Microsoft Patch Tuesday, May 2021: the CVEs

Microsoft Patch Tuesday May 2021: the CVEs Microsoft published on 11 May 2021, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Apr 2021, Mar 2021, Feb 2021, Jan 2021, Dec 2020, Nov 2020, Oct 2020, Sep 2020, Aug 2020, Jul 2020, Jun 2020, May 2020. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.4CVE-2021-31936EPSS 3.3%2021-05-11

   Microsoft Accessibility Insights for Web Information Disclosure Vulnerability

2. 7.8CVE-2021-31214EPSS 2.9%2021-05-11

   Visual Studio Code Remote Code Execution Vulnerability

3. 7.8CVE-2021-31213EPSS 53%2021-05-11

   Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

4. 7.8CVE-2021-31211EPSS 2.5%2021-05-11

   Visual Studio Code Remote Code Execution Vulnerability

5. 6.5CVE-2021-31209EPSS 2.6%2021-05-11

   Microsoft Exchange Server Spoofing Vulnerability

6. 7.8CVE-2021-31208EPSS 0.6%2021-05-11

   Windows Container Manager Service Elevation of Privilege Vulnerability

7. 6.6CVE-2021-31207KEVExploitEPSS 99.7%2021-05-11

   Microsoft Exchange Server Security Feature Bypass Vulnerability

8. 6.5CVE-2021-31205EPSS 2.9%2021-05-11

   Windows SMB Client Security Feature Bypass Vulnerability

9. 7.3CVE-2021-31204EPSS 1.2%2021-05-11

   .NET and Visual Studio Elevation of Privilege Vulnerability

10. 7.2CVE-2021-31200EPSS 2.5%2021-05-11

    Common Utilities Remote Code Execution Vulnerability

11. 7.8CVE-2021-31198EPSS 4.9%2021-05-11

    Microsoft Exchange Server Remote Code Execution Vulnerability

12. 6.5CVE-2021-31195ExploitEPSS 74%2021-05-11

    Microsoft Exchange Server Remote Code Execution Vulnerability

13. 8.8CVE-2021-31194EPSS 2.4%2021-05-11

    OLE Automation Remote Code Execution Vulnerability

14. 7.8CVE-2021-31193EPSS 0.5%2021-05-11

    Windows SSDP Service Elevation of Privilege Vulnerability

15. 7.8CVE-2021-31192EPSS 2.3%2021-05-11

    Windows Media Foundation Core Remote Code Execution Vulnerability

16. 5.5CVE-2021-31191EPSS 0.8%2021-05-11

    Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

17. 7.8CVE-2021-31190EPSS 0.5%2021-05-11

    Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

18. 7.8CVE-2021-31188EPSS 1.4%2021-05-11

    Windows Graphics Component Elevation of Privilege Vulnerability

19. 7.8CVE-2021-31187EPSS 1.1%2021-05-11

    Windows WalletService Elevation of Privilege Vulnerability

20. 7.4CVE-2021-31186EPSS 3.0%2021-05-11

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

21. 5.5CVE-2021-31185EPSS 0.6%2021-05-11

    Windows Desktop Bridge Denial of Service Vulnerability

22. 5.5CVE-2021-31184EPSS 1.6%2021-05-11

    Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

23. 7.1CVE-2021-31182EPSS 0.8%2021-05-11

    Microsoft Bluetooth Driver Spoofing Vulnerability

24. 8.8CVE-2021-31181ExploitEPSS 29%2021-05-11

    Microsoft SharePoint Remote Code Execution Vulnerability

25. 7.8CVE-2021-31180EPSS 2.3%2021-05-11

    Microsoft Office Graphics Remote Code Execution Vulnerability

26. 7.8CVE-2021-31179EPSS 13%2021-05-11

    Microsoft Office Remote Code Execution Vulnerability

27. 5.5CVE-2021-31178EPSS 16%2021-05-11

    Microsoft Office Information Disclosure Vulnerability

28. 7.8CVE-2021-31177EPSS 3.1%2021-05-11

    Microsoft Office Remote Code Execution Vulnerability

29. 7.8CVE-2021-31176EPSS 3.0%2021-05-11

    Microsoft Office Remote Code Execution Vulnerability

30. 7.8CVE-2021-31175EPSS 3.2%2021-05-11

    Microsoft Office Remote Code Execution Vulnerability

31. 5.5CVE-2021-31174EPSS 2.9%2021-05-11

    Microsoft Excel Information Disclosure Vulnerability

32. 5.3CVE-2021-31173EPSS 2.1%2021-05-11

    Microsoft SharePoint Server Information Disclosure Vulnerability

33. 7.1CVE-2021-31172EPSS 1.8%2021-05-11

    Microsoft SharePoint Server Spoofing Vulnerability

34. 4.1CVE-2021-31171EPSS 0.6%2021-05-11

    Microsoft SharePoint Information Disclosure Vulnerability

35. 7.8CVE-2021-31170EPSS 1.0%2021-05-11

    Windows Graphics Component Elevation of Privilege Vulnerability

36. 7.8CVE-2021-31169EPSS 1.0%2021-05-11

    Windows Container Manager Service Elevation of Privilege Vulnerability

37. 7.8CVE-2021-31168EPSS 1.0%2021-05-11

    Windows Container Manager Service Elevation of Privilege Vulnerability

38. 7.8CVE-2021-31167EPSS 1.0%2021-05-11

    Windows Container Manager Service Elevation of Privilege Vulnerability

39. 9.8CVE-2021-31166KEVExploitEPSS 99.8%2021-05-11

    HTTP Protocol Stack Remote Code Execution Vulnerability

40. 7.8CVE-2021-31165EPSS 1.0%2021-05-11

    Windows Container Manager Service Elevation of Privilege Vulnerability

41. 5.5CVE-2021-28479EPSS 0.8%2021-05-11

    Windows CSC Service Information Disclosure Vulnerability

42. 7.6CVE-2021-28478EPSS 1.6%2021-05-11

    Microsoft SharePoint Server Spoofing Vulnerability

43. 9.9CVE-2021-28476EPSS 39%2021-05-11

    Windows Hyper-V Remote Code Execution Vulnerability

44. 8.8CVE-2021-28474EPSS 51%2021-05-11

    Microsoft SharePoint Server Remote Code Execution Vulnerability

45. 7.8CVE-2021-28465EPSS 3.7%2021-05-11

    Web Media Extensions Remote Code Execution Vulnerability

46. 6.1CVE-2021-28461EPSS 1.3%2021-05-11

    Dynamics Finance and Operations Cross-site Scripting Vulnerability

47. 8.8CVE-2021-28455EPSS 2.1%2021-05-11

    Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

48. 8.8CVE-2021-27068EPSS 54%2021-05-11

    Visual Studio Remote Code Execution Vulnerability

49. 7.2CVE-2021-26422EPSS 2.2%2021-05-11

    Skype for Business and Lync Remote Code Execution Vulnerability

50. 6.5CVE-2021-26421EPSS 1.4%2021-05-11

    Skype for Business and Lync Spoofing Vulnerability

51. 7.5CVE-2021-26419EPSS 23%2021-05-11

    Scripting Engine Memory Corruption Vulnerability

52. 4.6CVE-2021-26418EPSS 1.2%2021-05-11

    Microsoft SharePoint Server Spoofing Vulnerability