內容說明:
微軟釋出產品五月份安全性更新,修補遠端執行任意程式碼等漏洞。
影響平台:
.NET Core & Visual Studio
HTTP.sys
Internet Explorer
Microsoft Accessibility Insights for Web
Microsoft Bluetooth Driver
Microsoft Dynamics Finance & Operations
Microsoft Exchange Server
Microsoft Graphics Component
Microsoft Office
Microsoft Office Access
Microsoft Office Excel
Microsoft Office SharePoint
Microsoft Office Word
Microsoft Windows Codecs Library
Microsoft Windows IrDA
Open Source Software
Role: Hyper-V
Skype for Business and Microsoft Lync
Visual Studio
Visual Studio Code
Windows Container Isolation FS Filter Driver
Windows Container Manager Service
Windows Cryptographic Services
Windows CSC Service
Windows Desktop Bridge
Windows OLE
Windows Projected File System FS Filter
Windows RDP Client
Windows SMB
Windows SSDP Service
Windows WalletService
Windows Wireless Networking
處置建議:
目前微軟官方已針對弱點釋出修復版本,請各機關可聯絡系統維護廠商或參考以下連結:
https://msrc.microsoft.com/update-guide/releaseNote/2021-May
CVE編號:
CVE-2020-24587
CVE-2021-1720
CVE-2021-26419
CVE-2021-28455
CVE-2021-28465
CVE-2021-28474
CVE-2021-28479
CVE-2021-31166
CVE-2021-31171
CVE-2021-31173
CVE-2021-31174
CVE-2021-31175
CVE-2021-31176
CVE-2021-31177
CVE-2021-31178
CVE-2021-31179
CVE-2021-31180
CVE-2021-31184
CVE-2021-31186
CVE-2021-31191
CVE-2021-31205
CVE-2021-31206
CVE-2021-31207
CVE-2021-31209
CVE-2021-31211
CVE-2021-31213
CVE-2021-31214
CVE-2021-31936
參考資料:
1. https://msrc.microsoft.com/update-guide/releaseNote/2021-May