{"id":8648,"date":"2021-07-01T05:53:58","date_gmt":"2021-07-01T12:53:58","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8648"},"modified":"2023-03-03T14:33:00","modified_gmt":"2023-03-03T21:33:00","slug":"june-15-csw-patch-watch-security-updates","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/june-15-csw-patch-watch-security-updates\/","title":{"rendered":"June 15: CSW Patch Watch &#038; Security Updates"},"content":{"rendered":"<h2 dir=\"ltr\"><img decoding=\"async\" style=\"width: 800px; height: 491px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-issue-15.png\" alt=\"\" \/><\/h2>\n<h2 dir=\"ltr\"><strong>Highlights of Patch Watch Issue 15<\/strong><\/h2>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Weaponized CVEs\">20 vendors released security patches for 337 vulnerabilities, including 23 CVEs with known exploits.<\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Old CVEs\">72 old vulnerabilities have been patched.<\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Microsoft June Patches\">Microsoft plugs 49 vulnerabilities this June.<\/a><\/p>\n<\/li>\n<\/ul>\n<h2><strong><a id=\"Weaponized CVEs\" name=\"Weaponized CVEs\"><\/a>Weaponized Vulnerabilities<\/strong><\/h2>\n<p dir=\"ltr\">We have 23 vulnerabilities that are known exploits. Here are our findings \u2013<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">14 CVEs are associated with RCE bugs.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs with PE capabilities.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">3 CVEs are Webapp exploits and Shellcode.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">1 CVE is Denial of Service.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">8 CVEs are rated as high, 10 are medium, and 4 of low severity.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><a href=\"#Airtable\">Click here for our analysis and download patches.<\/a><\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 338px;\" src=\"\/wp-content\/uploads\/2015\/11\/weaponized-cves.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><a id=\"Old CVEs\" name=\"Old CVEs\"><\/a><strong>Old Vulnerability<\/strong><\/h2>\n<p dir=\"ltr\">72 old vulnerabilities have been fixed, ranging from the year 2018 &#8211; 2019.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">12 CVEs have publicly known exploits, in which 10 of them are classified as RCE bugs.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs are Webapp and shellcode exploit.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">11 CVEs are rated as high, 33 are medium, and 16 are of low severity.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><a href=\"#Airtable\">Click here for our analysis and download patches.<\/a><\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 448px;\" src=\"\/wp-content\/uploads\/2015\/11\/old-cves.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><a id=\"Microsoft June Patches\" name=\"Microsoft June Patches\"><\/a><strong>Microsoft June Patches 2021<\/strong><\/h2>\n<p dir=\"ltr\">Microsoft fixed 49 security vulnerabilities, including seven zero-days.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">16 CVEs classified as RCE bugs.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">13 CVEs with privilege escalation capabilities.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">5 CVEs are critical, and 44 are rated as important severity.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/csw-patch-watch\/june-microsoft-patches-49-security-vulnerabilities.html\">Check out our Microsoft patch watch edition here.<\/a><\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 504px;\" src=\"\/wp-content\/uploads\/2015\/11\/microsoft-june-patches-1.png\" alt=\"\" \/><\/p>\n<p><a id=\"Airtable\" name=\"Airtable\"><\/a><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrrfRsLHEM9mEqoi?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: June Security Patches 2021\u00a0<\/strong><\/p>\n<p dir=\"ltr\">Security patches are vital in terms of new functionality and bug fixes. Hence, we recommend employees regularly update their devices and keep your organization protected from malefactors and ransomware threats.<\/p>\n<p>CSW\u2019s Patch Watch helps organizations and their overworked security teams patch the most critical vulnerabilities and improve their security posture.\u00a0 <a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/\">Get on our mailing list for more information about emerging threats.<\/a><\/p>\n<p dir=\"ltr\">\n<p dir=\"ltr\" style=\"text-align: center;\"><strong><span style=\"font-size: 20px;\">Protect your organization with Attack Surface Management as a Service. <a href=\"https:\/\/cybersecurityworks.com\/get-quote.php\">Talk to us<\/a>.<\/span><\/strong><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Highlights of Patch Watch Issue 15 20 vendors released security patches for 337 vulnerabilities, including 23 CVEs with known exploits. 72 old vulnerabilities have been patched. Microsoft plugs 49 vulnerabilities this June. Weaponized Vulnerabilities We have 23 vulnerabilities that are known exploits. Here are our findings \u2013 14 CVEs are associated with RCE bugs. 2 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8648"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8648"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}