Microsoft · Security update · June 8, 2021

KB5003667: June 2021 security update

KB5003667, released June 8, 2021, fixes 13 CVEs across 4 products. 5 of them are being exploited (CVE-2021-1675); 5 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now5 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
13
3 rated Critical
Exploited
5
CVE-2021-1675
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8531
99th percentile

Priority of the 13 CVEs

Patch now 5 Urgent 2 High 5 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-1675 Windows Print Spooler Components Remote Code Execution 7.8 0.8531 KEVRansomwareExploited
Patch now CVE-2021-33742 Windows MSHTML Platform Remote Code Execution 7.5 0.5941 KEVExploited
Patch now CVE-2021-31956 Windows NTFS Elevation of Privilege 7.8 0.2227 KEVExploited
Patch now CVE-2021-31199 Windows Cryptographic Services Elevation of Privilege 5.2 0.0298 KEVExploited
Patch now CVE-2021-31201 Windows Cryptographic Services Elevation of Privilege 5.2 0.0262 KEVExploited
Urgent CVE-2021-31959 Microsoft Scripting Engine Remote Code Execution 6.4 0.0923 More likely
Urgent CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
High CVE-2021-31962 Windows Kerberos Security Feature Bypass 9.4 0.0381 Exploitation Less Likely
High CVE-2021-31968 Windows Remote Desktop Denial of Service 7.5 0.0318 DisclosedExploitation Less Likely
High CVE-2021-31958 Windows NTLM Elevation of Privilege 7.5 0.0256 Exploitation Less Likely
High CVE-2021-31953 Windows Filter Manager Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-31973 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
Routine CVE-2021-31971 Windows HTML Platform Security Feature Bypass 6.8 0.0209 Exploitation Less Likely
Showing 1 to 13 of 13 1