Microsoft · Security update · October 12, 2021
KB5006743: October 2021 security update
KB5006743, released October 12, 2021, fixes 20 CVEs across 4 products. One of them is being exploited (CVE-2021-40449); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
20
None rated Critical
Exploited
1
CVE-2021-40449
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8194
99th percentile
Priority of the 20 CVEs
Patch now 1
Urgent 4
High 8
Routine 7
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-40449 | Windows Win32K | Elevation of Privilege | 7.8 | 0.8194 | KEVRansomwareExploited |
| Urgent | CVE-2021-36970 | Windows Print Spooler Components | Spoofing | 8.8 | 0.0306 | More likely |
| Urgent | CVE-2021-40443 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0065 | More likely |
| Urgent | CVE-2021-40466 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0065 | More likely |
| Urgent | CVE-2021-40467 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0054 | More likely |
| High | CVE-2021-40469 | Role: DNS Server | Remote Code Execution | 7.2 | 0.0758 | DisclosedExploitation Less Likely |
| High | CVE-2021-36953 | Windows TCP/IP | Denial of Service | 7.5 | 0.0505 | Exploitation Less Likely |
| High | CVE-2021-40465 | Windows Text Shaping | Remote Code Execution | 7.8 | 0.0247 | Exploitation Less Likely |
| High | CVE-2021-41331 | Microsoft Windows Codecs Library | Remote Code Execution | 7.8 | 0.0203 | Exploitation Less Likely |
| High | CVE-2021-41340 | Microsoft Graphics Component | Remote Code Execution | 7.8 | 0.0203 | Exploitation Less Likely |
| High | CVE-2021-41335 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0137 | DisclosedExploitation Less Likely |
| High | CVE-2021-40489 | Windows Storage Spaces Controller | Elevation of Privilege | 7.8 | 0.0084 | Exploitation Less Likely |
| High | CVE-2021-26442 | Windows HTTP.sys | Elevation of Privilege | 7.0 | 0.0079 | Exploitation Less Likely |
| Routine | CVE-2021-41332 | Windows Print Spooler Components | Information Disclosure | 6.5 | 0.0272 | Exploitation Less Likely |
| Routine | CVE-2021-41342 | Windows MSHTML Platform | Remote Code Execution | 6.8 | 0.0163 | Exploitation Less Likely |
| Routine | CVE-2021-40460 | Windows Remote Procedure Call Runtime | Security Feature Bypass | 6.5 | 0.0161 | Exploitation Less Likely |
| Routine | CVE-2021-38662 | Windows Fast FAT Driver | Information Disclosure | 5.5 | 0.0078 | Exploitation Less Likely |
| Routine | CVE-2021-38663 | Windows exFAT File System | Information Disclosure | 5.5 | 0.0073 | Exploitation Less Likely |
| Routine | CVE-2021-41343 | Windows Fast FAT Driver | Information Disclosure | 5.5 | 0.0073 | Exploitation Less Likely |
| Routine | CVE-2021-40455 | Windows Installer | Spoofing | 5.5 | 0.0056 | Exploitation Less Likely |
Showing 1 to 20 of 20
1