{"id":8638,"date":"2021-07-16T05:41:13","date_gmt":"2021-07-16T12:41:13","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8638"},"modified":"2023-03-03T14:31:53","modified_gmt":"2023-03-03T21:31:53","slug":"july-microsoft-patches-117-security-vulnerabilities","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/july-microsoft-patches-117-security-vulnerabilities\/","title":{"rendered":"July: Microsoft Patches 117 Security Vulnerabilities"},"content":{"rendered":"<p dir=\"ltr\">Microsoft patched 117 unique security vulnerabilities this July. We analyzed all 117\u00a0 weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority.<\/p>\n<h2 dir=\"ltr\"><img decoding=\"async\" style=\"width: 800px; height: 495px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-1-2.png\" alt=\"\" \/><br \/>\n<strong>Microsoft Patches: Overview<\/strong><\/h2>\n<p dir=\"ltr\">This July, Microsoft patched 117 vulnerabilities discovered earlier in 2021, including six publicly disclosed bugs.<\/p>\n<p dir=\"ltr\">Of these 117, Microsoft has fixed key vulnerabilities, including the following:<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">43 CVEs classified as RCE bugs<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">32 CVEs with privilege escalation capabilities<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">12 CVEs linked to denial of service (DoS)<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">14 CVEs with information disclosure issues<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">8 CVEs associated with a security feature bypass<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">7 CVEs with spoofing flaws<\/p>\n<\/li>\n<\/ul>\n<h2><strong>Zero-Day Vulnerabilities<\/strong><\/h2>\n<p dir=\"ltr\">Microsoft had released patches for nine zero-day vulnerabilities this month (CVE-2021-34492, CVE-2021-34523, CVE-2021-34473, CVE-2021-33779, CVE-2021-33781, CVE-2021-34527, CVE-2021-33771, CVE-2021-34448, CVE-2021-31979). Currently, six of these CVEs have publicly known exploits, and four are under active attack and must be prioritized for patching.<\/p>\n<h2><strong>RCE\/PE Vulnerabilities<\/strong><\/h2>\n<p dir=\"ltr\">The most notable update is Microsoft&#8217;s patch for the &#8220;<a href=\"https:\/\/cybersecurityworks.com\/blog\/vulnerabilities\/how-to-detect-cve-2021-34527.html\">PrintNightmare&#8221; vulnerability<\/a>\u201d (<a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-34527\">CVE-2021-34527<\/a>) in its print spooler function, which may allow an attacker to execute remote malware. CISA had also<a href=\"https:\/\/us-cert.cisa.gov\/ncas\/current-activity\/2021\/06\/30\/printnightmare-critical-windows-print-spooler-vulnerability\"> issued<\/a> an alert to this vulnerability. Microsoft attempted to patch this flaw with an out-of-band version earlier this month, but the flaw is still considered to be exploitable.<\/p>\n<p dir=\"ltr\">Read more: <a href=\"https:\/\/cybersecurityworks.com\/blog\/vulnerabilities\/how-to-detect-cve-2021-34527.html\">How to detect CVE-2021-34527?<\/a><\/p>\n<p dir=\"ltr\">In addition, Microsoft stated seven vulnerabilities ( <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-34520\">CVE-2021-34520<\/a>, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-34467\">CVE-2021-34467<\/a>, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-34468\">CVE-2021-34468<\/a>, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-34449\">CVE-2021-34449<\/a>, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-33780\">CVE-2021-33780<\/a>, <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-33771\">CVE-2021-33771<\/a>, and <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-31979\">CVE-2021-31979<\/a>) are more likely to be exploited. Of these seven, four CVEs are RCE bugs and three with privilege escalation capabilities.<\/p>\n<p>Microsoft has patched six serious vulnerabilities in Exchange Server where CVE-2021-34473 and CVE-2021-34523 had previously been addressed in <a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/csw-patch-watch\/april-microsoft-patches-108-security-vulnerabilities.html\">Microsoft&#8217;s April security update<\/a> and discovered by National Security Agency (NSA). Considering back-to-back updates for the past months, these two vulnerabilities should be monitored closely and fixed immediately.<\/p>\n<h2><strong>Severity Scores<\/strong><\/h2>\n<p dir=\"ltr\">Notably, 13 vulnerabilities have been marked critical that are classified as RCE bugs.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 448px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-2-2.png\" alt=\"\" \/><\/p>\n<h2><strong>Product Analysis<\/strong><\/h2>\n<p>In this round-up, patches were issued for 16 products. Windows\u2019 Server accounted for 71 vulnerabilities, of which 19 were categorized with privilege escalation and 21 with RCE capabilities.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 800px; height: 356px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-3-1.png\" alt=\"\" \/><br \/>\n<iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr4ZIAZOhNbexy2k?backgroundColor=cyan&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><strong>Table: Microsoft July Security Update 2021<\/strong><\/p>\n<p>As cyber threats are increasingly targeting vulnerable systems, we recommend Microsoft users to deploy the available updates as quickly as possible.<\/p>\n<p dir=\"ltr\">CSW\u2019s Patch Watch helps organizations and their overworked security teams patch the most critical vulnerabilities and improve their security posture.\u00a0 <a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/\">Get on our mailing list for more information about emerging threats.<\/a><\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><span style=\"font-size: 18px;\"><strong>Does your organization have a patch management program? <a href=\"https:\/\/cybersecurityworks.com\/get-quote.php\">Talk to CSW experts to prioritize weaknesses that need immediate attention!<\/a><\/strong><\/span><\/p>\n<p dir=\"ltr\" style=\"text-align: center;\">\n","protected":false},"excerpt":{"rendered":"<p>Microsoft patched 117 unique security vulnerabilities this July. We analyzed all 117\u00a0 weaknesses and spotlighted the most important vulnerabilities that ought to be fixed on priority. Microsoft Patches: Overview This July, Microsoft patched 117 vulnerabilities discovered earlier in 2021, including six publicly disclosed bugs. Of these 117, Microsoft has fixed key vulnerabilities, including the following: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14440,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[290],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8638"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14440"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8638"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}