Microsoft releases fixes for 55 bugs on the November 2021 Patch Tuesday

With an irresistible desire to always arrive to the bottom of things and reveal the truth, Alex spent most of his clock time working every bit a news reporter, anchor, also Eastern Samoa TV and radio... Read more

Redmond officials addressed a lot of problems with this month's rollout, more than expected.
The vulnerability that impacts the Microsoft Exchange Server was treated As a critical one.
Also considered critical was a major vulnerability that was actually found in Microsoft Excel .
This clause contains the all-or-nothing list of security system updates that were issued in November 2021.

Yes, it's that time of the month again, and Microsoft has released 55 certificate fixes, including patches that tackle zero-daylight vulnerabilities actively used in the wild.

The tech giant's latest round of patches has fixes for six critical vulnerabilities, 15 remote code carrying into action (RCE) bugs, information leaks, and elevation of favour surety flaws, besides as issues that could jumper lead to spoofing and tampering.

Microsoft Azure, the Chromium-based Edge browser, Microsoft Office, and its associated products, Visual Studio apartment, Exchange Waiter, Windows Center, and Windows Protector are some of the products targetted by the patches.

Cardinal remote write in code execution bugs were fixed

Another diligent month for Redmond programmers and developers, Eastern Samoa they preserve combat old and constantly emerging issues.

While or s matters single requisite minor tweaks, others were of paramount importance and were tempered intrinsically by the technical school ship's company

Some of the most interesting vulnerabilities resolved therein update, all deemed American Samoa outstanding, are:

CVE-2021-42321: (CVSS:3.1 8.8 / 7.7). Low-level active overwork, this exposure impacts Microsoft Exchange Server and overdue to improper substantiation of cmdlet arguments, tin can lead to RCE. However, attackers mustiness be echt.
CVE-2021-42292: (CVSS:3.1 7.8 / 7.0). Also detected as exploited in the uncivilised, this exposure was found in Microsoft Excel and bum be accustomed circumvent security controls. Microsoft says that the Prevue Pane is not an attack vector. No patch is currently disposable for Microsoft Government agency 2019 for Mac Beaver State Microsoft Office LTSC for Mack 2021.
CVE-2021-43209: (CVSS:3.1 7.8 / 6.8). A 3D Viewer vulnerability made public, this bug can be exploited locally to gun trigger RCE.
CVE-2021-43208: (CVSS:3.1 7.8 / 6.8). Another known come out, this 3D Witness security department blemish sack also represent weaponized by a local attacker for code execution purposes.
CVE-2021-38631: (CVSS:3.0 4.4 / 3.9). Also successful public, this security flaw, found in the Windows Remote Desktop Protocol (RDP), can follow used for information revelation.
CVE-2021-41371: (CVSS:3.1 4.4 / 3.9). At length, this RDP vulnerability, known before patching was useable, tail end besides be used locally to ram an information leak out.

This is a comparatively low act of vulnerabilities resolved during the month of November, comparison this release with those of previous years.

Past month, Microsoft resolved 71 bugs, so we can consider this quite quieten period. Of particular note of hand are patches for a total of four zero-daylight flaws, one of which was being actively victimised in the unwarranted, whereas three were ready-made public.

If we go back in time a trifle much, Microsoft tackled over 60 vulnerabilities during the Sept Mend Tuesday. Among the patches was a fix for an RCE in MSHTML.

And LET's not leave that alongside Microsoft's Patch Tues software system release, at that place are other companies that have published security updates too, much as: