March 2021 – Microsoft Patch Tuesday and Other Patches

Posted on March 13, 2021 by harjit

Update sign and text on a computer keyboard button 3D illustration.

Microsoft has released fixes for 82 vulnerabilities, with 10 updates classified as Critical and 72 as Important. Here’s an updated announcement (2021-02-09) from Microsoft: Deploy Windows SSUs and LCUs together with one cumulative update –

Beginning with the February 2021 LCU, we will now publish all future cumulative updates and SSUs for Windows 10, version 2004 and above together as one cumulative monthly update to the normal release category in WSUS.

LCU = Latest Cummulative Update
SSU – Servicing Stack Update

UPDATE – 2021-03-14:
DYMO Label Printer fix for BSOD issues.

UPDATE – 2021-03-13:
Microsoft shares temporary fix for Windows 10 printing crashes

UPDATE – 2013-03-13:
Updates on Microsoft Exchange Server Vulnerabilities (CISA)

UPDATE – 2021-03-10:
Windows 10 KB5000802 (March) update is crashing PCs with BSOD
Windows 10 BSOD crashes include the both workstation and server versions running March 2021 cumulative updates:

KB5000802: Windows 10 2004/20H2 & Windows Server 2004/20H2
KB5000808: Windows 10 1909 & Windows Server 1909
KB5000822: Windows 10 1809 & Windows Server 2019
KB5000809: Windows 10 1803 & Windows Server 1803

Zero-Day Vulnerabilities Fixes:
1. Internet Explorer Memory Corruption Vulnerability (CVE-2021-26411)
2. Internet Explorer Remote Code Execution Vulnerability (CVE-2021-27085)
3. Windows Win32k Elevation of Privilege Vulnerability (CVE-2021-27077)
4. Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-27078)

Windows 10 Updates for February 2021:

Windows 10 version 1507 — KB5000807 (OS Build 10240.18874)
Windows 10 version 1607 — KB5000803 (OS Build 14393.4283)
Windows 10 version 1703 — KB5000812 (OS Build 15063.2679)
(Update: 3/9/21 End of support for Windows 10, version 1703 )
Windows 10 version 1709 — EOS
Windows 10 version 1803 — KB5000809 (OS Build 17134.2087)
Windows 10 version 1809 — KB5000822 (OS Build 17763.1817)
Windows 10 version 1909 — KB5000808 (OS Build 18363.1440)
Windows 10 version 2004 and 20H2 — KB5000802 (OS Builds 19041.867 and 19042.867) (If you are running 21H1 in the Beta Channel, see here)

Microsoft Exchange ProxyLogon attacks

Microsoft released out-of-band security updates for the ProxyLogon vulnerability that are actively being used by threat actors worldwide to compromise Microsoft Exchange servers.

These vulnerabilities are being tracked with the following CVEs:

CVE-2021-26855 – Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26857 – Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26858 – Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27065 – Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft has released security updates for currently supported Microsoft Exchange cumulative updates and older unsupported versions.

Microsoft has released a PowerShell script called Test-ProxyLogon.ps1 that will check for indicators of compromise (IOC) in Exchange HttpProxy logs, Exchange log files, and Windows Application event logs.

March 2021 Exchange Server Security Updates for older Cumulative Updates of Exchange Server

Additional March 2021 Patching Resources:

MSRC – March 2021 Security Updates
Microsoft CVE Summary
Security Update Guide – Microsoft Security Vulnerabilities
Advisory ADV990001 for the latest service stack update (SSU)
Adobe Security patches
Cisco Security patches
Apple Security patches
Android Security Bulletin
Oracle Security Alerts
Google Chrome March Update
F5 Vulnerabilities (March 2021)
Scan Changes and certificates add security for Windows devices using WSUS for updates
Zero Day Initiative blog
SAP February 2021 Security Updates
VMware View Planner update addresses remote code execution vulnerability (CVE-2021-21978)
VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2021-21972, CVE-2021-21973, CVE-2021-21974)

On March 9, 2021 (PT), Microsoft released security updates affecting the following Microsoft products:

Product Family	Maximum Severity	Maximum Impact	Associated KB Articles and/or Support Webpages
Windows 10 v20H2, v2004, v1909, v1809, and v1803	Critical	Remote Code Execution	Windows 10 v2004 and Windows 10 v20H2: 5000802 Windows 10 v1909: 5000808 Windows 10 v1809: 5000822 Windows 10 v1803: 5000809
Windows Server 2019, Windows Server 2016, and Server Core installations (2019, 2016, v20H2, v2004, and v1909)	Critical	Remote Code Execution	Windows Server 2019: 5000822 Windows Server 2016: 5000803 Windows Server v2004 and Windows Server v20H2: 5000802 Windows Server v1909: 5000808
Windows 8.1, Windows Server 2012 R2, and Windows Server 2012	Critical	Remote Code Execution	Windows 8.1 and Windows Server 2012 R2 Monthly Rollup: 5000848 Windows 8.1 and Windows Server 2012 R2 Security Only: 5000853 Windows Server 2012 Monthly Rollup: 5000847 Windows Server 2012 Security Only: 5000840
Internet Explorer 11	Critical	Remote Code Execution	Internet Explorer 11 Cumulative Update: 5000800
Microsoft Office-related software	Important	Remote Code Execution	4484376, 4486673, 4493151, 4493200, 4493203, 4493214, 4493224, 4493225, 4493227, 4493228, 4493229, 4493233, 4493234, 4493239, 4504702, 4504703, 4504707
Microsoft SharePoint-related software	Important	Remote Code Execution	3101541, 4493177, 4493199, 4493230, 4493231, 4493232, 4493238
Power BI Report Server	Important	Information Disclosure	5001284, 5001285
Azure-related software	Critical	Remote Code Execution	Find details on security updates for Azure-related software in the Security Update Guide: https://msrc.microsoft.com/update-guide
Microsoft Visual Studio-related software	Critical	Remote Code Execution	Find details on security updates for Visual Studio-related software at https://docs.microsoft.com/visualstudio and in the Security Update Guide: https://msrc.microsoft.com/update-guide
Windows Admin Center	Important	Security Feature Bypass	Find details on security updates for Windows Admin Center in the Security Update Guide: https://msrc.microsoft.com/update-guide
HEVC Video Extensions	Critical	Remote Code Execution	Find details on security updates for HEVC Video Extensions in the Security Update Guide: https://msrc.microsoft.com/update-guide

