Microsoft Patch Tuesday, December 2021 Edition

🗓️ 14 Dec 2021 22:23:44Reported by BrianKrebsType

Microsoft, Adobe, Google security updates. Log4j 0-day exploit in Java library, actively exploited. Easy exploit code. Cloud services vulnerable. State actors exploiting log4j vulnerability. CISA, FBI, NSA advisory

Reporter	Title	Published	Views	Family All 155
ATTACKERKB	CVE-2021-43905	15 Dec 202115:15	–	attackerkb
ATTACKERKB	CVE-2021-43883	15 Dec 202115:15	–	attackerkb
ATTACKERKB	CVE-2021-43890	15 Dec 202115:15	–	attackerkb
ATTACKERKB	CVE-2021-41379	10 Nov 202100:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday December 2021	16 Dec 202120:53	–	avleonov
BDU FSTEC	The vulnerability of the Windows Installer component of the Windows operating system, which allows a hacker to increase their privileges	18 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Installer installer service on the Windows operating system allows a hacker to increase their privileges.	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office App package, related to improper code generation management, allows a perpetrator to execute arbitrary code.	28 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft App Installer, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.	28 Mar 202200:00	–	bdu_fstec
Circl	CVE-2021-41379	22 Nov 202108:37	–	circl

14 Dec 2021 22:23Current

0.1Low risk

Vulners AI Score0.1

EPSS0.19381