The monthly edition from Microsoft solves more than 60 vulnerabilities in Microsoft’s stable products, and 20 more chromium security bugs. Microsoft Edge.
Microsoft’s September Patch Tuesday. Including more than a dozen products. Blue Open Management Infrastructure, Azure Sphere, Microsoft Office, Microsoft Windows DNS, Visual Studio, Bit Locker, Windows Subsystem for Linux (WSL), And more.
We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey will take no more than 60 seconds of your time, and we would appreciate it if you would share your experiences with us.
Zero Day weakness in MSHTML (CVE-2021-40444) has been resolved this month. Microsoft’s Real discount Guidelines issued on September 7 may be disabled when you have updated all Windows OS this month. Tech Reader Pro..
Patch without delay.
Analyzing all the complex vulnerabilities, there are 27 vulnerability enhancement risks, 16 can enable remote code execution, 11 information disclosure vulnerabilities, eight vulnerabilities can be compromised, two security features can be ignored Can, and may cause a service to be denied.
Goethell added that in addition to the weaknesses of MSHTML, the update includes some more that are noteworthy.
One of them, tracked as CVE-2021-36958, is a print spoiler vulnerability that was initially fixed last month, but was updated this month to address some additional concerns. Which have been pointed out by researchers beyond the original correction.
“The threat has been made public and active exploit code is available, so this makes this month’s Windows OS updates even more important,” Goetel added.
The third weakness Goetel points out is the heightened privilege threat in Windows DNS. Tracked as CVE-2021-36968, Weakness Legacy applies to Windows OS, which makes it particularly attractive to actors.
“Public disclosure gives threatening actors a slight leap in the development of working exploitation. In this case, they may find the fact that it only finds legacy OS attractive, banking on the fact that companies still inherit Running on OS but not continuing ESU support from Microsoft. Release to migrate from these platforms or at least subscribe to Microsoft’s Extended Security Update (ESU) program.
through Blipping computer.