Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)

This article has been indexed from Help Net Security

On October 2021 Patch Tuesday, Microsoft has fixed 71 CVE-numbered vulnerabilities. Of those, only one was a zero-day exploited in attacks in the wild (CVE-2021-40449) and three were publicly known before the release of the patches. Vulnerabilities of note Let’s start with CVE-2021-40449, a Windows bug that may be used to escalate privileges on an already compromised system. Its exploitation was detected and flagged by Boris Larin, a zero-day exploits hunter with Kaspersky. According to … More

The post Microsoft patches actively exploited Windows zero-day (CVE-2021-40449) appeared first on Help Net Security.

Read the original article: Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)

Liked it? Take a second to support IT Security News on Patreon!
Become a patron at Patreon!