Microsoft · Security update · June 8, 2021

KB5003681: June 2021 security update

KB5003681, released June 8, 2021, fixes 15 CVEs across 4 products. 4 of them are being exploited (CVE-2021-1675); 4 on CISA KEV. Patch Radar priority: Patch now.

Patch now4 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
15
1 rated Critical
Exploited
4
CVE-2021-1675
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.8531
99th percentile

Priority of the 15 CVEs

Patch now 4 Urgent 1 High 8 Routine 2

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-1675 Windows Print Spooler Components Remote Code Execution 7.8 0.8531 KEVRansomwareExploited
Patch now CVE-2021-31956 Windows NTFS Elevation of Privilege 7.8 0.2227 KEVExploited
Patch now CVE-2021-31199 Windows Cryptographic Services Elevation of Privilege 5.2 0.0298 KEVExploited
Patch now CVE-2021-31201 Windows Cryptographic Services Elevation of Privilege 5.2 0.0262 KEVExploited
Urgent CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
High CVE-2021-31974 Windows Network File System Denial of Service 7.5 0.0673 Exploitation Less Likely
High CVE-2021-31962 Windows Kerberos Security Feature Bypass 9.4 0.0381 Exploitation Less Likely
High CVE-2021-31975 Windows Network File System Information Disclosure 7.5 0.0366 Exploitation Less Likely
High CVE-2021-31976 Windows Network File System Information Disclosure 7.5 0.0366 Exploitation Less Likely
High CVE-2021-31968 Windows Remote Desktop Denial of Service 7.5 0.0318 DisclosedExploitation Less Likely
High CVE-2021-31958 Windows NTLM Elevation of Privilege 7.5 0.0256 Exploitation Less Likely
High CVE-2021-31953 Windows Filter Manager Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-31973 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
Routine CVE-2021-31970 Windows TCP/IP Security Feature Bypass 5.5 0.0086 Exploitation Less Likely
Routine CVE-2021-31972 Windows Event Logging Service Information Disclosure 5.5 0.0076 Exploitation Less Likely
Showing 1 to 15 of 15 1