Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12221
HistoryJul 13, 2021 - 12:00 a.m.

KLA12221 Multiple vulnerabillities in Microsoft Windows

2021-07-1300:00:00
Kaspersky Lab
threats.kaspersky.com
44

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.958 High

EPSS

Percentile

99.4%

JSON

Detect date:

07/13/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows Server 2012
Windows RT 8.1
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 for 32-bit Systems
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for x64-based systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 21H1 for x64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows Server, version 1909 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows Server 2012 (Server Core installation)
Windows 10 Version 21H1 for 32-bit Systems
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012 R2
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 20H2 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server, version 2004 (Server Core installation)
HEVC Video Extensions
Windows Server, version 20H2 (Server Core Installation)
Windows 10 Version 1809 for x64-based Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-33758
CVE-2021-34497
CVE-2021-34488
CVE-2021-33775
CVE-2021-34490
CVE-2021-34444
CVE-2021-33781
CVE-2021-34491
CVE-2021-34504
CVE-2021-34456
CVE-2021-33774
CVE-2021-34513
CVE-2021-33788
CVE-2021-33771
CVE-2021-34494
CVE-2021-34503
CVE-2021-34446
CVE-2021-33760
CVE-2021-31183
CVE-2021-34510
CVE-2021-34493
CVE-2021-33761
CVE-2021-34459
CVE-2021-33744
CVE-2021-33755
CVE-2021-33745
CVE-2021-34440
CVE-2021-33749
CVE-2021-33764
CVE-2021-33743
CVE-2021-33757
CVE-2021-34489
CVE-2021-34441
CVE-2021-33784
CVE-2021-34525
CVE-2021-34507
CVE-2021-34516
CVE-2021-31947
CVE-2021-33780
CVE-2021-34476
CVE-2021-34511
CVE-2021-34458
CVE-2021-34500
CVE-2021-34512
CVE-2021-34496
CVE-2021-34460
CVE-2021-33783
CVE-2021-34492
CVE-2021-33763
CVE-2021-33785
CVE-2021-34442
CVE-2021-33765
CVE-2021-34450
CVE-2021-33786
CVE-2021-34461
CVE-2021-34462
CVE-2021-34466
CVE-2021-33754
CVE-2021-33752
CVE-2021-33750
CVE-2021-33776
CVE-2021-33759
CVE-2021-33779
CVE-2021-31979
CVE-2021-33756
CVE-2021-34509
CVE-2021-34508
CVE-2021-33751
CVE-2021-34449
CVE-2021-33777
CVE-2021-34448
CVE-2021-34499
CVE-2021-34438
CVE-2021-34457
CVE-2021-34445
CVE-2021-31961
CVE-2021-34455
CVE-2021-33772
CVE-2021-33746
CVE-2021-34498
CVE-2021-34447
CVE-2021-34521
CVE-2021-33778
CVE-2021-34439
CVE-2021-33740
CVE-2021-33782
CVE-2021-34514
CVE-2021-34454
CVE-2021-33773

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2021-337587.7Critical
CVE-2021-344976.8High
CVE-2021-344887.8Critical
CVE-2021-337757.8Critical
CVE-2021-344907.5Critical
CVE-2021-344446.5High
CVE-2021-337818.1Critical
CVE-2021-344915.5High
CVE-2021-345047.8Critical
CVE-2021-344567.8Critical
CVE-2021-337747.0High
CVE-2021-345137.8Critical
CVE-2021-337887.5Critical
CVE-2021-337717.8Critical
CVE-2021-344948.8Critical
CVE-2021-345037.8Critical
CVE-2021-344468.0Critical
CVE-2021-337605.5High
CVE-2021-311837.5Critical
CVE-2021-345107.8Critical
CVE-2021-344936.7High
CVE-2021-337617.8Critical
CVE-2021-344597.8Critical
CVE-2021-337445.3High
CVE-2021-337556.3High
CVE-2021-337456.5High
CVE-2021-344405.5High
CVE-2021-337498.8Critical
CVE-2021-337645.9High
CVE-2021-337437.8Critical
CVE-2021-337575.3High
CVE-2021-344897.8Critical
CVE-2021-344417.8Critical
CVE-2021-337847.8Critical
CVE-2021-345258.8Critical
CVE-2021-345076.5High
CVE-2021-345167.8Critical
CVE-2021-319477.8Critical
CVE-2021-337808.8Critical
CVE-2021-344767.5Critical
CVE-2021-345117.8Critical
CVE-2021-344589.9Critical
CVE-2021-345006.3High
CVE-2021-345127.8Critical
CVE-2021-344965.5High
CVE-2021-344607.8Critical
CVE-2021-337836.5High
CVE-2021-344928.1Critical
CVE-2021-337635.5High
CVE-2021-337857.5Critical
CVE-2021-344428.8Critical
CVE-2021-337656.2High
CVE-2021-344508.5Critical
CVE-2021-337868.1Critical
CVE-2021-344617.8Critical
CVE-2021-344627.0High
CVE-2021-344665.7High
CVE-2021-337548.0Critical
CVE-2021-337528.8Critical
CVE-2021-337508.8Critical
CVE-2021-337767.8Critical
CVE-2021-337597.8Critical
CVE-2021-337798.1Critical
CVE-2021-319797.8Critical
CVE-2021-337568.8Critical
CVE-2021-345095.5High
CVE-2021-345088.8Critical
CVE-2021-337517.0High
CVE-2021-344497.0High
CVE-2021-337777.8Critical
CVE-2021-344486.8High
CVE-2021-344996.5High
CVE-2021-344387.8Critical
CVE-2021-344575.5High
CVE-2021-344457.8Critical
CVE-2021-319616.1High
CVE-2021-344557.8Critical
CVE-2021-337727.5Critical
CVE-2021-337468.0Critical
CVE-2021-344987.8Critical
CVE-2021-344476.8High
CVE-2021-345217.8Critical
CVE-2021-337787.8Critical
CVE-2021-344397.8Critical
CVE-2021-337407.8Critical
CVE-2021-337825.5High
CVE-2021-345147.8Critical
CVE-2021-344545.5High
CVE-2021-337737.8Critical

