Security News > 2021 > August > Microsoft Patch Tuesday, August 2021 Edition
Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products.
Microsoft said attackers have seized upon CVE-2021-36948, which is a weakness in the Windows Update Medic service.
Last month, the company rushed out an emergency update to patch "PrintNightmare" - a critical hole in its Windows Print Spooler software that was being attacked in the wild.
"This change may impact Windows print clients in scenarios where non-elevated users were previously able to add or update printers. However, we strongly believe that the security risk justifies the change. This change will take effect with the installation of the security updates released on August?10, 2021 for all versions of Windows, and is documented as CVE-2021-34481."
August brings yet another critical patch for the Windows Remote Desktop service, and this time the flaw is in the Remote Desktop client instead of the server.
It's not a bad idea to hold off updating for a few days until Microsoft works out any kinks in the updates: AskWoody.com usually has the lowdown on any patches that are causing problems for Windows users.
News URL
https://krebsonsecurity.com/2021/08/microsoft-patch-tuesday-august-2021-edition/
Related news
- June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft (source)
- Microsoft June 2024 Patch Tuesday fixes 51 flaws, 18 RCEs (source)
- Microsoft July 2024 Patch Tuesday fixes 142 flaws, 4 zero-days (source)
- Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecast (source)
- July 2024 Patch Tuesday forecast: The end of an AV giant in the US (source)
- Critical Windows licensing bugs, plus two others under attack, top Patch Tuesday (source)
- Windows Patch Tuesday update might send a user to the BitLocker recovery screen (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-08-12 | CVE-2021-36948 | Unspecified vulnerability in Microsoft products Windows Update Medic Service Elevation of Privilege Vulnerability | 7.8 |
| 2021-07-16 | CVE-2021-34481 | Improper Privilege Management vulnerability in Microsoft products <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. | 8.8 |