CVE-2021-41355: Security Update Guide - Microsoft Security Response Center

Visual Studio Elevation of Privilege Vulnerability

Microsoft Edge (Chrome based) Spoofing on IE Mode

Visual Studio Code Elevation of Privilege Vulnerability

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

*Is the Preview Pane an attack vector for this vulnerability?* No, the Preview Pane is not an attack vector.

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

Active Directory Federation Server Spoofing Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Kernel Information Disclosure Vulnerability

SCOM Information Disclosure Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Windows Print Spooler Spoofing Vulnerability

Microsoft Exchange Server Denial of Service Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38662.

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

Windows NAT Denial of Service Vulnerability

Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-41343.

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38636.

Microsoft Edge (Chromium-based) Tampering Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38628.

Windows Scripting Engine Memory Corruption Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38638.

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36969, CVE-2021-38635.

Microsoft Office Remote Code Execution Vulnerability

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Visual Studio Code Spoofing Vulnerability

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

Microsoft Office Spoofing Vulnerability

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36960.

Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36972.

Windows Storage Information Disclosure Vulnerability

Windows Authenticode Spoofing Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Office Graphics Component Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows LSA Spoofing Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability