{
  "fix": "KB5004294",
  "url": "https://patchblox.com/security/fix/microsoft/kb5004294",
  "summary": "KB5004294, released July 13, 2021, fixes 43 CVEs across 2 products. 2 of them are being exploited (CVE-2021-34448); 2 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "July 2021 security update",
  "released": "2021-07-13T12:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2021-34448, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 43,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.40062,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://support.microsoft.com/help/5004294",
  "appliesTo": [
    {
      "product": "Windows Server 2012",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2012",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows Server 2012 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2012-server-core-installation",
      "fixedVersion": "",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2021-34448",
      "url": "https://patchblox.com/security/cve/CVE-2021-34448",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Scripting Engine",
      "impact": "Remote Code Execution",
      "priority": "Patch now",
      "severity": "Critical",
      "cvss": 6.8,
      "epss": 0.40062,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-31979",
      "url": "https://patchblox.com/security/cve/CVE-2021-31979",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0454,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34494",
      "url": "https://patchblox.com/security/cve/CVE-2021-34494",
      "title": "Windows DNS Server Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.8,
      "epss": 0.04045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33780",
      "url": "https://patchblox.com/security/cve/CVE-2021-33780",
      "title": "Windows DNS Server Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.02707,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34497",
      "url": "https://patchblox.com/security/cve/CVE-2021-34497",
      "title": "Windows MSHTML Platform Remote Code Execution Vulnerability",
      "component": "Windows MSHTML Platform",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 6.8,
      "epss": 0.02145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-17049",
      "url": "https://patchblox.com/security/cve/CVE-2020-17049",
      "title": "Kerberos KDC Security Feature Bypass Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Security Feature Bypass",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.2,
      "epss": 0.13794,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-31183",
      "url": "https://patchblox.com/security/cve/CVE-2021-31183",
      "title": "Windows TCP/IP Driver Denial of Service Vulnerability",
      "component": "Windows TCP/IP",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.03843,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34504",
      "url": "https://patchblox.com/security/cve/CVE-2021-34504",
      "title": "Windows Address Book Remote Code Execution Vulnerability",
      "component": "Windows Address Book",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.03465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33788",
      "url": "https://patchblox.com/security/cve/CVE-2021-33788",
      "title": "Windows LSA Denial of Service Vulnerability",
      "component": "Windows Local Security Authority Subsystem Service (LSASS)",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.0328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34476",
      "url": "https://patchblox.com/security/cve/CVE-2021-34476",
      "title": "Bowser.sys Denial of Service Vulnerability",
      "component": "Common Internet File System",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.0328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34442",
      "url": "https://patchblox.com/security/cve/CVE-2021-34442",
      "title": "Windows DNS Server Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0317,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34492",
      "url": "https://patchblox.com/security/cve/CVE-2021-34492",
      "title": "Windows Certificate Spoofing Vulnerability",
      "component": "Windows PFX Encryption",
      "impact": "Spoofing",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.02468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2021-33749",
      "url": "https://patchblox.com/security/cve/CVE-2021-33749",
      "title": "Windows DNS Snap-in Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.02416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33750",
      "url": "https://patchblox.com/security/cve/CVE-2021-33750",
      "title": "Windows DNS Snap-in Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.02416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33752",
      "url": "https://patchblox.com/security/cve/CVE-2021-33752",
      "title": "Windows DNS Snap-in Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.02416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33756",
      "url": "https://patchblox.com/security/cve/CVE-2021-33756",
      "title": "Windows DNS Snap-in Remote Code Execution Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.02405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34441",
      "url": "https://patchblox.com/security/cve/CVE-2021-34441",
      "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability",
      "component": "Microsoft Windows Media Foundation",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.02217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33786",
      "url": "https://patchblox.com/security/cve/CVE-2021-33786",
      "title": "Windows LSA Security Feature Bypass Vulnerability",
      "component": "Windows Local Security Authority Subsystem Service (LSASS)",
      "impact": "Security Feature Bypass",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.02115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34446",
      "url": "https://patchblox.com/security/cve/CVE-2021-34446",
      "title": "Windows HTML Platforms Security Feature Bypass Vulnerability",
      "component": "Windows HTML Platform",
      "impact": "Security Feature Bypass",
      "priority": "High",
      "severity": "Important",
      "cvss": 8,
      "epss": 0.02045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33746",
      "url": "https://patchblox.com/security/cve/CVE-2021-33746",
      "title": "Windows DNS Server Remote Code Execution Vulnerability",
      "component": "Microsoft Windows DNS",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8,
