Microsoft · Security update · June 8, 2021

KB5003695: June 2021 security update

KB5003695, released June 8, 2021, fixes 9 CVEs across 4 products. 4 of them are being exploited (CVE-2021-1675); 4 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now4 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
9
1 rated Critical
Exploited
4
CVE-2021-1675
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.8531
99th percentile

Priority of the 9 CVEs

Patch now 4 Urgent 1 High 4 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-1675 Windows Print Spooler Components Remote Code Execution 7.8 0.8531 KEVRansomwareExploited
Patch now CVE-2021-31956 Windows NTFS Elevation of Privilege 7.8 0.2227 KEVExploited
Patch now CVE-2021-31199 Windows Cryptographic Services Elevation of Privilege 5.2 0.0298 KEVExploited
Patch now CVE-2021-31201 Windows Cryptographic Services Elevation of Privilege 5.2 0.0262 KEVExploited
Urgent CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
High CVE-2021-31962 Windows Kerberos Security Feature Bypass 9.4 0.0381 Exploitation Less Likely
High CVE-2021-31958 Windows NTLM Elevation of Privilege 7.5 0.0256 Exploitation Less Likely
High CVE-2021-31953 Windows Filter Manager Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-31973 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
Showing 1 to 9 of 9 1