Summer is officially here and with it June's Patch Tuesday. This is a surprisingly light month with only 49 CVEs being patched and only five of those rated as "Critical". The list of "Critical" includes a Remote Code Execution (RCE) Microsoft's anti-malware software, Defender. It's always a double hit when the software meant to protect your system ends up being a threat that can cause compromise. In addition, you'll find RCEs in the MS Scripting Engine, SharePoint, and VP9 Video Extensions on that list. Most concerning is an RCE vulnerability in the MSHTML Platform (CVE-2021-33742). This CVE has been publicly disclosed and exploited in the wild in targeted campaigns.
Public exploitation exists on the list of CVEs rated as "Important" too. This includes Privilege Escalation bugs in DVM Core (CVE-2021-33739), the Microsoft Enhanced Cryptographic Provider (CVE-2021-31199, CVE-2021-31201), and Windows NTFS Drivers (CVE-2021-31956). Lastly, an Information Disclosure vulnerability in the Windows Kernel (CVE-2021-31955) has also been discovered exploited in the wild.
All in all, while a relatively light month for patching, several of these vulnerabilities are being actively exploited. Despite exploitation likely being limited and targeted, the very fact that exploitation is occurring already puts administrators behind in patching. So there's no time to spare. Get to patching and stay safe!
Critical
Microsoft Defender Remote Code Execution Vulnerability
CVE-2021-31985
Remote Code Execution
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-31963
Remote Code Execution
Scripting Engine Memory Corruption Vulnerability
CVE-2021-31959
Remote Code Execution
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2021-31967
Remote Code Execution
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-33742
Remote Code Execution
Important
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-31957
Denial of Service
3D Viewer Information Disclosure Vulnerability
CVE-2021-31944
Information Disclosure
3D Viewer Remote Code Execution Vulnerability
CVE-2021-31942, CVE-2021-31943
Remote Code Execution
Event Tracing for Windows Information Disclosure Vulnerability
CVE-2021-31972
Information Disclosure
Kerberos AppContainer Security Feature Bypass Vulnerability
CVE-2021-31962
Security Feature Bypass
Microsoft Defender Denial of Service Vulnerability
CVE-2021-31978
Denial of Service
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-33739
Elevation of Privilege
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31199, CVE-2021-31201
Elevation of Privilege
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31939
Remote Code Execution
Microsoft Intune Management Extension Remote Code Execution Vulnerability
CVE-2021-31980
Remote Code Execution
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-31940, CVE-2021-31941
Remote Code Execution
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2021-31949
Remote Code Execution
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-31965
Information Disclosure
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-26420, CVE-2021-31966
Remote Code Execution
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-31948, CVE-2021-31950, CVE-2021-31964
Spoofing
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
CVE-2021-31938
Elevation of Privilege
Paint 3D Remote Code Execution Vulnerability
CVE-2021-31945, CVE-2021-31946, CVE-2021-31983
Remote Code Execution
Server for NFS Denial of Service Vulnerability
CVE-2021-31974
Denial of Service
Server for NFS Information Disclosure Vulnerability
CVE-2021-31975, CVE-2021-31976
Information Disclosure
Windows Bind Filter Driver Information Disclosure Vulnerability
CVE-2021-31960
Information Disclosure
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2021-31969
Elevation of Privilege
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-31954
Elevation of Privilege
Windows DCOM Server Security Feature Bypass
CVE-2021-26414
Security Feature Bypass
Windows Filter Manager Elevation of Privilege Vulnerability
CVE-2021-31953
Elevation of Privilege
Windows GPSVC Elevation of Privilege Vulnerability
CVE-2021-31973
Elevation of Privilege
Windows HTML Platform Security Feature Bypass Vulnerability
CVE-2021-31971
Security Feature Bypass
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-31977
Denial of Service
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31951
Elevation of Privilege
Windows Kernel Information Disclosure Vulnerability
CVE-2021-31955
Information Disclosure
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2021-31952
Elevation of Privilege
Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-31956
Elevation of Privilege
Windows NTLM Elevation of Privilege Vulnerability
CVE-2021-31958
Elevation of Privilege
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-1675
Elevation of Privilege
Windows Remote Desktop Services Denial of Service Vulnerability
CVE-2021-31968
Denial of Service
Windows TCP/IP Driver Security Feature Bypass Vulnerability
CVE-2021-31970
Security Feature Bypass