Microsoft Security Update Validation Report December 2021

Microsoft’s December 2021 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Microsoft Issues Windows Update to Patch 0-Day Used to Spread Emotet Malware

Microsoft has rolled out Patch Tuesday updates to address multiple security vulnerabilities in Windows and other software, including one actively exploited flaw that's being abused to deliver Emotet, TrickBot, or Bazaloader malware payloads. The latest monthly release for December fixes a total o...

investment-in-russia.com Cross Site Scripting vulnerability OBB-2302565

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gentlefootdoctor.com Cross Site Scripting vulnerability OBB-2302403

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Update for Microsoft Visual Studio Code (December 2021)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.63.1. It is, therefore, affected by multiple vulnerabilities: - Visual Studio Code Remote Code Execution Vulnerability CVE-2021-43891 - Visual Studio Code Spoofing Vulnerability CVE-2021-43908 Note that Nessus...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 5

Package name: xms10.13.0.10528.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin Date: December 2021 Languages supported: English US Important notes about this update As a best...

Patch Tuesday - December 2021

This month’s Patch Tuesday comes in the middle of a global effort to mitigate Apache Log4j CVE-2021-44228. In today’s security release, Microsoft issued fixes for 83 vulnerabilities across an array of products — including a fix for Windows Defender for IoT, which is vulnerable to CVE-2021-44228...

Microsoft & Adobe Patch Tuesday (December 2021) – Microsoft 83 Vulnerabilities with 7 Critical, 1 Actively Exploited. Adobe 60 Vulnerabilities, 28 critical.

Microsoft Patch Tuesday – December 2021 Microsoft patched 83 vulnerabilities in their December 2021 Patch Tuesday release, of which seven 7 are rated as critical severity. This months release includes one 1 Zero Day known to be actively exploited. Products impacted by Microsofts December security...

December 14, 2021—KB5008263 (Monthly Rollup)

None None...

Microsoft Releases December 2021 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s December 2021 Security Update Summary and...

KB5008206: Windows 10 Version 1909 Security Update (December 2021)

The remote Windows host is missing security update 5008206. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2021-43219, CVE-2021-43228,...

Security Updates for Microsoft Office Products (December 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43256, CVE-2021-43875 - An...

KB5008255: Windows Server 2012 Security Update (December 2021)

The remote Windows host is missing security update 5008255 or cumulative update 5008277. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,...

Security update deployment information: December 14, 2021 (KB5008541)

None None...

December 14, 2021 Security Update (KB5008210)

None None...

KB5008212: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 / Windows 10 Version 21H2 Security Update (December 2021)

The remote Windows host is missing security update 5008212. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-41333, CVE-2021-43207, CVE-2021-43223, CVE-2021-43226, CVE-2021-43229,...

elearning.smasantothomas1.sch.id Cross Site Scripting vulnerability OBB-2300086

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-23700

creationtimestamp| type| source ---|---|--- 2021-12-10 22:25:23+00:00| seen| https://t.me/cibsecurity/33763...

CVE-2021-29214

creationtimestamp| type| source ---|---|--- 2021-12-10 20:25:19+00:00| seen| https://t.me/cibsecurity/33753...

CVE-2021-45105

creationtimestamp| type| source ---|---|--- 2021-12-10 08:54:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus38/2021 2021-12-18 10:44:28+00:00| seen| https://t.me/BleepingComputer/11193 2021-12-18 11:18:39+00:00| seen| https://t.me/thehackernews/1740 2021-12-18...