CVE-2021-38629: Security Update Guide - Microsoft Security Response Center

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

SCOM Information Disclosure Vulnerability

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40478, CVE-2021-40488, CVE-2021-41345.

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40478, CVE-2021-40489, CVE-2021-41345.

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40488, CVE-2021-40489, CVE-2021-41345.

Windows Print Spooler Spoofing Vulnerability

Windows Bind Filter Driver Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40478, CVE-2021-40488, CVE-2021-40489.

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40478, CVE-2021-40488, CVE-2021-40489, CVE-2021-41345.

Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-41343.

Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38662.

Windows Kernel Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36960.

Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36972.

Visual Studio Code Spoofing Vulnerability

Windows Installer Information Disclosure Vulnerability

BitLocker Security Feature Bypass Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38648, CVE-2021-38649.

Open Management Infrastructure Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38645, CVE-2021-38649.

Open Management Infrastructure Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38645, CVE-2021-38648.

Windows Storage Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.

Windows Authenticode Spoofing Vulnerability

Azure Sphere Information Disclosure Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38636.

Microsoft Office Spoofing Vulnerability

Windows Key Storage Provider Security Feature Bypass Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38638.

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38628.

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38635.

Microsoft Office Graphics Component Information Disclosure Vulnerability

Windows LSA Spoofing Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33751, CVE-2021-34460, CVE-2021-34512, CVE-2021-34513.

Microsoft Exchange Server Security Feature Bypass Vulnerability

An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installer Elevation of Privilege Vulnerability'.