Security News: Microsoft Patch Tuesday October 2021, Autodiscover, MysterySnail, Exchange, DNS, Apache, HAProxy, VMware vCenter, Moodle

Hello everyone! This episode will be about relatively recent critical vulnerabilities. Lets start with Microsoft Patch Tuesday for October 2021. Specifically, with the vulnerability that I expected there, but it didnt get there. Autodiscover leak discovered by Guardicore Labs "Autodiscover, a...

Patch now! Microsoft fixes 71 Windows vulnerabilities in October Patch Tuesday

Yesterday we told you about Apple’s latest patches. Today we turn to Microsoft and its Patch Tuesday. Microsoft tends to provide a lot of information around its patches and, so, theres a lot to digest and piece together to give you an overview of the most important ones. In total, Microsoft has...

CVE-2021-26427

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2021-26427

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2021-26427

CVE-2021-26427 is a Microsoft Exchange Server remote code execution vulnerability. Exploitation requires adjacent-network access; patches were released in October 2021 (KB5007011/KB5007012) with mitigations and updated Exchange server builds. The connected KB entries confirm this CVE and its reme...

CVE-2021-26427 Microsoft Exchange Server Remote Code Execution Vulnerability

...

KLA12314 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...