Microsoft Security Vulnerabilities

CVE-2021-1695

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-1696

Windows Graphics Component Information Disclosure Vulnerability

CVE-2021-1697

Windows InstallService Elevation of Privilege Vulnerability

CVE-2021-1698

Windows Win32k Elevation of Privilege Vulnerability

CVE-2021-1699

Windows (modem.sys) Information Disclosure Vulnerability

CVE-2021-1700

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-1701

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-1702

Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability

CVE-2021-1703

Windows Event Logging Service Elevation of Privilege Vulnerability

CVE-2021-1704

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2021-1705

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

CVE-2021-1706

Windows LUAFV Elevation of Privilege Vulnerability

CVE-2021-1707

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2021-1708

Windows GDI+ Information Disclosure Vulnerability

CVE-2021-1709

Windows Win32k Elevation of Privilege Vulnerability

CVE-2021-1710

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2021-1711

Microsoft Office Remote Code Execution Vulnerability

CVE-2021-1712

Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-1715

Microsoft Word Remote Code Execution Vulnerability

CVE-2021-1716

Microsoft Word Remote Code Execution Vulnerability

CVE-2021-1717

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-1718

Microsoft SharePoint Server Tampering Vulnerability

CVE-2021-1719

Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2021-1721

.NET Core and Visual Studio Denial of Service Vulnerability

CVE-2021-1722

Windows Fax Service Remote Code Execution Vulnerability

CVE-2021-1723

ASP.NET Core and Visual Studio Denial of Service Vulnerability

CVE-2021-1724

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

CVE-2021-1725

Bot Framework SDK Information Disclosure Vulnerability

CVE-2021-1726

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-1727

Windows Installer Elevation of Privilege Vulnerability

CVE-2021-1728

System Center Operations Manager Elevation of Privilege Vulnerability

CVE-2021-1729

Windows Update Stack Setup Elevation of Privilege Vulnerability

CVE-2021-1730

<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p><p>This update addresses this vulnerability.</p><p>To prevent these types of attacks, Microsoft recommends customers to download inline imag...

CVE-2021-1731

PFX Encryption Security Feature Bypass Vulnerability

CVE-2021-1732

Windows Win32k Elevation of Privilege Vulnerability

CVE-2021-1733

Sysinternals PsExec Elevation of Privilege Vulnerability

CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability

CVE-2021-21118

Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVE-2021-21119

Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21120

Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21121

Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2021-21122

Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21123

Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21124

Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2021-21125

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21126

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.

CVE-2021-21127

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.

CVE-2021-21128

Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.