Microsoft update

KB5005563

IE Cumulative

Fixed in

Windows 7 for 32-bit Systems Service Pack 1 1.001
Windows 7 for x64-based Systems Service Pack 1 1.001
Windows 8.1 for 32-bit systems 1.001
Windows 8.1 for x64-based systems 1.001
Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.001
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.001
Windows Server 2008 for 32-bit Systems Service Pack 2 1.001
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.001
Windows Server 2008 for x64-based Systems Service Pack 2 1.001
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.001
Windows Server 2012 1.001
Windows Server 2012 (Server Core installation) 1.001
Windows Server 2012 R2 1.001
Windows Server 2012 R2 (Server Core installation) 1.001

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22

TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787

TI-2021-13478 CVE-2021-34446 · GHSA-hfw9-cf9w-2g5w

MEDIUM 44

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02045 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13524 CVE-2021-34497 · GHSA-m3r4-hcc8-8q6r

MEDIUM 42

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02145 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9

TI-2021-13479 CVE-2021-34447 · GHSA-jrwr-qw3f-xrg9

MEDIUM 42

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02045 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9