Microsoft Windows Multiple Vulnerabilities
RISK: Extremely High Risk
TYPE: Operating Systems - Windows OS
Multiple vulnerabilities were identified in Microsoft Windows, a remote attacker could exploit some of these vulnerabilities to trigger remote code execution on the targeted system.
Note:
This vulnerability is reported to have convenient attack code publicly available.
[Updated 7-July-2021] Security updates have been released to address CVE-2021-34527 vulnerability.
[Updated 5-July-2021] CVE-2021-34527 is being exploited in the wild. Risk level has been escalated to extremely high risk.
Impact
- Remote Code Execution
System / Technologies affected
Microsoft has released security patch to address these vulnerabilities.
- Windows Active Directory domain controllers
- Systems that have Point and Print configured with the
NoWarningNoElevationOnInstall
option configured.
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527
Vulnerability Identifier
Source
Related Link
Share with