Notes:

The summary above is an overview of updates for the most recent versions of commonly used software.
Updates for older versions, apps, and open source software may not be listed.
Updates may have been added or removed from the release after this content was finalized.
Find details for all updates in the monthly release in the Security Update Guide: https://msrc.microsoft.com/update-guide
For additional details, see the release notes at: https://msrc.microsoft.com/update-guide/releaseNote/2021-Mar

Security vulnerability overview:

Below is a summary showing the number of vulnerabilities addressed in this release, broken down by product/component and by impact.

Vulnerability Details	RCE	EOP	ID	SFB	DOS	SPF	TMP	Publicly Disclosed	Known Exploit	Max CVSS
Windows 10 v20H2 & Windows Server v20H2	11	29	3	1	4	0	0	1	0	9.9
Windows 10 v2004 & Windows Server v2004	11	29	3	1	4	0	0	1	0	9.9
Windows 10 v1909 & Windows Server v1909	11	28	3	1	4	0	0	1	0	9.9
Windows 10 v1809 & Windows Server 2019	10	26	3	1	4	0	0	1	0	9.8
Windows 10 v1803	4	21	3	1	2	0	0	1	0	8.8
Windows Server 2016	8	17	3	1	4	0	0	1	0	9.8
Windows 8.1 & Server 2012 R2	8	12	3	0	4	0	0	1	0	9.8
Windows Server 2012	8	12	3	0	3	0	0	1	0	9.8
Internet Explorer 11	2	0	0	0	0	0	0	1	1	8.8
Microsoft Office-related software	7	0	0	1	0	0	0	0	0	7.8
Microsoft SharePoint-related software	1	0	1	0	0	1	0	0	0	8.8
Power BI Report Server	0	0	1	0	0	0	0	0	0	7.7
Azure-related software	2	0	1	0	0	0	0	0	0	9.3
Microsoft Visual Studio-related software	6	0	0	0	0	0	0	0	0	8.8
Windows Admin Center	0	0	0	1	0	0	0	0	0	4.3
HEVC Video Extensions	10	0	0	0	0	0	0	0	0	7.8
RCE = Remote Code Execution \| EOP = Elevation of Privilege \| ID = Information Disclosure \| SFB = Security Feature Bypass \| DOS = Denial of Service \| SPF = Spoofing \| TMP = Tampering

Notes:

Vulnerabilities that overlap components may be represented more than once in the table.
The summary above is an overview of updates for commonly used software. Updates for older versions, apps, and open source software may not be listed.
Updates may have been added or removed from the release after this content was finalized.
Find details for all updates in the monthly release in the Security Update Guide: https://msrc.microsoft.com/update-guide
For additional details, see the release notes at: https://msrc.microsoft.com/update-guide/releaseNote/2021-Mar

Resources for deploying updates to remote devices

With so many people working remotely, it is a good time to review guidance on deploying security updates to remote devices, such as desktops, laptops, and tablets. Here are some resources to answer questions pertaining to deploying updates to remote devices.

Part 1: Helping businesses rapidly set up to work securely from personal PCs and mobiles

Part 2: Helping IT send and provision business PCs at home to work securely during COVID-19

Part 3: Manage work devices at home during Covid-19 using Configuration Manager

Part 4: Managing remote machines with cloud management gateway (CMG)

Part 5: Managing Patch Tuesday with Configuration Manager in a remote work world

See also:

Mastering Configuration Manager Bandwidth limitations for VPN connected Clients

Vulnerability details for the current month

Below are summaries for some of the security vulnerabilities in this release. These specific vulnerabilities were selected from the larger set of vulnerabilities in the release for one or more of the following reasons: 1) We received inquiries regarding the vulnerability; 2) the vulnerability may have received attention in the trade press; or 3) the vulnerability is potentially more impactful than others in the release. Because we do not provide summaries for every vulnerability in the release, you should review the content in the Security Update Guide for information not provided in these summaries.

Notes on details in the vulnerability summaries:

Attack Vector	This metric reflects the context by which vulnerability exploitation is possible. The Base Score increases the more remote (logically, and physically) an attacker can be in order to exploit the vulnerable component.
Attack Complexity	This metric describes the conditions beyond the attacker’s control that must exist in order to exploit the vulnerability. Such conditions may require the collection of more information about the target or computational exceptions. The assessment of this metric excludes any requirements for user interaction in order to exploit the vulnerability. If a specific configuration is required for an attack to succeed, the Base metrics should be scored assuming the vulnerable component is in that configuration.
Privileges Required	This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability.
User Interaction	This metric captures the requirement for a user, other than the attacker, to participate in the successful compromise the vulnerable component. This metric determines whether the vulnerability can be exploited solely at the will of the attacker, or whether a separate user (or user-initiated process) must participate in some manner.