      "epss": 0.01995,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33754",
      "url": "https://patchblox.com/security/cve/CVE-2021-33754",
      "title": "Windows DNS Server Remote Code Execution Vulnerability",
      "component": "Microsoft Windows DNS",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8,
      "epss": 0.01981,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34516",
      "url": "https://patchblox.com/security/cve/CVE-2021-34516",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Win32K",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34498",
      "url": "https://patchblox.com/security/cve/CVE-2021-34498",
      "title": "Windows GDI Elevation of Privilege Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01058,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34514",
      "url": "https://patchblox.com/security/cve/CVE-2021-34514",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00698,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34511",
      "url": "https://patchblox.com/security/cve/CVE-2021-34511",
      "title": "Windows Installer Elevation of Privilege Vulnerability",
      "component": "Windows Installer",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00569,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34460",
      "url": "https://patchblox.com/security/cve/CVE-2021-34460",
      "title": "Storage Spaces Controller Elevation of Privilege Vulnerability",
      "component": "Windows Storage Spaces Controller",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34456",
      "url": "https://patchblox.com/security/cve/CVE-2021-34456",
      "title": "Windows Remote Access Connection Manager Elevation of Privilege Vulnerability",
      "component": "Windows Remote Access Connection Manager",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00557,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34455",
      "url": "https://patchblox.com/security/cve/CVE-2021-34455",
      "title": "Windows File History Service Elevation of Privilege Vulnerability",
      "component": "Windows File History Service",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34459",
      "url": "https://patchblox.com/security/cve/CVE-2021-34459",
      "title": "Windows AppContainer Elevation Of Privilege Vulnerability",
      "component": "Windows AppContainer",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34444",
      "url": "https://patchblox.com/security/cve/CVE-2021-34444",
      "title": "Windows DNS Server Denial of Service Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.03457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34507",
      "url": "https://patchblox.com/security/cve/CVE-2021-34507",
      "title": "Windows Remote Assistance Information Disclosure Vulnerability",
      "component": "Windows Remote Assistance",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.03255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33764",
      "url": "https://patchblox.com/security/cve/CVE-2021-33764",
      "title": "Windows Key Distribution Center Information Disclosure Vulnerability",
      "component": "Windows Key Distribution Center",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.9,
      "epss": 0.03049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33757",
      "url": "https://patchblox.com/security/cve/CVE-2021-33757",
      "title": "Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability",
      "component": "Windows Security Account Manager",
      "impact": "Security Feature Bypass",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.02951,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33745",
      "url": "https://patchblox.com/security/cve/CVE-2021-33745",
      "title": "Windows DNS Server Denial of Service Vulnerability",
      "component": "Role: DNS Server",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.02869,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34499",
      "url": "https://patchblox.com/security/cve/CVE-2021-34499",
      "title": "Windows DNS Server Denial of Service Vulnerability",
      "component": "Microsoft Windows DNS",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.02869,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33783",
      "url": "https://patchblox.com/security/cve/CVE-2021-33783",
      "title": "Windows SMB Information Disclosure Vulnerability",
      "component": "Windows SMB",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.02766,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33782",
      "url": "https://patchblox.com/security/cve/CVE-2021-33782",
      "title": "Windows Authenticode Spoofing Vulnerability",
      "component": "Windows Authenticode",
      "impact": "Spoofing",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.02247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34447",
      "url": "https://patchblox.com/security/cve/CVE-2021-34447",
      "title": "Windows MSHTML Platform Remote Code Execution Vulnerability",
      "component": "Windows MSHTML Platform",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.8,
      "epss": 0.02045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34496",
      "url": "https://patchblox.com/security/cve/CVE-2021-34496",
      "title": "Windows GDI Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.0204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33763",
      "url": "https://patchblox.com/security/cve/CVE-2021-33763",
      "title": "Windows Remote Access Connection Manager Information Disclosure Vulnerability",
      "component": "Windows Remote Access Connection Manager",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.0088,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34440",
      "url": "https://patchblox.com/security/cve/CVE-2021-34440",
      "title": "GDI\u002B Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.0088,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-34457",
      "url": "https://patchblox.com/security/cve/CVE-2021-34457",
      "title": "Windows Remote Access Connection Manager Information Disclosure Vulnerability",
      "component": "Windows Remote Access Connection Manager",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00872,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33765",
      "url": "https://patchblox.com/security/cve/CVE-2021-33765",
      "title": "Windows Installer Spoofing Vulnerability",
      "component": "Windows Installer",
      "impact": "Spoofing",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.2,
      "epss": 0.00727,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}