CyberWatch Newsroom Live Intel

Critical CVE-2021-37973 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Google Chromium Portals Use-After-Free Vulnerability

Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.

Fix: Apply updates per vendor instructions.

Chromium Portals

Advisory

Critical CVE-2021-36955 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-36948 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-36942 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-36742 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Trend Micro Multiple Products Improper Input Validation Vulnerability

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Apex One, Apex One as a Service, and Worry-Free Business Security

Advisory

Critical CVE-2021-36741 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Trend Micro Multiple Products Improper Input Validation Vulnerability

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.

Fix: Apply updates per vendor instructions.

Apex One, Apex One as a Service, and Worry-Free Business Security

Advisory

Critical CVE-2021-35464 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).

Fix: Apply updates per vendor instructions.

Access Management (AM)

Advisory

Critical CVE-2021-35395 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Realtek AP-Router SDK Buffer Overflow Vulnerability

Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).

Fix: Apply updates per vendor instructions.

AP-Router SDK

Advisory

Critical CVE-2021-35211 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

Fix: Apply updates per vendor instructions.

Serv-U

Advisory

Critical CVE-2021-34527 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-34523 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Exchange Server

Advisory

Critical CVE-2021-34473 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

Fix: Apply updates per vendor instructions.

Exchange Server

Advisory

Critical CVE-2021-34448 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-33771 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-33742 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-33739 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-31979 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-31956 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows NTFS Privilege Escalation Vulnerability

Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-31955 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

Fix: Apply updates per vendor instructions.

Windows

Advisory

Critical CVE-2021-31755 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Tenda AC11 Router Stack Buffer Overflow Vulnerability

Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.

Fix: Apply updates per vendor instructions.

AC11 Router

Advisory

Critical CVE-2021-31207 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

Fix: Apply updates per vendor instructions.

Exchange Server

Advisory

Critical CVE-2021-31201 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Enhanced Cryptographic Provider

Advisory

Critical CVE-2021-31199 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Fix: Apply updates per vendor instructions.

Enhanced Cryptographic Provider

Advisory

Critical CVE-2021-30869 CISA KEV

2021-11-03 CISA KEV

[CISA KEV] Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.

Fix: Apply updates per vendor instructions.

iOS, iPadOS, and macOS

Advisory