Microsoft · Security update · December 14, 2021
KB5008271: December 2021 security update
KB5008271, released December 14, 2021, fixes 15 CVEs across 4 products. One of them is being exploited (CVE-2021-43226); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
15
2 rated Critical
Exploited
1
CVE-2021-43226
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.1215
96th percentile
Priority of the 15 CVEs
Patch now 1
Urgent 5
High 7
Routine 2
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-43226 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0328 | KEVRansomwareExploited |
| Urgent | CVE-2021-43883 | Windows Installer | Elevation of Privilege | 7.8 | 0.1215 | DisclosedMore likely |
| Urgent | CVE-2021-43217 | Windows Encrypting File System (EFS) | Remote Code Execution | 8.1 | 0.0652 | Exploitation Less Likely |
| Urgent | CVE-2021-43215 | Internet Storage Name Service | Remote Code Execution | 9.8 | 0.0287 | More likely |
| Urgent | CVE-2021-41333 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.0108 | DisclosedMore likely |
| Urgent | CVE-2021-43207 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0068 | More likely |
| High | CVE-2021-43893 | Windows Encrypting File System (EFS) | Elevation of Privilege | 7.5 | 0.0672 | DisclosedExploitation Less Likely |
| High | CVE-2021-43222 | Windows Message Queuing | Information Disclosure | 7.5 | 0.0317 | Exploitation Less Likely |
| High | CVE-2021-43236 | Windows Message Queuing | Information Disclosure | 7.5 | 0.0317 | Exploitation Less Likely |
| High | CVE-2021-43234 | Role: Windows Fax Service | Remote Code Execution | 7.8 | 0.0218 | Exploitation Less Likely |
| High | CVE-2021-43229 | Windows NTFS | Elevation of Privilege | 7.8 | 0.0179 | Exploitation Less Likely |
| High | CVE-2021-43238 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0091 | Exploitation Less Likely |
| High | CVE-2021-43230 | Windows NTFS | Elevation of Privilege | 7.8 | 0.0057 | Exploitation Less Likely |
| Routine | CVE-2021-43224 | Windows Common Log File System Driver | Information Disclosure | 5.5 | 0.0393 | Exploitation Less Likely |
| Routine | CVE-2021-43216 | Microsoft Local Security Authority Server (lsasrv) | Information Disclosure | 6.5 | 0.0343 | Exploitation Less Likely |
Showing 1 to 15 of 15
1