內容說明:
微軟釋出產品九月份安全性更新,修補遠端執行任意程式碼等漏洞。
影響平台:
Azure Open Management Infrastructure
Azure Sphere
Dynamics Business Central Control
Microsoft Accessibility Insights for Android
Microsoft Edge (Chromium-based)
Microsoft Edge for Android
Microsoft MPEG-2 Video Extension
Microsoft Office
Microsoft Office Access
Microsoft Office Excel
Microsoft Office SharePoint
Microsoft Office Visio
Microsoft Office Word
Microsoft Windows Codecs Library
Microsoft Windows DNS
Visual Studio
Windows Ancillary Function Driver for WinSock
Windows Authenticode
Windows Bind Filter Driver
Windows BitLocker
Windows Common Log File System Driver
Windows Event Tracing
Windows Installer
Windows Kernel
Windows Key Storage Provider
Windows MSHTML Platform
Windows Print Spooler Components
Windows Redirected Drive Buffering
Windows Scripting
Windows SMB
Windows Storage
Windows Subsystem for Linux
Windows TDX.sys
Windows Update
Windows Win32K
Windows WLAN Auto Config Service
Windows WLAN Service
處置建議:
目前微軟官方已針對弱點釋出修復版本,請各機關可聯絡系統維護廠商或參考以下連結:
https://msrc.microsoft.com/update-guide/releaseNote/2021-Sep
CVE編號:
CVE-2021-26435
CVE-2021-30606
CVE-2021-30607
CVE-2021-30608
CVE-2021-30609
CVE-2021-30610
CVE-2021-30611
CVE-2021-30612
CVE-2021-30613
CVE-2021-30614
CVE-2021-30615
CVE-2021-30616
CVE-2021-30617
CVE-2021-30618
CVE-2021-30619
CVE-2021-30620
CVE-2021-30621
CVE-2021-30622
CVE-2021-30623
CVE-2021-30624
CVE-2021-36956
CVE-2021-36960
CVE-2021-36962
CVE-2021-36969
CVE-2021-36972
CVE-2021-38624
CVE-2021-38629
CVE-2021-38632
CVE-2021-38635
CVE-2021-38636
CVE-2021-38637
CVE-2021-38644
CVE-2021-38645
CVE-2021-38646
CVE-2021-38647
CVE-2021-38648
CVE-2021-38649
CVE-2021-38650
CVE-2021-38654
CVE-2021-38655
CVE-2021-38656
CVE-2021-38657
CVE-2021-38658
CVE-2021-38659
CVE-2021-38660
CVE-2021-38661
CVE-2021-38667
CVE-2021-38669
CVE-2021-40448
參考資料:
1. https://msrc.microsoft.com/update-guide/releaseNote/2021-Sep