July 13, 2021—KB5004289 (Monthly Rollup)

None None...

July 13, 2021—KB5004244 (OS Build 17763.2061)

None None...

July 13, 2021—KB5004298 (Monthly Rollup)

None None...

Vulnerabilities Fixed in Microsoft Malware Protection Engine

Microsoft has fixed vulnerabilities in the Microsoft Malware Protection Engine as used by Windows Defender and Microsoft System Center Endpoint Protection. A local malicious agent could vulnerabilities potentially exploit them to execute code under elevated privileges execute code. Windows...

July 13, 2021 Security Update (KB5004235)

None None...

Security Updates for Microsoft Sharepoint 2016 (July 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-34467, CVE-2021-34468, CVE-2021-34520 - Microsoft SharePoint Server...

Mozilla Releases Security Updates for Firefox, Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisory for Firefox 90...

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisory for Firefox 90 and Firefox E...

Security Updates for Microsoft Office Web Apps (July 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities in Microsoft Excel. CVE-2021-34501, CVE-2021-34518 - A spoofing vulnerability in Microsoft Offic...

Security Updates for Microsoft Office Products (July 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the confidentiality and integrity of the system/application...

Microsoft Releases July 2021 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s July 2021 Security Update Summary and...

Security Updates for Microsoft SharePoint Server 2019 (July 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-34467, CVE-2021-34468, CVE-2021-34520 - Microsoft SharePoint Server...

 Adobe Releases Security Updates for Multiple Products 

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Adobe’s Security Bulletins and apply the necessary updates...

SAP Releases July 2021 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the SAP Security Notes for July 2021 and apply the necessary...

Security Updates for Microsoft SharePoint Server 2013 (July 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-34467, CVE-2021-34468, CVE-2021-34520 - Microsoft SharePoint Server...

Security Updates for Microsoft Word Products (July 2021)

The Microsoft Word Products are missing security updates. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relie...

Security Updates for Microsoft Excel Products (July 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has inste...

Security Updates for Microsoft Office (July 2021) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Kaseya Provides Security Updates for VSA On-Premises Software Vulnerabilities

Kaseya has released VSA version 9.5.7a for their VSA On-Premises software. This version addresses vulnerabilities that enabled the ransomware attacks on Kaseya’s customers. CISA strongly urges Kaseya customers closely follow the instructions detailed in the Kaseya security notice and contact Kase...

Quick look at CVE-2021-1675 & CVE-2021-34527 (aka PrintNightmare)

Summary Last week Microsoft warned Windows users about vulnerabilities in the Windows Print Spooler service – CVE-2021-1675 and CVE-2021-34527 also known as PrintNightmare. Both vulnerabilities can be used by an attacker with a regular user account to take control of a vulnerable server or client...