CVE-2021-24089	HEVC Video Extensions Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Score Metrics	Base CVSS Score: 7.8	Privileges Required: None	Confidentiality: High
Attack Vector: Local	User Interaction: Required	Integrity: High
Attack Complexity: Low	Scope: Unchanged	Availability: High
Affected Software:	HEVC Video Extensions
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24089

CVE-2021-24090	Windows Error Reporting Elevation of Privilege Vulnerability
Impact	Elevation of Privilege
Severity	Important
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Score Metrics	Base CVSS Score: 7.8	Privileges Required: None	Confidentiality: High
Attack Vector: Local	User Interaction: Required	Integrity: High
Attack Complexity: Low	Scope: Unchanged	Availability: High
Affected Software:	Windows 10 Version 20H2, Windows 10 Version 2004, Windows 10 Version 1909, Windows Server, version 20H2, Windows Server, version 2004, and Windows Server, version 1909
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24090

CVE-2021-26867	Windows Hyper-V Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Score Metrics	Base CVSS Score: 9.9	Privileges Required: Low	Confidentiality: High
Attack Vector: Network	User Interaction: None	Integrity: High
Attack Complexity: Low	Scope: Changed	Availability: High
Affected Software:	Windows 10 Version 20H2, Windows 10 Version 2004, Windows 10 Version 1909, Windows Server, version 20H2, Windows Server, version 2004, and Windows Server, version 1909
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26867

CVE-2021-27077	Windows Win32k Elevation of Privilege Vulnerability
Impact	Elevation of Privilege
Severity	Important
Publicly Disclosed?	Yes
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Score Metrics	Base CVSS Score: 7.8	Privileges Required: Low	Confidentiality: High
Attack Vector: Local	User Interaction: None	Integrity: High
Attack Complexity: Low	Scope: Unchanged	Availability: High
Affected Software:	All supported versions of Windows
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27077

CVE-2021-26897	Windows DNS Server Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Score Metrics	Base CVSS Score: 9.8	Privileges Required: None	Confidentiality: High
Attack Vector: Network	User Interaction: None	Integrity: High
Attack Complexity: Low	Scope: Unchanged	Availability: High
Affected Software:	Windows Server, version 20H2, Windows Server, version 2004, Windows Server, version 1909, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, and Windows Server 2012
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26897

CVE-2021-26411	Internet Explorer Memory Corruption Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	Yes
Known Exploits?	Yes
Exploitability	Exploitation detected
CVSS Score Metrics	Base CVSS Score: 8.8	Privileges Required: None	Confidentiality: Low
Attack Vector: Network	User Interaction: Required	Integrity: High
Attack Complexity: Low	Scope: Changed	Availability: Low
Affected Software:	Internet Explorer 11 on Windows 10 Version 20H2, Windows 10 Version 2004, Windows 10 Version 1909, Windows 10 Version 1809, Windows 10 Version 1803, Windows 8.1, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, and Windows Server 2012 and Microsoft Edge (EdgeHTML-based) on Windows 10 Version 20H2, Windows 10 Version 2004, Windows 10 Version 1909, Windows 10 Version 1809, Windows 10 Version 1803, Windows Server 2019, and Windows Server 2016
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411

CVE-2021-27076	Microsoft SharePoint Server Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Important
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Score Metrics	Base CVSS Score: 8.8	Privileges Required: Low	Confidentiality: High
Attack Vector: Network	User Interaction: None	Integrity: High
Attack Complexity: Low	Scope: Unchanged	Availability: High
Affected Software:	Microsoft SharePoint Foundation 2013, Business Productivity Servers 2010, SharePoint Server 2019, and SharePoint Enterprise Server 2016
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27076

CVE-2021-27053	Microsoft Excel Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Important
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Score Metrics	Base CVSS Score: 7.8	Privileges Required: None	Confidentiality: High
Attack Vector: Local	User Interaction: Required	Integrity: High
Attack Complexity: Low	Scope: Unchanged	Availability: High
Affected Software:	Microsoft Office 2019, Office Online Server, 365 Apps for Enterprise, Excel 2016, Excel 2013, Excel 2010, and Office Web Apps Server 2013
More Information:	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27053

February 2021 – Microsoft Patch Tuesday and Other Patches

Posted on February 13, 2021 by harjit

Microsoft has released fixes for 56 vulnerabilities, with 11 updates classified as Critical and 43 as Important. Here’s an updated announcement (2021-02-09) from Microsoft: Deploy Windows SSUs and LCUs together with one cumulative update –

LCU = Latest Cummulative Update
SSU – Servicing Stack Update

UPDATE – 2021-02-21
KB4301818 > KB5001078

UPDATE – 2021-02-17
KB4577586

Windows 10 Updates for February 2021:

KB4601319 (OS Builds 19041.804 and 19042.804) for Windows 10 version 20H2 / 2004
KB4601315 (OS Build 18363.1377) for Windows 10, version 1909
KB5001028 (OS Build 18363.1379) Out-of-band for Windows 10, version 1909
KB4601345 (OS Build 17763.1757) for Windows 10 version 1809
KB4601354 (OS Build 17134.2026) for Windows 10 version 1803
KB4601330 (OS Build 15063.2642) for Windows 10 version 1703
KB4601318 (OS Build 14393.4225) for Windows 10 version 1607
KB4601331 (OS Build 10240.18842) for Windows 10, initial release

Additional February 2021 Patching Resources:

MSRC – February 2021 Security Updates
Security Update Guide – Microsoft Security Vulnerabilities
Internet Explorer 11 zero-day vulnerability gets unofficial micro-patch
Windows 10 v1909 receives KB5001028 out-of-band fix for WPA3 Wi-Fi
Advisory ADV990001 for the latest service stack update (SSU)
Intel fixes vulnerabilities in Windows, Linux graphics drivers
Adobe Security patches
Cisco Security patches
Apple Security patches
Android Security Bulletin
Oracle Security Alerts
Scan Changes and certificates add security for Windows devices using WSUS for updates
Netlogon Domain Controller Enforcement Mode enabled by default on February 9, 2021
Zero Day Initiative blog
SAP February 2021 Security Updates
Google fixes severe Golang Windows RCE vulnerability
Apple fixes SUDO root privilege escalation flaw in macOS

Patched publicly disclosed vulnerabilities:

CVE-2021-1721 – .NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-1727 – Windows Installer Elevation of Privilege Vulnerability
CVE-2021-1733 – Sysinternals PsExec Elevation of Privilege Vulnerability
CVE-2021-24098 – Windows Console Driver Denial of Service Vulnerability
CVE-2021-24106 – Windows DirectX Information Disclosure Vulnerability
CVE-2021-26701 – .NET Core Remote Code Execution Vulnerability

Intel microcode updates for Windows:

Microsoft has also released Intel microcode updates for Windows 10 20H2, 2004, 1909, and older versions to fix issues impacting current and previously released Windows 10 versions.

These microcode updates are offered to affected devices via Windows Update but they can also be manually downloaded directly from the Microsoft Catalog using these links:

KB4589212: Intel microcode updates for Windows 10, version 2004 and 20H2, and Windows Server, version 2004 and 20H2
KB4589211: Intel microcode updates for Windows 10, version 1903 and 1909, and Windows Server, version 1903 and 1909
KB4589208: Intel microcode updates for Windows 10, version 1809 and Windows Server 2019
KB4589206: Intel microcode updates for Windows 10, version 1803
KB4589210: Intel microcode updates for Windows 10, version 1607 and Windows Server 2016
KB4589198: Intel microcode updates for Windows 10, version 1507

On February 9, 2021, Microsoft released security updates affecting the following Microsoft products:

Product Family	Maximum Severity	Maximum Impact	Associated KB Articles and/or Support Webpages
Windows 10 v20H2, v2004, v1909, v1809, and v1803	Critical	Remote Code Execution	Windows 10 v2004 and Windows 10 v20H2: 4601319 Windows 10 v1909: 4601315 Windows 10 v1809: 4601345 Windows 10 v1803: 4601354
Windows Server 2019, Windows Server 2016, and Server Core installations (2019, 2016, v20H2, v2004, and v1909)	Critical	Remote Code Execution	Windows Server 2019: 4601345 Windows Server 2016: 4601318 Windows Server v2004 and Windows Server v20H2: 4601319 Windows Server v1909: 4601315
Windows 8.1, Windows Server 2012 R2, and Windows Server 2012	Critical	Remote Code Execution	Windows 8.1 and Windows Server 2012 R2 Monthly Rollup: 4601384 Windows 8.1 and Windows Server 2012 R2 Security Only: 4601349 Windows Server 2012 Monthly Rollup: 4601348 Windows Server 2012 Security Only: 4601357
Microsoft Office-related software	Important	Remote Code Execution	4493211, 4493222, 4493196, 4493192, 4493204
Microsoft SharePoint-related software	Important	Remote Code Execution	4493210, 4493194, 4493195, 4493223
Microsoft Lync/Skype for Business	Important	Denial of Service	5000675, 5000688
Microsoft Exchange Server	Important	Spoofing	4602269, 4571787
Microsoft .NET-related software	Critical	Remote Code Execution	4601318, 4601050, 4601887, 4603004, 4602960, 4603005, 4602961, 4601354, 4601056, 4603003, 4602959, 4603002, 4602958, 4601051, 4601054
Microsoft Visual Studio	Important	Remote Code Execution	Find details on security updates for Visual Studio-related software in the Security Update Guide: https://msrc.microsoft.com/update-guide
Microsoft Dynamics-related software	Important	Information Disclosure	4602915
Microsoft Azure-related software	Important	Elevation of Privilege	Find details on security updates for Azure-related software in the Security Update Guide: https://msrc.microsoft.com/update-guide
Developer tools	Important	Remote Code Execution	Find details on security updates for developer tools in the Security Update Guide: https://msrc.microsoft.com/update-guide

Notes:

Find details for all updates in the monthly release in the Security Update Guide: https://msrc.microsoft.com/update-guide
For additional details, see the release notes at: https://msrc.microsoft.com/update-guide/releaseNote/2021-Feb

Security vulnerability overview:

Below is a summary showing the number of vulnerabilities addressed in this release, broken down by product/component and by impact.

Vulnerability Details	RCE	EOP	ID	SFB	DOS	SPF	TMP	Publicly Disclosed	Known Exploit	Max CVSS
Windows 10 v20H2 & Windows Server v20H2	10	7	5	2	4	0	0	3	1	9.8
Windows 10 v2004 & Windows Server v2004	10	7	5	2	4	0	0	3	1	9.8
Windows 10 v1909 & Windows Server v1909	10	6	5	2	3	0	0	3	1	9.8
Windows 10 v1809 & Windows Server 2019	10	7	5	2	3	0	0	3	1	9.8
Windows 10 v1803	7	6	4	2	3	0	0	3	1	9.8
Windows Server 2016	10	5	3	1	2	0	0	1	0	9.8
Windows 8.1 & Server 2012 R2	7	4	3	0	2	0	0	1	0	9.8
Windows Server 2012	7	4	3	0	2	0	0	1	0	9.8
Microsoft Office-related software	4	0	0	0	0	0	0	0	0	7.8
Microsoft SharePoint-related software	2	0	1	0	0	1	0	0	0	8.8
Lync/Skype for Business	0	0	0	0	1	1	0	0	0	6.5
Microsoft Exchange Server	0	0	0	0	0	2	0	0	0	6.5
Microsoft .NET-related software	2	0	0	0	2	0	0	0	0	8.1
Microsoft Visual Studio-related software	2	0	0	0	1	0	0	1	0	7.8
Microsoft Dynamics-related software	0	0	1	0	0	1	0	0	0	6.5
Microsoft Azure-related software	0	2	0	0	0	0	0	0	0	7.0
Developer tools	1	1	0	0	0	0	0	0	0	7.8
RCE = Remote Code Execution \| EOP = Elevation of Privilege \| ID = Information Disclosure \| SFB = Security Feature Bypass \| DOS = Denial of Service \| SPF = Spoofing \| TMP = Tampering

