Microsoft bu ay yayınladığı Patch Tuesday yamaları ile altı sıfırıncı gün güvenlik açığı ve toplam 55 zafiyeti kapattı. Aktif olarak yararlanılan güvenlik açıkları, Tianfu korsanlık yarışmasının bir parçası olarak kullanılan Microsoft Exchange ve Excel zafiyetlerinide içeriyor.
Microsoft, bu güncellemeler ile altısı kritik ve 49’u önemli olarak sınıflandırılan 55 güvenlik açığını düzeltti. Zafiyetlerin türleri aşağıdaki gibidir:
- 20 Elevation of Privilege vulnerabilities
- 2 Security Feature Bypass vulnerabilities
- 15 Remote Code Execution vulnerabilities
- 10 Information Disclosure vulnerabilities
- 3 Denial of Service vulnerabilities
- 4 Spoofing vulnerabilities
Altı sıfır gün düzeltildi, ikisi aktif olarak kullanıldı
Kasım Salı Yaması, ikisi Microsoft Exchange ve Microsoft Excel’e için altı sıfır gün güvenlik açığı için düzeltmeler içeriyor. Bu ay düzeltilen aktif ve olarak yararlanılan güvenlik açıkları şunlardır:
- CVE-2021-42292 – Microsoft Excel Security Feature Bypass Vulnerability
- CVE-2021-42321 – Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft ayrıca, saldırılarda yararlanıldığı bilinmeyen, genel olarak açıklanan diğer dört güvenlik açığını da düzeltti.
- CVE-2021-38631 – Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2021-41371 – Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- CVE-2021-43208 – 3D Viewer Remote Code Execution Vulnerability
- CVE-2021-43209 – 3D Viewer Remote Code Execution Vulnerability
Yayınlanan tüm liste aşağıdaki gibi:
| Tag | CVE ID | CVE Title | Severity |
|---|---|---|---|
| 3D Viewer | CVE-2021-43209 | 3D Viewer Remote Code Execution Vulnerability | Important |
| 3D Viewer | CVE-2021-43208 | 3D Viewer Remote Code Execution Vulnerability | Important |
| Azure | CVE-2021-41373 | FSLogix Information Disclosure Vulnerability | Important |
| Azure RTOS | CVE-2021-42303 | Azure RTOS Elevation of Privilege Vulnerability | Important |
| Azure RTOS | CVE-2021-42302 | Azure RTOS Elevation of Privilege Vulnerability | Important |
| Azure RTOS | CVE-2021-42301 | Azure RTOS Information Disclosure Vulnerability | Important |
| Azure RTOS | CVE-2021-42323 | Azure RTOS Information Disclosure Vulnerability | Important |
| Azure RTOS | CVE-2021-26444 | Azure RTOS Information Disclosure Vulnerability | Important |
| Azure RTOS | CVE-2021-42304 | Azure RTOS Elevation of Privilege Vulnerability | Important |
| Azure Sphere | CVE-2021-41374 | Azure Sphere Information Disclosure Vulnerability | Important |
| Azure Sphere | CVE-2021-41376 | Azure Sphere Information Disclosure Vulnerability | Important |
| Azure Sphere | CVE-2021-42300 | Azure Sphere Tampering Vulnerability | Important |
| Azure Sphere | CVE-2021-41375 | Azure Sphere Information Disclosure Vulnerability | Important |
| Microsoft Dynamics | CVE-2021-42316 | Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability | Critical |
| Microsoft Edge (Chromium-based) in IE Mode | CVE-2021-41351 | Microsoft Edge (Chrome based) Spoofing on IE Mode | Important |
| Microsoft Exchange Server | CVE-2021-42305 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| Microsoft Exchange Server | CVE-2021-41349 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| Microsoft Exchange Server | CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2021-41368 | Microsoft Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2021-40442 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2021-42292 | Microsoft Excel Security Feature Bypass Vulnerability | Important |
| Microsoft Office Word | CVE-2021-42296 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Windows | CVE-2021-41356 | Windows Denial of Service Vulnerability | Important |
| Microsoft Windows Codecs Library | CVE-2021-42276 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Power BI | CVE-2021-41372 | Power BI Report Server Spoofing Vulnerability | Important |
| Role: Windows Hyper-V | CVE-2021-42284 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Role: Windows Hyper-V | CVE-2021-42274 | Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability | Important |
| Visual Studio | CVE-2021-3711 | OpenSSL: CVE-2021-3711 SM2 Decryption Buffer Overflow | Critical |
| Visual Studio | CVE-2021-42319 | Visual Studio Elevation of Privilege Vulnerability | Important |
| Visual Studio Code | CVE-2021-42322 | Visual Studio Code Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2021-42278 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2021-42291 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2021-42287 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important |
| Windows Active Directory | CVE-2021-42282 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2021-42275 | Microsoft COM for Windows Remote Code Execution Vulnerability | Important |
| Windows Core Shell | CVE-2021-42286 | Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability | Important |
| Windows Cred SSProvider Protocol | CVE-2021-41366 | Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability | Important |
| Windows Defender | CVE-2021-42298 | Microsoft Defender Remote Code Execution Vulnerability | Critical |
| Windows Desktop Bridge | CVE-2021-36957 | Windows Desktop Bridge Elevation of Privilege Vulnerability | Important |
| Windows Diagnostic Hub | CVE-2021-42277 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | Important |
| Windows Fastfat Driver | CVE-2021-41377 | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | Important |
| Windows Feedback Hub | CVE-2021-42280 | Windows Feedback Hub Elevation of Privilege Vulnerability | Important |
| Windows Hello | CVE-2021-42288 | Windows Hello Security Feature Bypass Vulnerability | Important |
| Windows Installer | CVE-2021-41379 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2021-42285 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2021-42283 | NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2021-41370 | NTFS Elevation of Privilege Vulnerability | Important |
| Windows NTFS | CVE-2021-41378 | Windows NTFS Remote Code Execution Vulnerability | Important |
| Windows NTFS | CVE-2021-41367 | NTFS Elevation of Privilege Vulnerability | Important |
| Windows RDP | CVE-2021-38665 | Remote Desktop Protocol Client Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2021-38631 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2021-38666 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Windows RDP | CVE-2021-41371 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows Scripting | CVE-2021-42279 | Chakra Scripting Engine Memory Corruption Vulnerability | Critical |
| Windows Virtual Machine Bus | CVE-2021-26443 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability | Critical |
Kaynak: bleepingcomputer.com
