Microsoft · Security update · June 8, 2021

KB5003636: June 2021 security update

KB5003636, released June 8, 2021, fixes 3 CVEs across 9 products. One of them is being exploited (CVE-2021-33742); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
3
2 rated Critical
Exploited
1
CVE-2021-33742
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.5941
99th percentile

Priority of the 3 CVEs

Patch now 1 Urgent 1 High 0 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-33742 Windows MSHTML Platform Remote Code Execution 7.5 0.5941 KEVExploited
Urgent CVE-2021-31959 Microsoft Scripting Engine Remote Code Execution 6.4 0.0923 More likely
Routine CVE-2021-31971 Windows HTML Platform Security Feature Bypass 6.8 0.0209 Exploitation Less Likely
Showing 1 to 3 of 3 1