Microsoft Patch Tuesday, April 2021: the CVEs

Microsoft Patch Tuesday April 2021: the CVEs Microsoft published on 13 April 2021, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2021, Feb 2021, Jan 2021, Dec 2020, Nov 2020, Oct 2020, Sep 2020, Aug 2020, Jul 2020, Jun 2020, May 2020, Apr 2020. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.0CVE-2021-28483EPSS 1.2%2021-04-13

   Microsoft Exchange Server Remote Code Execution Vulnerability

2. 8.8CVE-2021-28482EPSS 83%2021-04-13

   Microsoft Exchange Server Remote Code Execution Vulnerability

3. 9.8CVE-2021-28481ExploitEPSS 36%2021-04-13

   Microsoft Exchange Server Remote Code Execution Vulnerability

4. 9.8CVE-2021-28480ExploitEPSS 71%2021-04-13

   Microsoft Exchange Server Remote Code Execution Vulnerability

5. 7.0CVE-2021-28477EPSS 2.3%2021-04-13

   Visual Studio Code Remote Code Execution Vulnerability

6. 7.8CVE-2021-28475EPSS 2.7%2021-04-13

   Visual Studio Code Remote Code Execution Vulnerability

7. 7.8CVE-2021-28473EPSS 2.7%2021-04-13

   Visual Studio Code Remote Code Execution Vulnerability

8. 7.8CVE-2021-28472EPSS 62%2021-04-13

   Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

9. 7.8CVE-2021-28471EPSS 4.1%2021-04-13

   Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

10. 7.8CVE-2021-28470EPSS 2.4%2021-04-13

    Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

11. 7.8CVE-2021-28469EPSS 2.7%2021-04-13

    Visual Studio Code Remote Code Execution Vulnerability

12. 7.8CVE-2021-28468EPSS 6.3%2021-04-13

    Raw Image Extension Remote Code Execution Vulnerability

13. 7.8CVE-2021-28466EPSS 2.4%2021-04-13

    Raw Image Extension Remote Code Execution Vulnerability

14. 7.8CVE-2021-28464EPSS 2.4%2021-04-13

    VP9 Video Extensions Remote Code Execution Vulnerability

15. 8.1CVE-2021-28460EPSS 0.5%2021-04-13

    Azure Sphere Unsigned Code Execution Vulnerability

16. 6.1CVE-2021-28459EPSS 2.3%2021-04-13

    Azure DevOps Server Spoofing Vulnerability

17. 7.8CVE-2021-28458EPSS 2.0%2021-04-13

    Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

18. 7.8CVE-2021-28457EPSS 2.7%2021-04-13

    Visual Studio Code Remote Code Execution Vulnerability

19. 5.5CVE-2021-28456EPSS 3.7%2021-04-13

    Microsoft Excel Information Disclosure Vulnerability

20. 7.8CVE-2021-28454EPSS 3.4%2021-04-13

    Microsoft Excel Remote Code Execution Vulnerability

21. 7.8CVE-2021-28453EPSS 4.1%2021-04-13

    Microsoft Word Remote Code Execution Vulnerability

22. 7.1CVE-2021-28452EPSS 1.4%2021-04-13

    Microsoft Outlook Memory Corruption Vulnerability

23. 7.8CVE-2021-28451EPSS 2.5%2021-04-13

    Microsoft Excel Remote Code Execution Vulnerability

24. 5.0CVE-2021-28450EPSS 2.6%2021-04-13

    Microsoft SharePoint Denial of Service Vulnerability

25. 7.8CVE-2021-28449EPSS 2.7%2021-04-13

    Microsoft Office Remote Code Execution Vulnerability

26. 7.8CVE-2021-28448EPSS 2.4%2021-04-13

    Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

27. 4.4CVE-2021-28447EPSS 2.2%2021-04-13

    Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

28. 7.1CVE-2021-28446EPSS 0.8%2021-04-13

    Windows Portmapping Information Disclosure Vulnerability

29. 8.1CVE-2021-28445EPSS 2.9%2021-04-13

    Windows Network File System Remote Code Execution Vulnerability

30. 5.7CVE-2021-28444EPSS 1.9%2021-04-13

    Windows Hyper-V Security Feature Bypass Vulnerability

31. 5.5CVE-2021-28443EPSS 0.7%2021-04-13

    Windows Console Driver Denial of Service Vulnerability

32. 6.5CVE-2021-28442EPSS 6.9%2021-04-13

    Windows TCP/IP Information Disclosure Vulnerability

33. 6.5CVE-2021-28441EPSS 0.8%2021-04-13

    Windows Hyper-V Information Disclosure Vulnerability

34. 7.0CVE-2021-28440EPSS 0.6%2021-04-13

    Windows Installer Elevation of Privilege Vulnerability

35. 7.5CVE-2021-28439EPSS 6.5%2021-04-13

    Windows TCP/IP Driver Denial of Service Vulnerability

36. 5.5CVE-2021-28438EPSS 0.7%2021-04-13

    Windows Console Driver Denial of Service Vulnerability

37. 5.5CVE-2021-28437EPSS 0.8%2021-04-13

    Windows Installer Information Disclosure Vulnerability

38. 7.8CVE-2021-28436EPSS 0.6%2021-04-13

    Windows Speech Runtime Elevation of Privilege Vulnerability

39. 5.5CVE-2021-28435EPSS 0.8%2021-04-13

    Windows Event Tracing Information Disclosure Vulnerability

40. 8.8CVE-2021-28434EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

41. 8.8CVE-2021-28358EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

42. 8.8CVE-2021-28357EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

43. 8.8CVE-2021-28356EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

44. 8.8CVE-2021-28355EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

45. 8.8CVE-2021-28354EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

46. 8.8CVE-2021-28353EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

47. 8.8CVE-2021-28352EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

