cve.bz

Microsoft Patch Tuesday, January 2021: the CVEs

Filter

Microsoft Patch Tuesday January 2021: the CVEs Microsoft published on 12 January 2021, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2020, Nov 2020, Oct 2020, Sep 2020, Aug 2020, Jul 2020, Jun 2020, May 2020, Apr 2020, Mar 2020, Feb 2020, Jan 2020. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 5.5CVE-2021-1725EPSS 1.1%

    Bot Framework SDK Information Disclosure Vulnerability

  2. 7.5CVE-2021-1723EPSS 5.3%

    ASP.NET Core and Visual Studio Denial of Service Vulnerability

  3. 8.0CVE-2021-1719EPSS 2.4%

    Microsoft SharePoint Elevation of Privilege Vulnerability

  4. 8.0CVE-2021-1718EPSS 2.8%

    Microsoft SharePoint Server Tampering Vulnerability

  5. 4.6CVE-2021-1717EPSS 2.0%

    Microsoft SharePoint Server Spoofing Vulnerability

  6. 7.8CVE-2021-1716EPSS 3.9%

    Microsoft Word Remote Code Execution Vulnerability

  7. 7.8CVE-2021-1715EPSS 3.9%

    Microsoft Word Remote Code Execution Vulnerability

  8. 7.8CVE-2021-1714EPSS 3.3%

    Microsoft Excel Remote Code Execution Vulnerability

  9. 7.8CVE-2021-1713EPSS 3.3%

    Microsoft Excel Remote Code Execution Vulnerability

  10. 8.0CVE-2021-1712EPSS 2.4%

    Microsoft SharePoint Elevation of Privilege Vulnerability

  11. 7.8CVE-2021-1711EPSS 3.9%

    Microsoft Office Remote Code Execution Vulnerability

  12. 7.8CVE-2021-1710EPSS 3.2%

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

  13. 7.0CVE-2021-1709EPSS 0.8%

    Windows Win32k Elevation of Privilege Vulnerability

  14. 5.7CVE-2021-1708EPSS 3.7%

    Windows GDI+ Information Disclosure Vulnerability

  15. 8.8CVE-2021-1707EPSS 3.9%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  16. 7.3CVE-2021-1706EPSS 2.2%

    Windows LUAFV Elevation of Privilege Vulnerability

  17. 4.2CVE-2021-1705EPSS 2.1%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  18. 7.3CVE-2021-1704EPSS 1.0%

    Windows Hyper-V Elevation of Privilege Vulnerability

  19. 7.8CVE-2021-1703EPSS 0.8%

    Windows Event Logging Service Elevation of Privilege Vulnerability

  20. 7.8CVE-2021-1702EPSS 0.8%

    Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability

  21. 8.8CVE-2021-1701EPSS 3.9%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  22. 8.8CVE-2021-1700EPSS 3.9%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  23. 5.5CVE-2021-1699EPSS 2.1%

    Windows (modem.sys) Information Disclosure Vulnerability

  24. 7.8CVE-2021-1697EPSS 0.8%

    Windows InstallService Elevation of Privilege Vulnerability

  25. 5.5CVE-2021-1696EPSS 4.7%

    Windows Graphics Component Information Disclosure Vulnerability

  26. 7.8CVE-2021-1695EPSS 0.9%

    Windows Print Spooler Elevation of Privilege Vulnerability

  27. 7.5CVE-2021-1694EPSS 3.5%

    Windows Update Stack Elevation of Privilege Vulnerability

  28. 7.8CVE-2021-1693EPSS 0.8%

    Windows CSC Service Elevation of Privilege Vulnerability

  29. 7.7CVE-2021-1692EPSS 4.2%

    Windows Hyper-V Denial of Service Vulnerability

  30. 7.7CVE-2021-1691EPSS 4.1%

    Windows Hyper-V Denial of Service Vulnerability

  31. 7.8CVE-2021-1690EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  32. 7.8CVE-2021-1689EPSS 0.7%

    Windows Multipoint Management Elevation of Privilege Vulnerability

  33. 7.8CVE-2021-1688EPSS 0.7%

    Windows CSC Service Elevation of Privilege Vulnerability

  34. 7.8CVE-2021-1687EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  35. 7.8CVE-2021-1686EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  36. 7.3CVE-2021-1685EPSS 0.9%

    Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

  37. 5.0CVE-2021-1684EPSS 1.6%

    Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft ha…

  38. 5.0CVE-2021-1683EPSS 1.7%

    Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft ha…

  39. 7.0CVE-2021-1682EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  40. 7.8CVE-2021-1681EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  41. 7.8CVE-2021-1680EPSS 0.7%

    Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

  42. 6.5CVE-2021-1679EPSS 3.7%

    Windows CryptoAPI Denial of Service Vulnerability

  43. 8.8CVE-2021-1678EPSS 10%

    Windows Print Spooler Spoofing Vulnerability

  44. 5.5CVE-2021-1677EPSS 1.2%

    Azure Active Directory Pod Identity Spoofing Vulnerability

  45. 5.5CVE-2021-1676EPSS 1.3%

    Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

  46. 8.8CVE-2021-1674EPSS 3.2%

    Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

  47. 8.8CVE-2021-1673EPSS 3.2%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  48. 5.5CVE-2021-1672EPSS 1.3%

    Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

  49. 8.8CVE-2021-1671EPSS 3.2%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  50. 5.5CVE-2021-1670EPSS 1.2%

    Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

  51. 8.8CVE-2021-1669EPSS 3.2%

    Windows Remote Desktop Security Feature Bypass Vulnerability

  52. 7.8CVE-2021-1668EPSS 3.9%

    Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability

  53. 8.8CVE-2021-1667EPSS 3.9%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  54. 8.8CVE-2021-1666EPSS 3.2%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  55. 7.8CVE-2021-1665EPSS 4.1%

    GDI+ Remote Code Execution Vulnerability

  56. 8.8CVE-2021-1664EPSS 3.2%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  57. 5.5CVE-2021-1663EPSS 1.2%

    Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

  58. 7.8CVE-2021-1662EPSS 0.7%

    Windows Event Tracing Elevation of Privilege Vulnerability

  59. 7.8CVE-2021-1661EPSS 0.8%

    Windows Installer Elevation of Privilege Vulnerability

  60. 8.8CVE-2021-1660EPSS 3.2%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  61. 7.8CVE-2021-1659EPSS 0.7%

    Windows CSC Service Elevation of Privilege Vulnerability

  62. 8.8CVE-2021-1658EPSS 3.2%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  63. 7.8CVE-2021-1657EPSS 1.0%

    Windows Fax Compose Form Remote Code Execution Vulnerability

  64. 5.5CVE-2021-1656EPSS 3.0%

    TPM Device Driver Information Disclosure Vulnerability

  65. 7.8CVE-2021-1655EPSS 0.8%

    Windows CSC Service Elevation of Privilege Vulnerability

  66. 7.8CVE-2021-1654EPSS 0.8%

    Windows CSC Service Elevation of Privilege Vulnerability

  67. 7.8CVE-2021-1653EPSS 0.8%

    Windows CSC Service Elevation of Privilege Vulnerability

  68. 7.8CVE-2021-1652EPSS 0.8%

    Windows CSC Service Elevation of Privilege Vulnerability

  69. 7.8CVE-2021-1651EPSS 0.8%

    Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

  70. 7.8CVE-2021-1650EPSS 0.8%

    Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

  71. 7.8CVE-2021-1649EPSS 0.8%

    Active Template Library Elevation of Privilege Vulnerability

  72. 7.8CVE-2021-1648EPSS 1.2%

    Microsoft splwow64 Elevation of Privilege Vulnerability

  73. 7.8CVE-2021-1647KEVEPSS 40%

    Microsoft Defender Remote Code Execution Vulnerability

  74. 6.6CVE-2021-1646EPSS 0.8%

    Windows WLAN Service Elevation of Privilege Vulnerability

  75. 5.0CVE-2021-1645EPSS 7.8%

    Windows Docker Information Disclosure Vulnerability

  76. 7.8CVE-2021-1644EPSS 4.1%

    HEVC Video Extensions Remote Code Execution Vulnerability

  77. 7.8CVE-2021-1643EPSS 4.2%

    HEVC Video Extensions Remote Code Execution Vulnerability

  78. 7.8CVE-2021-1642EPSS 0.8%

    Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

  79. 4.6CVE-2021-1641EPSS 2.0%

    Microsoft SharePoint Server Spoofing Vulnerability

  80. 7.7CVE-2021-1638EPSS 1.2%

    Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft ha…

  81. 5.5CVE-2021-1637EPSS 1.2%

    Windows DNS Query Information Disclosure Vulnerability

  82. 8.8CVE-2021-1636EPSS 6.5%

    Microsoft SQL Elevation of Privilege Vulnerability