KB list:

5004238
5004302
5004294
5004237
5004244
5004298
5004285
5004249
5004245
5005563
5006674
5006669
5010419
5010395
5010358
5010359
5010392
5010412

Microsoft official advisories:

References

Related

nessus 12
mskb 14
kaspersky 1
rapid7blog 1
avleonov 1
thn 2
attackerkb 3
malwarebytes 1
krebs 1
threatpost 4
mmpc 2
schneier 1
qualysblog 1
mssecure 2
prion 46
cnvd 32
cve 37
mscve 35
zdi 2
checkpoint_advisories 1
nessus
nessus
KB5004244: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2021)
2021-07-13 00:00:00
KB5004238: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2021)
2021-07-13 00:00:00
KB5004245: Windows 10 1909 Security Update (July 2021)
2021-07-13 00:00:00
mskb
mskb
July 13, 2021—KB5004245 (OS Build 18363.1679)
2021-07-13 07:00:00
July 13, 2021—KB5004237 (OS Builds 19041.1110, 19042.1110, and 19043.1110)
2021-07-13 07:00:00
July 13, 2021—KB5004285 (Security-only update)
2021-07-13 07:00:00
kaspersky
kaspersky
KLA12226 Multiple vulnerabilities in Microsoft Products (ESU)
2021-07-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - July 2021
2021-07-13 20:56:26
avleonov
avleonov
Vulristics Microsoft Patch Tuesday July 2021: Zero-days EoP in Kernel and RCE in Scripting Engine, RCEs in Kernel, DNS Server, Exchange and Hyper-V
2021-07-14 21:00:27
thn
thn
Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero-Days
2021-07-14 05:03:00
Israeli Firm Helped Governments Target Journalists, Activists with 0-Days and Spyware
2021-07-16 11:13:00
attackerkb
attackerkb
CVE-2021-33771
2021-07-14 00:00:00
CVE-2021-34514
2021-07-14 00:00:00
CVE-2021-31979
2021-07-14 00:00:00
malwarebytes
malwarebytes
Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday
2021-07-14 11:56:06
krebs
krebs
Microsoft Patch Tuesday, July 2021 Edition
2021-07-13 21:41:47
threatpost
threatpost
Microsoft Crushes 116 Bugs, Three Actively Exploited
2021-07-13 21:26:27
Windows 0-Days Used Against Dissidents in Israeli Broker’s Spyware
2021-07-16 15:55:57
‘CatalanGate’ Spyware Infections Tied to NSO Group
2022-04-19 16:04:33
mmpc
mmpc
Protecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware
2021-07-15 15:21:02
Microsoft Digital Defense Report shares new insights on nation-state attacks
2021-10-25 16:00:17
schneier
schneier
Candiru: Another Cyberweapons Arms Manufacturer
2021-07-19 15:54:58
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday (July 2021) – Microsoft 117 Vulnerabilities with 13 Critical, Adobe 26 Vulnerabilities
2021-07-13 19:49:37
mssecure
mssecure
Microsoft Digital Defense Report shares new insights on nation-state attacks
2021-10-25 16:00:17
Protecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware
2021-07-15 15:21:02
prion
prion
Remote code execution
2021-07-14 18:15:00
Denial of service
2021-07-14 18:15:00
Privilege escalation
2021-07-14 18:15:00
cnvd
cnvd
Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2021-70130)
2021-07-16 00:00:00
Microsoft Windows Server Security Feature Bypass Vulnerability (CNVD-2021-54417)
2021-07-16 00:00:00
Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66061)
2021-07-15 00:00:00
cve
cve
CVE-2021-33774
2021-07-14 18:15:00
CVE-2021-31961
2021-07-14 18:15:00
CVE-2021-34489
2021-07-14 18:15:00
mscve
mscve
Windows Kernel Remote Code Execution Vulnerability
2021-07-13 07:00:00
DirectWrite Remote Code Execution Vulnerability
2021-07-13 07:00:00
Windows Event Tracing Elevation of Privilege Vulnerability
2021-07-13 07:00:00
zdi
zdi
(Pwn2Own) Microsoft Windows spaceport Out-Of-Bounds Write Privilege Escalation Vulnerability
2021-07-19 00:00:00
(Pwn2Own) Microsoft Windows storport Integer Overflow Privilege Escalation Vulnerability
2021-08-18 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Win32k Elevation of Privilege (CVE-2021-34449)
2021-07-13 00:00:00

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.958 High

EPSS

Percentile

99.4%

JSON
Related for KLA12221
nessus12mskb14kaspersky1rapid7blog1avleonov1thn2attackerkb3malwarebytes1krebs1threatpost4mmpc2schneier1qualysblog1mssecure2prion46cnvd32cve37mscve35zdi2checkpoint_advisories1