CVE-2021-38624: Security Update Guide - Microsoft Security Response Center

Microsoft Excel Security Feature Bypass Vulnerability

Windows Denial of Service Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

Windows NAT Denial of Service Vulnerability

Microsoft Exchange Server Denial of Service Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Windows AD FS Security Feature Bypass Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Active Directory Security Feature Bypass Vulnerability

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

Console Window Host Security Feature Bypass Vulnerability

Intune Management Extension Security Feature Bypass Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Active Directory Federation Server Spoofing Vulnerability

Microsoft discusses the security requirements and changes coming to the newest version of its Windows operating system.

Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38628.

Microsoft Office Remote Code Execution Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38638.

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38635.

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38636.

Visual Studio Elevation of Privilege Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Exchange Server Security Feature Bypass Vulnerability