9 June 2021

Microsoft fixes 6 zero-days exploited in the wild


Microsoft fixes 6 zero-days exploited in the wild

Microsoft has released a new batch of security updates for Windows and other supported software that fix a total of 50 security vulnerabilities including six zero-day issues that are said to be exploited in real-world attacks.

The six zero-days are as follows:

CVE-2021-31955 - Windows Kernel Information Disclosure Vulnerability

CVE-2021-31956 - Windows NTFS Elevation of Privilege Vulnerability

CVE-2021-33739 - Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2021-33742 - Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2021-31199 - Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVE-2021-31201 - Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

While Microsoft did not share additional details on vulnerabilities or the nature of attacks exploiting them, researchers from Kaspersky shed some light on a couple of bugs, namely CVE-2021-31955 and CVE-2021-31956. According to the cybersecurity firm, a new threat actor named PuzzleMaker has been observed leveraging these flaws as well as a Google Chrome zero-day exploit chain in highly targeted attacks against companies across the world.

June’s Patch Tuesday release also patches a number of high-risk vulnerabilities affecting Microsoft Defender, Exel, Microsoft Kerberos AppContainer, Microsoft VP9 Video Extensions, Microsoft Office Graphics, and other products.


Back to the list

Latest Posts

Google fixes yet another Chrome 0Day exploited in the wild

Google fixes yet another Chrome 0Day exploited in the wild

In addition to CVE-2021-30554, Chrome 91.0.4472.114 resolves three high-risk vulnerabilities that allow a remote attacker to compromise a vulnerable system.
18 June 2021
Researchers uncover a 6-year Iranian domestic cyber-espionage campaign

Researchers uncover a 6-year Iranian domestic cyber-espionage campaign

The threat actor deployed the MarkiRAT malware able to steal data and hijack the infected user’s Chrome browser and their Telegram app.
17 June 2021
DarkSide affiliates shift to software supply chain attacks

DarkSide affiliates shift to software supply chain attacks

UNC2465 compromised a website of a CCTV camera vendor and planted malware in the Dahua SmartPSS Windows app.
17 June 2021