Resources for deploying updates to remote devices:

Part 1: Helping businesses rapidly set up to work securely from personal PCs and mobiles
Part 2: Helping IT send and provision business PCs at home to work securely during COVID-19
Part 3: Manage work devices at home during Covid-19 using Configuration Manager
Part 4: Managing remote machines with cloud management gateway (CMG)
Part 5: Managing Patch Tuesday with Configuration Manager in a remote work world

See also:
Mastering Configuration Manager Bandwidth limitations for VPN connected Clients

Vulnerability details for the current month:

Below are summaries for some of the security vulnerabilities in this release:

Attack Vector	This metric reflects the context by which vulnerability exploitation is possible. The Base Score increases the more remote (logically, and physically) an attacker can be in order to exploit the vulnerable component.
Attack Complexity	This metric describes the conditions beyond the attacker’s control that must exist in order to exploit the vulnerability. Such conditions may require the collection of more information about the target or computational exceptions. The assessment of this metric excludes any requirements for user interaction in order to exploit the vulnerability. If a specific configuration is required for an attack to succeed, the Base metrics should be scored assuming the vulnerable component is in that configuration.
Privileges Required	This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability.
User Interaction	This metric captures the requirement for a user, other than the attacker, to participate in the successful compromise the vulnerable component. This metric determines whether the vulnerability can be exploited solely at the will of the attacker, or whether a separate user (or user-initiated process) must participate in some manner.

CVE-2021-1727	Windows Installer Elevation of Privilege Vulnerability
Impact	Elevation of Privilege
Severity	Important
Publicly Disclosed?	Yes
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Base Score	7.8
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	All supported versions of Windows
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1727

CVE-2021-1732	Windows Win32k Elevation of Privilege Vulnerability
Impact	Elevation of Privilege
Severity	Important
Publicly Disclosed?	No
Known Exploits?	Yes
Exploitability	Exploitation detected
CVSS Base Score	7.8
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	Windows 10 v20H2, Windows 10 v2004, Windows 10 v1909, Windows 10 v1809, Windows 10 v1803, Windows Server v20H2, Windows Server v2004, Windows Server v1909, and Windows Server 2019
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732

CVE-2021-24074	Windows TCP/IP Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Base Score	9.8
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	All supported versions of Windows
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24074

CVE-2021-24094	Windows TCP/IP Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Base Score	9.8
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	All supported versions of Windows
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24094

CVE-2021- 24077	Windows Fax Service Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Base Score	9.8
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	All supported versions of Windows
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24077

CVE-2021-24078	Windows DNS Server Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Base Score	9.8
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	Windows Server v20H2, Windows Server v2004, Windows Server v1909, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, and Windows Server 2012
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24078

CVE-2021-24088	Windows Local Spooler Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Critical
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Base Score	8.8
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	All supported versions of Windows
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24088

CVE-2021-24098	Windows Console Driver Denial of Service Vulnerability
Impact	Denial of Service
Severity	Important
Publicly Disclosed?	Yes
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Base Score	5.5
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High
Affected Software	Windows 10 v20H2, Windows 10 v2004, Windows 10 v1909, Windows 10 v1809, Windows 10 v1803, Windows Server v20H2, Windows Server v2004, Windows Server v1909, and Windows Server 2019
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24098

CVE-2021-24066	Microsoft SharePoint Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Important
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation more likely
CVSS Base Score	8.8
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	Microsoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Foundation 2013 Service Pack 1, and Microsoft SharePoint Foundation 2010 Service Pack 2
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24066

CVE-2021-24067	Microsoft Excel Remote Code Execution Vulnerability
Impact	Remote Code Execution
Severity	Important
Publicly Disclosed?	No
Known Exploits?	No
Exploitability	Exploitation less likely
CVSS Base Score	7.8
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High
Affected Software	Microsoft 365 Apps for Enterprise, Excel 2016, Excel 2013, Excel 2010, Office Online Server, Office 2019, Office 2019 for Mac, and Office Web Apps Server 2013
More Information	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24067

February 2021 Microsoft Office security updates

Microsoft Office security updates are delivered through the Microsoft Update platform and via the Download Center.

Patched Office security vulnerabilities – (Source: Bleeping Computer)

This month’s Office security updates address bugs exposing Windows systems running vulnerable Click to Run and Microsoft Installer (.msi) based editions of Microsoft Office products to remote code execution (RCE), information disclosure, and spoofing attacks.

Microsoft rated the six RCE bugs patched in February 2021 as Important severity issues given that they could enable attackers to execute arbitrary code in the context of the currently logged-in user.

Following successful exploitation, attackers could install malicious programs, view, change, and delete data, as well as make their own admin accounts on exploited Windows devices.

Tag	CVE ID	CVE Title	Severity
Microsoft Office Excel	CVE-2021-24067	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office Excel	CVE-2021-24068	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office Excel	CVE-2021-24069	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office Excel	CVE-2021-24070	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-24071	Microsoft SharePoint Information Disclosure Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1726	Microsoft SharePoint Spoofing Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-24066	Microsoft SharePoint Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-24072	Microsoft SharePoint Server Remote Code Execution Vulnerability	Important

Further information about each of them is available within the knowledge base articles linked below.

