CVE-2021-38672 affects Windows 11 and Windows Server 2022 CVE-2021-40461 impacts both Windows 11 and Windows 10 systems, as well as Server versions.īut as usual, some of the more concerning security weaknesses addressed this month earned Microsoft’s slightly less dire “ important” designation, which applies to a vulnerability “whose exploitation could result in compromise of the confidentiality, integrity, or availability of user data, or of the integrity or availability of processing resources.” One of the critical bugs concerns Microsoft Word, and two others are remote code execution flaws in Windows Hyper-V, the virtualization component built into Windows.
Three of the weaknesses Microsoft addressed today tackle vulnerabilities rated “ critical,” meaning that malware or miscreants could exploit them to gain complete, remote control over vulnerable systems - with little or no help from targets. If you own an iPad or iPhone - or any other Apple device - please make sure it’s up to date with the latest security patches. Lawrence Abrams of Bleeping Computer writes that the flaw could be used to steal data or install malware, and that soon after Apple patched the bug security researcher Saar Amar published a technical writeup and proof-of-concept exploit derived from reverse engineering Apple’s patch.Ībrams said the list of impacted Apple devices is quite extensive, affecting older and newer models. Separately, Apple has released updates for iOS and iPadOS to address a flaw that is being actively attacked.įirstly, Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability (CVE-2021-30883) that is being leveraged in active attacks targeting iPhone and iPad users.
This month’s Patch Tuesday also includes security fixes for the newly released Windows 11 operating system. Microsoft today issued updates to plug more than 70 security holes in its Windows operating systems and other software, including one vulnerability that is already being exploited.
0 kommentar(er)
