Microsoft · Security update · July 13, 2021
KB5005563: July 2021 security update
KB5005563, released July 13, 2021, fixes 5 CVEs across 14 products. 2 of them are being exploited (CVE-2021-40444); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
5
2 rated Critical
Exploited
2
CVE-2021-40444
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9784
99th percentile
Priority of the 5 CVEs
Patch now 2
Urgent 1
High 1
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-40444 | Windows MSHTML Platform | Remote Code Execution | 8.8 | 0.9784 | KEVRansomwareDisclosedExploited |
| Patch now | CVE-2021-34448 | Microsoft Scripting Engine | Remote Code Execution | 6.8 | 0.4006 | KEVExploited |
| Urgent | CVE-2021-34497 | Windows MSHTML Platform | Remote Code Execution | 6.8 | 0.0215 | Exploitation Less Likely |
| High | CVE-2021-34446 | Windows HTML Platform | Security Feature Bypass | 8.0 | 0.0205 | Exploitation Less Likely |
| Routine | CVE-2021-34447 | Windows MSHTML Platform | Remote Code Execution | 6.8 | 0.0205 | Exploitation Less Likely |
Showing 1 to 5 of 5
1