Patch Tuesday, October 2021
Microsoft's monthly security release, Tuesday, October 12, 2021. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
- 7.8HighOct 13, 2021Microsoft Windows Memory corruptionCVE-2021-40449Unspecified vulnerability allows for an authenticated user to escalate privileges.Exploited82% likelyExploit codeMetasploit
- 7.8HighOct 13, 2021Microsoft Win32k Privilege escalationCVE-2021-40450Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Exploited1.6% likely
- 7.8HighOct 13, 2021Microsoft Win32k Privilege escalationCVE-2021-41357Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Exploited1.6% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.