December 14, 2021—KB5008263 (Monthly Rollup)

None None...

December 14, 2021—KB5008255 (Security-only update)

None None...

December 14, 2021—KB5008277 (Monthly Rollup)

None None...

December 14, 2021—KB5008274 (Monthly Rollup)

None None...

December 14, 2021—KB5008271 (Security-only update)

None None...

December 14, 2021—KB5008285 (Security-only update)

None None...

December 14, 2021—KB5008282 (Security-only update)

None None...

Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Encrypting File System EFS with privilege permission and access control issues. The following products and editions are affected:Windows Server...

KB5008223: Windows Server 2022 Security Update (December 2021)

The Windows Server 2022 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-41333, CVE-2021-43207, CVE-2021-43223,...

Microsoft Windows TCP/IP component buffer error vulnerability

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A buffer error vulnerability exists in the Microsoft Windows TCP/IP component. The following products and editions are affected: Windows 10 Version 2004...

Microsoft Windows Update backend link vulnerability

Microsoft Windows Update is a program update service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Update Stack. The following products and versions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 1909 for 32-bit Systems,Window...

Microsoft Windows Update permission and access control issue vulnerabilities

Microsoft Windows Update is a program update service from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Update Stack with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 2004 for 32-bit Systems,Window...

Microsoft Message Queuing information leakage vulnerability

Microsoft Message Queuing is used to implement solutions for asynchronous and synchronous scenarios that require high performance. An information disclosure vulnerability exists in Microsoft Message Queuing. The following products and editions are affected:Windows 10 Version 21H2 for x64-based...

Microsoft Windows Remote Access Connection Manager Post-Installation Vulnerability

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet. If you disable this service, the VPN client application If you disable this service, VPN client applications will not...

Microsoft Local Security Authority Server information leakage vulnerability

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Local Security Authority Server lsasrv. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows SymCrypt resource management error vulnerability

Microsoft Windows SymCrypt is a U.S. Microsoft SymCrypt is the core cryptographic library currently used by Windows. A resource management error vulnerability exists in Microsoft Windows SymCrypt. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows ...

KB5008255: Windows Server 2012 Security Update (December 2021)

The remote Windows host is missing security update 5008255 or cumulative update 5008277. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,...

KB5008207: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2021)

The remote Windows host is missing security update 5008207. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43215, CVE-2021-43217,...

KB5008218: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2021)

The Windows 10 1809 / Windows Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-41333, CVE-2021-43207,...

Microsoft Windows Common Log File System Driver information leakage vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. An...