Microsoft update

KB5007215

Security Update

View on Microsoft →

Fixed in

Microsoft Edge (Chromium-based) in IE Mode 10.0.22000.318
Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.318
Windows 11 version 21H2 for x64-based Systems 10.0.22000.318

Fixes 23 records

TI-2021-13550 CVE-2021-34527 · GHSA-75f9-mm5v-2rgm

Windows Print Spooler Remote Code Execution Vulnerability

CRITICAL 97KEV

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.99792 Published 2021-07-02 Fixed in 10.0.10240.18969, 10.0.14393.4470 +11

TI-2021-18198 CVE-2021-41379 · GHSA-hxf7-qh53-96j5

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19452 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59

TI-2021-16242 CVE-2021-38666 · GHSA-vcc7-rh26-62x2

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 54

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15184 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11

TI-2021-16241 CVE-2021-38665 · GHSA-6483-ch6v-gp2h

Remote Desktop Protocol Client Information Disclosure Vulnerability

MEDIUM 42

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.07018 Published 2021-11-10 Fixed in 1.2.2600, 10.0.10240.19119 +11

TI-2021-08258 CVE-2021-26443 · GHSA-v594-fc8g-fg3j

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

MEDIUM 42

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.01696 Published 2021-11-10 Fixed in 10.0.17763.2300, 10.0.18363.1916 +4

TI-2021-18197 CVE-2021-41378 · GHSA-c6hq-jgwh-gh8x

Windows NTFS Remote Code Execution Vulnerability

MEDIUM 41

Windows NTFS Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2021-11-10 Fixed in 10.0.17763.2300, 10.0.18363.1916 +5

TI-2021-18719 CVE-2021-42284 · GHSA-3qx3-5cfw-9wfr

Windows Hyper-V Denial of Service Vulnerability

LOW 39

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0376 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +7

TI-2021-18718 CVE-2021-42283 · GHSA-cwj3-6xrh-qfh3

NTFS Elevation of Privilege Vulnerability

LOW 39

NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0049 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-269

TI-2021-18712 CVE-2021-42276 · GHSA-m2c5-3mrr-7rv3

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

LOW 39

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02489 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +7

TI-2021-18180 CVE-2021-41356 · GHSA-7jp8-6q2r-j6w5

Windows Denial of Service Vulnerability

LOW 38

Windows Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03018 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +7

TI-2021-18715 CVE-2021-42279 · GHSA-jgrp-6qqq-3284

Chakra Scripting Engine Memory Corruption Vulnerability

LOW 37

Chakra Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02319 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +7 CWE-787

TI-2021-15033 CVE-2021-36957 · GHSA-q5v4-7mhc-mqj8

Windows Desktop Bridge Elevation of Privilege Vulnerability

LOW 37

Windows Desktop Bridge Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0049 Published 2021-11-10 Fixed in 10.0.14393.4770, 10.0.17763.2300 +6 CWE-269

TI-2021-18716 CVE-2021-42280 · GHSA-6fmq-jp6x-cmjc

Windows Feedback Hub Elevation of Privilege Vulnerability

LOW 36

Windows Feedback Hub Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00957 Published 2021-11-10 Fixed in 10.0.14393.4770, 10.0.17763.2300 +6 CWE-269

TI-2021-18713 CVE-2021-42277 · GHSA-p3rm-m944-qxgv

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

LOW 36

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00867 Published 2021-11-10 Fixed in 27550.00, 15.9.41 +12 CWE-269

TI-2021-18720 CVE-2021-42285 · GHSA-7fq7-fhqx-74pq

Windows Kernel Elevation of Privilege Vulnerability

LOW 35

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00551 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +10 CWE-269

TI-2021-18196 CVE-2021-41377 · GHSA-c297-m9cw-2cw6

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

LOW 35

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0049 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-269

TI-2021-18189 CVE-2021-41370 · GHSA-33rm-crcq-mmjh

NTFS Elevation of Privilege Vulnerability

LOW 35

NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0049 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-269

TI-2021-18187 CVE-2021-41367 · GHSA-6v9p-9jpc-j3j4

NTFS Elevation of Privilege Vulnerability

LOW 35

NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0049 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-269

TI-2021-18186 CVE-2021-41366 · GHSA-f57j-p87h-rp4f

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

LOW 35

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0049 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +9 CWE-269

TI-2021-18710 CVE-2021-42274 · GHSA-pxcr-f852-7w3r

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

LOW 31

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.0069 Published 2021-11-10 Fixed in 10.0.14393.4770, 10.0.17763.2300 +4

TI-2021-18175 CVE-2021-41351 · GHSA-4q46-hmgh-8fr2

Microsoft Edge (Chrome based) Spoofing on IE Mode

LOW 27

Microsoft Edge (Chrome based) Spoofing on IE Mode

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03911 Published 2021-11-10 Fixed in 10.0.17763.2300

TI-2021-18190 CVE-2021-41371 · GHSA-4hp9-vmfr-4j2v

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

LOW 24

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.01649 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11

TI-2021-16210 CVE-2021-38631 · GHSA-8vfm-wc8r-2f42

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

LOW 24

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.01879 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11