Microsoft · Security update · November 9, 2021

KB5007215: November 2021 cumulative update for Windows 11 21H2

KB5007215, released November 9, 2021, fixes 23 CVEs across 4 products. 2 of them are being exploited (CVE-2021-34527); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
23
4 rated Critical
Exploited
2
CVE-2021-34527
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.9979
99th percentile

Priority of the 23 CVEs

Patch now 2 Urgent 4 High 10 Routine 7

Applies to

ProductBuild after install
Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for ARM64-based Systems22000.318
Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for x64-based Systems22000.318
Windows 11 version 21H2 for ARM64-based Systems22000.318
Windows 11 version 21H2 for x64-based Systems22000.318

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-34527 Windows Print Spooler Components Remote Code Execution 8.8 0.9979 KEVRansomwareDisclosedExploited
Patch now CVE-2021-41379 Windows Installer Elevation of Privilege 5.5 0.1945 KEVRansomwareExploited
Urgent CVE-2021-38666 Windows RDP Remote Code Execution 8.8 0.1518 More likely
Urgent CVE-2021-41356 Microsoft Windows Denial of Service 7.5 0.0302 More likely
Urgent CVE-2021-42279 Windows Scripting Remote Code Execution 4.2 0.0232 Exploitation Less Likely
Urgent CVE-2021-26443 Windows Virtual Machine Bus Remote Code Execution 9.0 0.0170 Exploitation Less Likely
High CVE-2021-38665 Windows RDP Information Disclosure 7.4 0.0702 Exploitation Less Likely
High CVE-2021-42276 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0249 Exploitation Less Likely
High CVE-2021-41378 Windows NTFS Remote Code Execution 7.8 0.0157 Exploitation Less Likely
High CVE-2021-42285 Windows Kernel Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-42283 Windows NTFS Elevation of Privilege 8.8 0.0049 Exploitation Less Likely
High CVE-2021-36957 Windows Desktop Bridge Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2021-41366 Windows Cred SSProvider Protocol Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2021-41367 Windows NTFS Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2021-41370 Windows NTFS Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2021-41377 Windows Fast FAT Driver Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
Routine CVE-2021-41351 Microsoft Edge (Chromium-based) in IE Mode Spoofing 4.3 0.0391 Exploitation Less Likely
Routine CVE-2021-42284 Role: Windows Hyper-V Denial of Service 6.8 0.0376 Exploitation Less Likely
Routine CVE-2021-38631 Windows RDP Information Disclosure 4.4 0.0188 DisclosedExploitation Less Likely
Routine CVE-2021-41371 Windows RDP Information Disclosure 4.4 0.0165 DisclosedExploitation Less Likely
Routine CVE-2021-42280 Windows Feedback Hub Elevation of Privilege 5.5 0.0096 Exploitation Less Likely
Routine CVE-2021-42277 Windows Diagnostic Hub Elevation of Privilege 5.5 0.0087 Exploitation Less Likely
Routine CVE-2021-42274 Role: Windows Hyper-V Denial of Service 6.8 0.0069 Exploitation Less Likely
Showing 1 to 23 of 23 1