Microsoft · Security update · June 8, 2021

KB5003697: June 2021 security update

KB5003697, released June 8, 2021, fixes 17 CVEs across 2 products. 5 of them are being exploited (CVE-2021-1675); 5 on CISA KEV. Patch Radar priority: Patch now.

Patch now5 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
17
3 rated Critical
Exploited
5
CVE-2021-1675
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8531
99th percentile

Priority of the 17 CVEs

Patch now 5 Urgent 2 High 8 Routine 2

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-1675 Windows Print Spooler Components Remote Code Execution 7.8 0.8531 KEVRansomwareExploited
Patch now CVE-2021-33742 Windows MSHTML Platform Remote Code Execution 7.5 0.5941 KEVExploited
Patch now CVE-2021-31956 Windows NTFS Elevation of Privilege 7.8 0.2227 KEVExploited
Patch now CVE-2021-31199 Windows Cryptographic Services Elevation of Privilege 5.2 0.0298 KEVExploited
Patch now CVE-2021-31201 Windows Cryptographic Services Elevation of Privilege 5.2 0.0262 KEVExploited
Urgent CVE-2021-31959 Microsoft Scripting Engine Remote Code Execution 6.4 0.0923 More likely
Urgent CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
High CVE-2021-31974 Windows Network File System Denial of Service 7.5 0.0673 Exploitation Less Likely
High CVE-2021-31962 Windows Kerberos Security Feature Bypass 9.4 0.0381 Exploitation Less Likely
High CVE-2021-31975 Windows Network File System Information Disclosure 7.5 0.0366 Exploitation Less Likely
High CVE-2021-31976 Windows Network File System Information Disclosure 7.5 0.0366 Exploitation Less Likely
High CVE-2021-31968 Windows Remote Desktop Denial of Service 7.5 0.0318 DisclosedExploitation Less Likely
High CVE-2021-31958 Windows NTLM Elevation of Privilege 7.5 0.0256 Exploitation Less Likely
High CVE-2021-31953 Windows Filter Manager Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-31973 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
Routine CVE-2021-31971 Windows HTML Platform Security Feature Bypass 6.8 0.0209 Exploitation Less Likely
Routine CVE-2021-31970 Windows TCP/IP Security Feature Bypass 5.5 0.0086 Exploitation Less Likely
Showing 1 to 17 of 17 1