Loading...
Blogs & Stories

SpiderLabs Blog

Attracting more than a half-million annual readers, this is the security community's go-to destination for technical breakdowns of the latest threats, critical vulnerability disclosures and cutting-edge research.

Patch Tuesday, June 2021

Summer is officially here and with it June's Patch Tuesday. This is a surprisingly light month with only 49 CVEs being patched and only five of those rated as "Critical". The list of "Critical" includes a Remote Code Execution (RCE) Microsoft's anti-malware software, Defender. It's always a double hit when the software meant to protect your system ends up being a threat that can cause compromise. In addition, you'll find RCEs in the MS Scripting Engine, SharePoint, and VP9 Video Extensions on that list. Most concerning is an RCE vulnerability in the MSHTML Platform (CVE-2021-33742). This CVE has been publicly disclosed and exploited in the wild in targeted campaigns.

Public exploitation exists on the list of CVEs rated as "Important" too. This includes Privilege Escalation bugs in DVM Core (CVE-2021-33739), the Microsoft Enhanced Cryptographic Provider (CVE-2021-31199, CVE-2021-31201), and Windows NTFS Drivers (CVE-2021-31956). Lastly, an Information Disclosure vulnerability in the Windows Kernel (CVE-2021-31955) has also been discovered exploited in the wild.

All in all, while a relatively light month for patching, several of these vulnerabilities are being actively exploited. Despite exploitation likely being limited and targeted, the very fact that exploitation is occurring already puts administrators behind in patching. So there's no time to spare. Get to patching and stay safe!

Critical

Microsoft Defender Remote Code Execution Vulnerability
CVE-2021-31985
Remote Code Execution

Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-31963
Remote Code Execution

Scripting Engine Memory Corruption Vulnerability
CVE-2021-31959
Remote Code Execution

VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2021-31967
Remote Code Execution

Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-33742
Remote Code Execution


Important

.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-31957
Denial of Service

3D Viewer Information Disclosure Vulnerability
CVE-2021-31944
Information Disclosure

3D Viewer Remote Code Execution Vulnerability
CVE-2021-31942, CVE-2021-31943
Remote Code Execution

Event Tracing for Windows Information Disclosure Vulnerability
CVE-2021-31972
Information Disclosure

Kerberos AppContainer Security Feature Bypass Vulnerability
CVE-2021-31962
Security Feature Bypass

Microsoft Defender Denial of Service Vulnerability
CVE-2021-31978
Denial of Service

Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-33739
Elevation of Privilege

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31199, CVE-2021-31201
Elevation of Privilege

Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31939
Remote Code Execution

Microsoft Intune Management Extension Remote Code Execution Vulnerability
CVE-2021-31980
Remote Code Execution

Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-31940, CVE-2021-31941
Remote Code Execution

Microsoft Outlook Remote Code Execution Vulnerability
CVE-2021-31949
Remote Code Execution

Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-31965
Information Disclosure

Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-26420, CVE-2021-31966
Remote Code Execution

Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-31948, CVE-2021-31950, CVE-2021-31964
Spoofing

Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
CVE-2021-31938
Elevation of Privilege

Paint 3D Remote Code Execution Vulnerability
CVE-2021-31945, CVE-2021-31946, CVE-2021-31983
Remote Code Execution

Server for NFS Denial of Service Vulnerability
CVE-2021-31974
Denial of Service

Server for NFS Information Disclosure Vulnerability
CVE-2021-31975, CVE-2021-31976
Information Disclosure

Windows Bind Filter Driver Information Disclosure Vulnerability
CVE-2021-31960
Information Disclosure

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2021-31969
Elevation of Privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-31954
Elevation of Privilege

Windows DCOM Server Security Feature Bypass
CVE-2021-26414
Security Feature Bypass

Windows Filter Manager Elevation of Privilege Vulnerability
CVE-2021-31953
Elevation of Privilege

Windows GPSVC Elevation of Privilege Vulnerability
CVE-2021-31973
Elevation of Privilege

Windows HTML Platform Security Feature Bypass Vulnerability
CVE-2021-31971
Security Feature Bypass

Windows Hyper-V Denial of Service Vulnerability
CVE-2021-31977
Denial of Service

Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31951
Elevation of Privilege

Windows Kernel Information Disclosure Vulnerability
CVE-2021-31955
Information Disclosure

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2021-31952
Elevation of Privilege

Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-31956
Elevation of Privilege

Windows NTLM Elevation of Privilege Vulnerability
CVE-2021-31958
Elevation of Privilege

Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-1675
Elevation of Privilege

Windows Remote Desktop Services Denial of Service Vulnerability
CVE-2021-31968
Denial of Service

Windows TCP/IP Driver Security Feature Bypass Vulnerability
CVE-2021-31970
Security Feature Bypass

Recent SpiderLabs Blog Posts