48. 7.8CVE-2021-28351EPSS 0.6%2021-04-13

    Windows Speech Runtime Elevation of Privilege Vulnerability

49. 7.8CVE-2021-28350EPSS 0.8%2021-04-13

    Windows GDI+ Remote Code Execution Vulnerability

50. 7.8CVE-2021-28349EPSS 0.7%2021-04-13

    Windows GDI+ Remote Code Execution Vulnerability

51. 7.8CVE-2021-28348EPSS 0.7%2021-04-13

    Windows GDI+ Remote Code Execution Vulnerability

52. 7.8CVE-2021-28347EPSS 0.6%2021-04-13

    Windows Speech Runtime Elevation of Privilege Vulnerability

53. 8.8CVE-2021-28346EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

54. 8.8CVE-2021-28345EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

55. 8.8CVE-2021-28344EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

56. 8.8CVE-2021-28343EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

57. 8.8CVE-2021-28342EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

58. 8.8CVE-2021-28341EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

59. 8.8CVE-2021-28340EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

60. 8.8CVE-2021-28339EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

61. 8.8CVE-2021-28338EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

62. 8.8CVE-2021-28337EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

63. 8.8CVE-2021-28336EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

64. 8.8CVE-2021-28335EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

65. 8.8CVE-2021-28334EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

66. 8.8CVE-2021-28333EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

67. 8.8CVE-2021-28332EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

68. 8.8CVE-2021-28331EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

69. 8.8CVE-2021-28330EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

70. 8.8CVE-2021-28329EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

71. 6.5CVE-2021-28328EPSS 2.7%2021-04-13

    Windows DNS Information Disclosure Vulnerability

72. 8.8CVE-2021-28327EPSS 2.5%2021-04-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

73. 5.5CVE-2021-28326EPSS 1.0%2021-04-13

    Windows AppX Deployment Server Denial of Service Vulnerability

74. 6.5CVE-2021-28325EPSS 64%2021-04-13

    Windows SMB Information Disclosure Vulnerability

75. 7.5CVE-2021-28324EPSS 6.6%2021-04-13

    Windows SMB Information Disclosure Vulnerability

76. 6.5CVE-2021-28323EPSS 4.6%2021-04-13

    Windows DNS Information Disclosure Vulnerability

77. 7.8CVE-2021-28322EPSS 1.0%2021-04-13

    Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

78. 7.8CVE-2021-28321EPSS 1.3%2021-04-13

    Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

79. 7.8CVE-2021-28320EPSS 0.6%2021-04-13

    Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

80. 7.5CVE-2021-28319EPSS 10.0%2021-04-13

    Windows TCP/IP Driver Denial of Service Vulnerability

81. 5.5CVE-2021-28318EPSS 0.8%2021-04-13

    Windows GDI+ Information Disclosure Vulnerability

82. 5.5CVE-2021-28317EPSS 0.8%2021-04-13

    Microsoft Windows Codecs Library Information Disclosure Vulnerability

83. 4.2CVE-2021-28316EPSS 1.2%2021-04-13

    Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

84. 7.8CVE-2021-28315EPSS 1.6%2021-04-13

    Windows Media Video Decoder Remote Code Execution Vulnerability

85. 7.8CVE-2021-28314EPSS 0.6%2021-04-13

    Windows Hyper-V Elevation of Privilege Vulnerability

86. 7.8CVE-2021-28313EPSS 1.0%2021-04-13

    Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

87. 3.3CVE-2021-28312EPSS 6.6%2021-04-13

    Windows NTFS Denial of Service Vulnerability

88. 6.5CVE-2021-28311EPSS 2.7%2021-04-13

    Windows Application Compatibility Cache Denial of Service Vulnerability

89. 7.8CVE-2021-28310KEVEPSS 8.4%2021-04-13

    Win32k Elevation of Privilege Vulnerability

90. 5.5CVE-2021-28309EPSS 0.9%2021-04-13

    Windows Kernel Information Disclosure Vulnerability

91. 7.8CVE-2021-27096EPSS 0.6%2021-04-13

    NTFS Elevation of Privilege Vulnerability

92. 7.8CVE-2021-27095EPSS 4.3%2021-04-13

    Windows Media Video Decoder Remote Code Execution Vulnerability

93. 4.4CVE-2021-27094EPSS 1.0%2021-04-13

    Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

94. 5.5CVE-2021-27093EPSS 0.9%2021-04-13

    Windows Kernel Information Disclosure Vulnerability

95. 6.8CVE-2021-27092EPSS 2.8%2021-04-13

    Azure AD Web Sign-in Security Feature Bypass Vulnerability

96. 7.8CVE-2021-27091EPSS 0.6%2021-04-13

    RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

97. 7.8CVE-2021-27090EPSS 0.9%2021-04-13

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

98. 7.8CVE-2021-27089EPSS 2.4%2021-04-13

    Microsoft Internet Messaging API Remote Code Execution Vulnerability

99. 7.8CVE-2021-27088EPSS 0.6%2021-04-13

    Windows Event Tracing Elevation of Privilege Vulnerability

100. 7.8CVE-2021-27086EPSS 0.8%2021-04-13

     Windows Services and Controller App Elevation of Privilege Vulnerability