Microsoft · Security update · September 14, 2021
KB5005618: September 2021 security update
KB5005618, released September 14, 2021, fixes 22 CVEs across 4 products. One of them is being exploited (CVE-2021-36955); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
22
1 rated Critical
Exploited
1
CVE-2021-36955
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.3079
98th percentile
Priority of the 22 CVEs
Patch now 1
Urgent 6
High 9
Routine 6
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-36955 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0407 | KEVRansomwareExploited |
| Urgent | CVE-2021-36958 | Windows Print Spooler Components | Remote Code Execution | 7.8 | 0.3079 | DisclosedMore likely |
| Urgent | CVE-2021-36965 | Windows WLAN Auto Config Service | Remote Code Execution | 8.8 | 0.0468 | Exploitation Less Likely |
| Urgent | CVE-2021-38639 | Windows Win32K | Elevation of Privilege | 7.8 | 0.0136 | More likely |
| Urgent | CVE-2021-36963 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0122 | More likely |
| Urgent | CVE-2021-38633 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0103 | More likely |
| Urgent | CVE-2021-38671 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.0055 | More likely |
| High | CVE-2021-1678 | Windows NTLM | Spoofing | 8.8 | 0.1003 | Exploitation Less Likely |
| High | CVE-2021-40447 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.0071 | Exploitation Less Likely |
| High | CVE-2021-38667 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.0055 | Exploitation Less Likely |
| High | CVE-2021-36968 | Microsoft Windows DNS | Elevation of Privilege | 7.8 | 0.0055 | DisclosedExploitation Less Likely |
| High | CVE-2021-36964 | Windows Event Tracing | Elevation of Privilege | 7.8 | 0.0053 | Exploitation Less Likely |
| High | CVE-2021-38625 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0053 | Exploitation Less Likely |
| High | CVE-2021-38626 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0053 | Exploitation Less Likely |
| High | CVE-2021-38628 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0053 | Exploitation Less Likely |
| High | CVE-2021-38638 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0052 | Exploitation Less Likely |
| Routine | CVE-2021-38629 | Windows TDX.sys | Information Disclosure | 6.5 | 0.0269 | Exploitation Less Likely |
| Routine | CVE-2021-36959 | Windows Authenticode | Spoofing | 5.5 | 0.0135 | Exploitation Less Likely |
| Routine | CVE-2021-36962 | Windows Installer | Information Disclosure | 5.5 | 0.0129 | Exploitation Less Likely |
| Routine | CVE-2021-36961 | Windows Installer | Denial of Service | 5.5 | 0.0106 | Exploitation Less Likely |
| Routine | CVE-2021-38635 | Windows Redirected Drive Buffering | Information Disclosure | 5.5 | 0.0088 | Exploitation Less Likely |
| Routine | CVE-2021-38636 | Windows Redirected Drive Buffering | Information Disclosure | 5.5 | 0.0088 | Exploitation Less Likely |
Showing 1 to 22 of 22
1