Microsoft Office 2016:

Product	Knowledge Base article title and number
Excel 2016	Description of the security update for Excel 2016: February 9, 2021 (KB4493196)
Office 2016	February 2, 2021, update for Office 2016 (KB4493189)
Outlook 2016	February 2, 2021, update for Outlook 2016 (KB4493190)
PowerPoint 2016	February 2, 2021, update for PowerPoint 2016 (KB4493164)

Microsoft Office 2013:

Product	Knowledge Base article title and number
Excel 2013	Description of the security update for Excel 2013: February 9, 2021 (KB4493211)
Office 2013	February 2, 2021, update for Office 2013 (KB4486684)
PowerPoint 2013	February 2, 2021, update for PowerPoint 2013 (KB4493169)

Microsoft Office 2010:

Product	Knowledge Base article title and number
Excel 2010	Description of the security update for Excel 2010: February 9, 2021 (KB4493222)
Office 2010	February 2, 2021, update for Office 2010 (KB4493180)
PowerPoint 2010	February 2, 2021, update for PowerPoint 2010 (KB4493179)

Microsoft SharePoint Server 2019:

Product	Knowledge Base article title and number
Office Online Server	Description of the security update for Office Online Server: February 9, 2021 (KB4493192)
SharePoint Server 2019	Description of the security update for SharePoint Server 2019: February 9, 2021 (KB4493194)
SharePoint Server 2019 Language Pack	February 9, 2021, update for SharePoint Server 2019 Language Pack (KB4493193)

Microsoft SharePoint Server 2016:

Product	Knowledge Base article title and number
SharePoint Enterprise Server 2016	Description of the security update for SharePoint Enterprise Server 2016: February 9, 2021 (KB4493195)

Microsoft SharePoint Server 2013:

Product	Knowledge Base article title and number
Office Web Apps Server 2013	Description of the security update for Office Web Apps Server 2013: February 9, 2021 (KB4493204)
Project Server 2013	February 9, 2021, cumulative update for Project Server 2013 (KB4493207)
SharePoint Enterprise Server 2013	February 9, 2021, cumulative update for SharePoint Enterprise Server 2013 (KB4493209)
SharePoint Foundation 2013	Description of the security update for SharePoint Foundation 2013: February 9, 2021 (KB4493210)
SharePoint Foundation 2013	February 9, 2021, cumulative update for SharePoint Foundation 2013 (KB4493205)

Microsoft SharePoint Server 2010:

Product	Knowledge Base article title and number
Project Server 2010	February 9, 2021, update for Project Server 2010 (KB4475537)
Project Server 2010	February 9, 2021, cumulative update for Project Server 2010 (KB4493217)
SharePoint Foundation 2010	Description of the security update for SharePoint Foundation 2010: February 9, 2021 (KB4493223)
SharePoint Server 2010	February 9, 2021, cumulative update for SharePoint Server 2010 (KB4493220)
SharePoint Server 2010	February 9, 2021, update for SharePoint Server 2010 (KB4493212)
SharePoint Server 2010 Office Web Apps	February 9, 2021, update for SharePoint Server 2010 Office Web Apps (KB4493219)

Windows 10 Automatically Uninstalls Problematic Software Updates

Posted on March 12, 2019 by harjit

Patch Management is an important role of a Sysadmin in the Enterprise, because securing endpoints with security updates to keep systems secure and functional, receive fixes that resolve issues, and patch security holes is highly important. However, with the frequency of security updates which are released these days, patch management tasks feels like a full-time job!

For the most part, monthly patches are straight forward, however in recent months, they have been problematic where they have caused system crashes, blue screens, application functionality issues, and introduced other bugs. Some faulty patches are quickly reversed or rectified by Microsoft, while others go unfixed for a longer duration causing further duress and downtime in many organizations. This has been a major pain point for Sysadmins in the field.

Well, we may have some reprieve from these buggy patches. Microsoft has announced that it will start uninstalling problematic patches automatically from Windows 10 systems when it detects a startup issue due to incompatibility or issues stemming from a recently installed patch. The following notification will be presented:
“We removed some recently installed updates to recover your device from a startup failure.”

According to this KB4492307 posted by Microsoft, the problematic patch will not be reinstalled for 30 days to allow Microsoft and it’s partners to investigate and fix the issues. This process seems like a good proactive approach by Microsoft to get a handle of buggy patches, however more information is needed in terms of how this will work with detection, deployments, and compliance of these patches using ConfigMgr and WSUS as mechanisms for patch management in the enterprise. Time will tell, we hope!

Windows 7 Network Controller Issues – KB4338818 (July 2018)

Posted on July 11, 2018 by harjit

The July 2018 Windows Updates for Windows 7 SP1 and Windows Server 2008 R2 SP1 introduces a bug that could cause the network interface controller to stop working. The update referenced is KB4338818.

There is an issue with Windows and third-party software related to a missing file (oem<number>.inf). Because of this issue, after you apply this update, the network interface controller will stop working.

In case your systems run into this issue, the workaround from Microsoft is to do the following:

To locate the network device, launch devmgmt.msc; it may appear under Other Devices.

To automatically rediscover the NIC and install drivers, select Scan for Hardware Changes from the Action menu.

a. Alternatively, install the drivers for the network device by right-clicking the device and selecting Update. Then select Search automatically for updated driver software or Browse my computer for driver software.

Please use your best judgement and evaluate the risks of applying this update to your Windows 7 SP1 and Windows Server 2008 R2 systems.

** Update **
According to an IT Pro who opened a support case with Microsoft, this is the information provided at this time:

“Regarding the known issue in the July monthly rollup about the network interface controller that will stop working. We are still looking at the data gathered from multiple customers and we do not have a list third party software that is causing the issue. What we do know until now, is that the issue is reproducing mainly on VM over VMware.”

