
- CVE-2021-26855 - Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS:3.0 9.1/8.4
- CVE-2021-26411 - Internet Explorer Memory Corruption Vulnerability
CVSS:3.0 8.8/7.9
- CVE-2021-26877 - Windows DNS Server Remote Code Execution Vulnerability
CVSS:3.0 9.8/8.5
- CVE-2021-26897 - Windows DNS Server Remote Code Execution Vulnerability
CVSS:3.0 9.8/8.5
- CVE-2021-27076 - Windows DNS Server Remote Code Execution Vulnerability
CVSS:3.0 8.8/7.7
In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Deep Security covers in the February 2021 release:
- CVE-2021-24078 - Windows DNS Server Remote Code Execution Vulnerability
CVSS:3.0 9.8/8.5
- CVE-2021-24072 - Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS:3.0 8.8/7.7