Security News > 2021 > April > Microsoft Patch Tuesday, April 2021 Edition
Microsoft today released updates to plug at least 110 security holes in its Windows operating systems and other products.
The patches include four security fixes for Microsoft Exchange Server - the same systems that have been besieged by attacks on four separate bugs in the email software over the past month.
Interestingly, all four were reported by the U.S. National Security Agency, although Microsoft says it also found two of the bugs internally.
Allan Laska, senior security architect at Recorded Future, notes that there are several remote code execution vulnerabilities in Microsoft Office products released this month as well.
CVE-2021-28454 and CVE-2021-28451 involve Excel, while CVE-2021-28453 is in Microsoft Word and CVE-2021-28449 is in Microsoft Office.
Other Microsoft products that got security updates this month include Edge, Azure and Azure DevOps Server, SharePoint Server, Hyper-V, Team Foundation Server, and Visual Studio.
News URL
https://krebsonsecurity.com/2021/04/microsoft-patch-tuesday-april-2021-edition/
Related news
- Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws (source)
- Microsoft holds last Patch Tuesday of the year with 72 gifts for admins (source)
- Patch Tuesday: Microsoft Patches One Actively Exploited Vulnerability, Among Others (source)
- What Is Patch Tuesday? Microsoft’s Monthly Update Explained (source)
- Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws (source)
- Microsoft says premature patch could make Windows Recall forget how to work (source)
- December 2024 Patch Tuesday forecast: The secure future initiative impact (source)
- Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast (source)
- Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability (source)
- January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-04-13 | CVE-2021-28449 | Unspecified vulnerability in Microsoft 365 Apps, Excel and Office Microsoft Office Remote Code Execution Vulnerability | 0.0 |
| 2021-04-13 | CVE-2021-28451 | Unspecified vulnerability in Microsoft products Microsoft Excel Remote Code Execution Vulnerability | 0.0 |
| 2021-04-13 | CVE-2021-28453 | Unspecified vulnerability in Microsoft products Microsoft Word Remote Code Execution Vulnerability | 0.0 |
| 2021-04-13 | CVE-2021-28454 | Use After Free vulnerability in Microsoft products Microsoft Excel Remote Code Execution Vulnerability | 0.0 |