Malware Isn’t Just For Windows Anymore – Fruitfly Is Hitting Macs Hard

Posted on July 31, 2017 by harjit

This year’s cyber threat epidemic started with Windows, then spread over to Linux and third-party apps, and now is here for Macs. While the latest malware Fruitfly is targeting Mac computers, its malware library is also capable of running on Linux systems.

Though it was recently found conducting surveillance attacks, it’s possible Fruitfly has been infecting Mac systems for over two years. It appears that the base code of Fruitfly is over a decade old, which begs the question: how can decade-old malware start breaching systems now? Haven’t our systems been updated over the last ten years?

It seems the Fruitfly developers have reused old code and modified it to give this malware extra power and capabilities. This cross-platform malware uses old APIs, but if there are any changes in the API, it will break the legitimate program to maintain reverse compatibility as long as possible. Fruitfly may have escaped detection for a long time because it appears that its creators have intentionally limited how many computers it targets. And since Mac systems don’t usually face as many threats as Windows, many administrators have been more lenient with patching their Macs, leaving them vulnerable to attacks such as Fruitfly.

You can identify Fruitfly infections by detecting suspicious network traffic. A file integrity monitor or log analyzer can help you identify an attack on your network, but a breach could be avoided altogether by keeping your systems up-to-date. Since most enterprises comprise different operating systems, it isn’t advisable to employ a separate patching tool for Windows, Mac, and Linux. The smarter alternative would be for an enterprise to employ a multi-platform patch management solution that helps update every computer from a single console. However, there are only a few solutions on the market that even support third-party patching, and even less that provide complete control over all enterprise devices, including mobile devices.

These last few months have already given security professionals a lot to cover, and since cyber attacks are evolving at rapid rate, its high time enterprises maintain endpoint security by keeping their systems up-to-date. The best way to do this is to employ a patch management solution to stay safe from future ransomware and malware. One such solution is ManageEngine’s Desktop Central.

Desktop Central is integrated desktop and mobile device management software. This multi-platform solution helps automate your overall patch management process, and also has some other enhanced features to help secure your network. Download ManageEngine Desktop Central Now and keep your Windows, Mac, Linux and all your third party applications completely safe and up-to-date.

Follow me (@Hoorge) on Twitter and join Tech Konnect on Facebook and Twitter (@TechKonnect) to stay current on technology related matters.

Five Routine’s That Sums Up Desktop Management

Posted on April 14, 2017 by harjit

IT departments play a major role in systems maintenance and it takes some effort for a system administrator to keep servers and end user workstations up and running for stability and productivity reasons. Lets take a look at system administrator’s daily routine and the importance of it.

1. Downloading and Deploying patches to user computers

System administrator has to identify required patches (3rd party) on systems, download them from the vendor websites and deploy them to end user computers. Managing these patches on a one of basis seems straightforward but it becomes cumbersome on a routine basis and especially when there are many systems to patch. Using a Patch Management solution, these routine tasks can be automated and scheduled to lessen the cumbersome workload on system administrators.

2. Installing software to user computers

Manually installing software on remote computers can be a daunting task and is challenging. A Software Management solution can resolve this complication by allowing a system administrator to deploy software from any location, handle tickets with ease and assist users demands in software installation with simplicity.

3.Troubleshooting remote computers

Troubleshooting servers and workstations for Operating System issues, software installations, security patches, system crashes can be remedied much easily with software management solutions, especially with remote capabilities and centralized management interface.

4. Managing IT assets in your network

Asset tracking for hardware and software in your organization is highly important and can be done with ease with the use of an asset management software. Apart from tracking the hardware and software in the organization, software license management, hardware warranty management, and identifying the usage of software particularly for licensing, restricting unwanted software in your network is important as well. An asset management solution provides a systems administrator the tools needed to effectively gather and manage this data.

5. Deploying configurations and managing mobile devices

Managing and configuring devices such as computers, tablets, phones, and peripherals in a growing organization with rapid demands for technology can be a challenging task for system administrators. MDM and desktop management solutions provide much flexibility and the tools needed to handle these technology challenges in the enterprise.

ManageEngine Desktop Central is one such ideal solution for desktop management, with its bundle of features and pricing compared to some known industry solutions. Desktop Central offers Patch management, Software management, Asset management, Remote support, Mobile device management, Failover Service, and Auditing capabilities. Desktop Central supports heterogeneous platform in 16 different languages. Finally, Desktop Central offers a fully functioning edition to manage 50 endpoints completely free with no hidden cost.

Download Desktop Central now and experience simplified IT management.

Follow @Hoorge on Twitter and join Tech Konnect on Facebook and Twitter to stay current on technology related matters.

Review – Microsoft Systems Center Endpoint Protection Cookbook

Posted on April 2, 2017 by harjit

System endpoint security is a critical aspect of modern day computing and we all have had our fair share in dealing with malware infections, and in some cases ransomware and cryptolocker attacks in our organizations. Microsoft has made great efforts in mitigating these security risks by providing a superior product called System Center Endpoint Protection (SCEP) for enterprises and Windows Defender which by default is included with Windows 10.

A System Center Configuration Manager (ConfigMgr or SCCM) or a Microsoft Intune administrator is familiar with SCEP as it is the way to administer and manage SCEP in the enterprise. However, there are many aspects and intricacies of SCEP one is not aware of and has not fully utilized, and should. While I was dealing with some SCEP updates and anti-malware policies in my organization, I came across this awesome book written by Nicolai Henriksen, a Microsoft MVP in Enterprise Mobility. I decided to write a non-biased review of this book and credit the wonderful information contained within it.

