Lucene search

K
hiveproHive ProHIVEPRO:846AE370AF77A81941A26AF3FC365026
HistoryNov 10, 2021 - 11:20 a.m.

Microsoft’s Patch Tuesday Security Updates for November

2021-11-1011:20:36
Hive Pro
www.hivepro.com
84

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

THREAT LEVEL: Red.

For a detailed advisory, download the pdf file here.

For the month of November, Microsoft has reported a total of 55 vulnerabilities, 6(CVE-2021-38666, CVE-2021-26443, CVE-2021-42279, CVE-2021-42298, CVE-2021-42316, CVE-2021-3711) of which have been rated critical. Four (CVE-2021-43208, CVE-2021-43209) of these vulnerabilities have been publicly known and two (CVE-2021-42292, CVE-2021-42321) of them have been exploited in the wild. Patches of all these vulnerabilities have been published by Microsoft. This Advisory only focuses on the important 12 vulnerabilities.

Vulnerability Details

Patch Link

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42292&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-43208&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-43209&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-38631&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-41371&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-38666&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26443&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42279&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42298&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42316&gt;

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-3711&gt;

References

<https://threatpost.com/microsoft-nov-patch-tuesday-fixes-six-zero-days-55-bugs/176143/&gt;

<https://www.zerodayinitiative.com/blog/2021/11/9/the-november-2021-security-update-review&gt;

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C