Microsoft update

KB5004289

Monthly Rollup

View on Microsoft →

Fixed in

Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.25661
Windows 7 for x64-based Systems Service Pack 1 6.1.7601.25661
Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.25661
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.25661

Fixes 38 records

TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

Scripting Engine Memory Corruption Vulnerability

CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787

TI-2021-11966 CVE-2021-31979 · GHSA-rhcm-c7c7-5wq8

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0454 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119

TI-2021-13129 CVE-2021-33757 · GHSA-x2cp-w42w-phvc

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

MEDIUM 47

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02951 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13522 CVE-2021-34494 · GHSA-c54c-p933-mmrc

Windows DNS Server Remote Code Execution Vulnerability

MEDIUM 45

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04045 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13121 CVE-2021-33749 · GHSA-hh9v-jpj6-69wx

Windows DNS Snap-in Remote Code Execution Vulnerability

MEDIUM 45

Windows DNS Snap-in Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02416 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.17763.2061 +9

TI-2021-11403 CVE-2021-31183 · GHSA-mq6x-qhcj-q6rv

Windows TCP/IP Driver Denial of Service Vulnerability

MEDIUM 45

Windows TCP/IP Driver Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03843 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13478 CVE-2021-34446 · GHSA-hfw9-cf9w-2g5w

Windows HTML Platforms Security Feature Bypass Vulnerability

MEDIUM 44

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02045 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13475 CVE-2021-34442 · GHSA-6p5f-qv8v-hp6j

Windows DNS Server Remote Code Execution Vulnerability

MEDIUM 44

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0317 Published 2021-07-16 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13120 CVE-2021-33746 · GHSA-3m64-v24q-w9wr

Windows DNS Server Remote Code Execution Vulnerability

MEDIUM 44

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01995 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13150 CVE-2021-33780 · GHSA-x7wh-c3qc-hfx3

Windows DNS Server Remote Code Execution Vulnerability

MEDIUM 43

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02707 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13128 CVE-2021-33756 · GHSA-64xh-8qx5-qrr9

Windows DNS Snap-in Remote Code Execution Vulnerability

MEDIUM 43

Windows DNS Snap-in Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02405 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.17763.2061 +9

TI-2021-13124 CVE-2021-33752 · GHSA-2c94-m4c4-mjrq

Windows DNS Snap-in Remote Code Execution Vulnerability

MEDIUM 43

Windows DNS Snap-in Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02416 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.17763.2061 +9

TI-2021-13122 CVE-2021-33750 · GHSA-vc2x-2cwf-2g3h

Windows DNS Snap-in Remote Code Execution Vulnerability

MEDIUM 43

Windows DNS Snap-in Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02416 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.17763.2061 +9

TI-2021-13524 CVE-2021-34497 · GHSA-m3r4-hcc8-8q6r

Windows MSHTML Platform Remote Code Execution Vulnerability

MEDIUM 42

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02145 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13479 CVE-2021-34447 · GHSA-jrwr-qw3f-xrg9

Windows MSHTML Platform Remote Code Execution Vulnerability

MEDIUM 42

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02045 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13156 CVE-2021-33786 · GHSA-v8hv-xvc3-mv58

Windows LSA Security Feature Bypass Vulnerability

MEDIUM 42

Windows LSA Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02115 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13530 CVE-2021-34504 · GHSA-mmg7-f7m8-xp3m

Windows Address Book Remote Code Execution Vulnerability

MEDIUM 40

Windows Address Book Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03465 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13520 CVE-2021-34492 · GHSA-v895-fgfr-vhp8

Windows Certificate Spoofing Vulnerability

MEDIUM 40

Windows Certificate Spoofing Vulnerability

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.02468 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13505 CVE-2021-34476 · GHSA-8jxq-jjpr-rfg7

Bowser.sys Denial of Service Vulnerability

LOW 39

Bowser.sys Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0328 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13157 CVE-2021-33788 · GHSA-9gmj-h4wm-8m4f

Windows LSA Denial of Service Vulnerability

LOW 39

Windows LSA Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0328 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13126 CVE-2021-33754 · GHSA-86w3-hm4v-hj7x

Windows DNS Server Remote Code Execution Vulnerability

LOW 39

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01981 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13525 CVE-2021-34498 · GHSA-5gwv-q5pw-ggrw

Windows GDI Elevation of Privilege Vulnerability

LOW 38

Windows GDI Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01058 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-416

TI-2021-13474 CVE-2021-34441 · GHSA-wv3q-r7hq-7g23

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

LOW 38

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02217 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13540 CVE-2021-34516 · GHSA-f679-g5v6-6qqr

Win32k Elevation of Privilege Vulnerability

LOW 37

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01304 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-20

TI-2021-13539 CVE-2021-34514 · GHSA-7pqx-crh9-hcp7

Windows Kernel Elevation of Privilege Vulnerability

LOW 35

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00698 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-269

TI-2021-13536 CVE-2021-34511 · GHSA-9m7h-2c84-rqw2

Windows Installer Elevation of Privilege Vulnerability

LOW 35

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00569 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-269

TI-2021-13532 CVE-2021-34507 · GHSA-rc75-mpwg-p3r6

Windows Remote Assistance Information Disclosure Vulnerability

LOW 35

Windows Remote Assistance Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03255 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13488 CVE-2021-34456 · GHSA-w975-jcxc-99vr

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

LOW 35

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00557 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-269

TI-2021-13476 CVE-2021-34444 · GHSA-7879-3mvp-m36v

Windows DNS Server Denial of Service Vulnerability

LOW 35

Windows DNS Server Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03457 Published 2021-07-16 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13526 CVE-2021-34499 · GHSA-6g4v-wpgv-gp6c

Windows DNS Server Denial of Service Vulnerability

LOW 34

Windows DNS Server Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02869 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13153 CVE-2021-33783 · GHSA-jmv8-h4gc-mrfq

Windows SMB Information Disclosure Vulnerability

LOW 34

Windows SMB Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02766 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13119 CVE-2021-33745 · GHSA-rw9c-7p8v-5qxg

Windows DNS Server Denial of Service Vulnerability

LOW 34

Windows DNS Server Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02869 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13136 CVE-2021-33764 · GHSA-jq93-4v6x-g5r7

Windows Key Distribution Center Information Disclosure Vulnerability

LOW 32

Windows Key Distribution Center Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03049 Published 2021-07-14 Fixed in 6.1.7601.25661, 6.0.6003.21167 +6

TI-2021-13523 CVE-2021-34496 · GHSA-hvhw-h5rv-3fff

Windows GDI Information Disclosure Vulnerability

LOW 29

Windows GDI Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0204 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13152 CVE-2021-33782 · GHSA-qx57-pcmj-wm6g

Windows Authenticode Spoofing Vulnerability

LOW 29

Windows Authenticode Spoofing Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.02247 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13137 CVE-2021-33765 · GHSA-fj2h-cwh5-p3f7

Windows Installer Spoofing Vulnerability

LOW 29

Windows Installer Spoofing Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00727 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13473 CVE-2021-34440 · GHSA-v53j-pwvr-vh92

GDI+ Information Disclosure Vulnerability

LOW 27

GDI+ Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0088 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13489 CVE-2021-34457 · GHSA-2j5x-2fxv-c77c

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00872 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9