Nicolai’s SCEP cookbook is well written and vetted by another well respected Microsoft MVP in Enterprise Mobility, Ronni Pedersen, who I often interact with on social media on all things ConfigMgr. This book is shy of 200 pages and is laid out in eight easily digestible chapters and covers everything you need to know about SCEP from soup to nuts. You’ll learn how to plan and get started with SCEP, configuration, operations and maintenance, updates, security and privacy, configure advance protection, troubleshooting, and malware handling to name a few. It’s an information filled book with great tips and how to’s, and I particularly enjoyed how Nicolai included little segments throughout the book with tidbits such as “Getting ready….”, “How it works….”, and “How to do it….” which was perfect for my learning and understanding of the various concepts presented.

The Table of Contents of this book:

As a ConfigMgr admin who has been working with the product for a number of years including working with System Center Endpoint Protection, I have learned things that I didn’t know, picked up some tips and tricks, have a better insight and understanding of SCEP, and I have gained a great reference for the product. I highly recommend this book to all ConfigMgr and Intune admins. This book is available for purchase in Kindle and Paperback format on Amazon. If you would like to connect with Nicolai and have some feedback or suggestions, you’ll find him on Twitter as @nicolaitwitt.

Follow me (@Hoorge) on Twitter and join Tech Konnect on Facebook and Twitter (@TechKonnect) to stay current on technology related matters.

Updated – Microsoft Update Catalog Site

Posted on October 19, 2016 by harjit

The Microsoft Windows team mentioned on August 15, 2016 that they were working on releasing an updated version of the Microsoft Update Catalog which would eliminate the need for ActiveX requirements in order for the site to work in any browser.

The Microsoft Update Catalog website is being updated to remove the ActiveX requirement so it can work with any browser. Currently, Microsoft Update Catalog still requires that you use Internet Explorer. We are working to remove the ActiveX control requirement, and expect to launch the updated site soon.

Good news! As of yesterday, the site has been updated and you can now access the Microsoft Update Catalog site using any browser including Edge, Google Chrome, and others with the following URL: http://www.catalog.update.microsoft.com. Here’s the blog post by Michael Niehaus with the announcement.

Follow (@Hoorge) on Twitter and join Tech Konnect on Facebook and Twitter (@TechKonnect) to stay current on technology related matters.

System Center Operations Manager (SCOM) Console Crash

Posted on October 18, 2016 by harjit

UPDATE
(October 19, 2016)
A fix for the SCOM console crash issue as previously blogged below has been released. See the following KB320006 article to obtain the hotfix.

***************************************************************************************************

**Posted on October 18, 2016**

There is a widespread report of System Center Operations Manager (SCOM) 2012 R2 / 2016 console crashes due to some bugs in October 2016 Cummulative Updates, in particular with the following patches: KB3194798 / KB3192392 / KB3185330 / KB3185331.

The product team has acknowledged the issue on their blog post and is said to be working on releasing a fix soon. The current recommendation is to uninstall the problematic patches as a temporary workaround. According to the blog post, an announcement will be made on the SCOM Team blog when a fix has been made available. So, keep a close eye on it.

Links related to this post:

SCOM Product Team Console Issue Ackowledgement
TechNet Discussion
SCOM Product Team Blog
Microsoft Tech Community Discussion

Follow (@Hoorge) on Twitter and join Tech Konnect on Facebook and Twitter (@TechKonnect) to stay current on technology related matters.

Fix Microsoft Windows Update Issues

Posted on June 6, 2016 by harjit

Here’s a fix it tool to keep Windows up-to-date, fix errors, and other issues that crop up with Windows Update. You can fix the problem yourself or get help from the community. You can access the tool HERE!

Harjit Dhaliwal

Microsoft MVP, IT Professional, Technology Evangelist, Social Media Influencer, Photographer

Tag Archives: Patch Management

March 2021 – Microsoft Patch Tuesday and Other Patches

Microsoft Exchange ProxyLogon attacks

February 2021 – Microsoft Patch Tuesday and Other Patches

Intel microcode updates for Windows:

Patched Office security vulnerabilities – (Source: Bleeping Computer)

Microsoft Office 2016:

Microsoft Office 2013:

Microsoft Office 2010:

Microsoft SharePoint Server 2019:

Microsoft SharePoint Server 2016:

Microsoft SharePoint Server 2013:

Microsoft SharePoint Server 2010:

Windows 10 Automatically Uninstalls Problematic Software Updates

Windows 7 Network Controller Issues – KB4338818 (July 2018)

Malware Isn’t Just For Windows Anymore – Fruitfly Is Hitting Macs Hard

Five Routine’s That Sums Up Desktop Management

Review – Microsoft Systems Center Endpoint Protection Cookbook

Updated – Microsoft Update Catalog Site

System Center Operations Manager (SCOM) Console Crash

UPDATE
(October 19, 2016)
A fix for the SCOM console crash issue as previously blogged below has been released. See the following KB320006 article to obtain the hotfix.

Fix Microsoft Windows Update Issues

Microsoft Exchange ProxyLogon attacks

Intel microcode updates for Windows:

Patched Office security vulnerabilities – (Source: Bleeping Computer)

Microsoft Office 2016:

Microsoft Office 2013:

Microsoft Office 2010:

Microsoft SharePoint Server 2019:

Microsoft SharePoint Server 2016:

Microsoft SharePoint Server 2013:

Microsoft SharePoint Server 2010:

** UPDATE** (October 19, 2016) A fix for the SCOM console crash issue as previously blogged below has been released. See the following KB320006 article to obtain the hotfix.

UPDATE
(October 19, 2016)
A fix for the SCOM console crash issue as previously blogged below has been released. See the following KB320006 article to obtain the hotfix.