9 June 2021

Microsoft fixes 6 zero-days exploited in the wild


Microsoft fixes 6 zero-days exploited in the wild

Microsoft has released a new batch of security updates for Windows and other supported software that fix a total of 50 security vulnerabilities including six zero-day issues that are said to be exploited in real-world attacks.

The six zero-days are as follows:

CVE-2021-31955 - Windows Kernel Information Disclosure Vulnerability

CVE-2021-31956 - Windows NTFS Elevation of Privilege Vulnerability

CVE-2021-33739 - Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2021-33742 - Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2021-31199 - Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVE-2021-31201 - Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

While Microsoft did not share additional details on vulnerabilities or the nature of attacks exploiting them, researchers from Kaspersky shed some light on a couple of bugs, namely CVE-2021-31955 and CVE-2021-31956. According to the cybersecurity firm, a new threat actor named PuzzleMaker has been observed leveraging these flaws as well as a Google Chrome zero-day exploit chain in highly targeted attacks against companies across the world.

June’s Patch Tuesday release also patches a number of high-risk vulnerabilities affecting Microsoft Defender, Exel, Microsoft Kerberos AppContainer, Microsoft VP9 Video Extensions, Microsoft Office Graphics, and other products.


Back to the list

Latest Posts

NSA publishes guidance on how to secure wireless devices in public settings

NSA publishes guidance on how to secure wireless devices in public settings

The agency advises to avoid connecting to public Wi-Fi, and use a corporate or personal Wi-Fi hotspot with strong authentication and encryption whenever possible.
30 July 2021
Death Kitty ransomware reportedly behind the attack on South African ports

Death Kitty ransomware reportedly behind the attack on South African ports

The attackers claim they encrypted the company’s files, including 1TB of personal data, financial reports and other documents.
30 July 2021
New destructive wiper malware linked to recent Iranian railway attack

New destructive wiper malware linked to recent Iranian railway attack

The Meteor wiper was developed in the past three years and seems to be designed for reuse in multiple campaigns.
30 July 2021