وصله کردن ده‌ها نقص امنیتی توسط جدیدترین به‌روزرسانی‌های مایکروسافت ویندوز

?????????? ??? ??????? ?? ?? ???? ??????????? ?????? ?????? ????????????????? ??? ?? ?? ????????? ???? ?? ??? ?????? ?? ??? ??????? Exchange Server ? Internet Explorer ? Office ? Hyper-V ? Visual Studio ? Skype ????? ?????????? ????? ???[?].

?? ??? ?? ?????? ???? ???? ?? ????????? ?????? ?? ???? ?? ????????? ??? ? ?? ???? ?? ??? ????? ?????????? ????. ?? ???? ?? ??? ????????????? ??????? ????? ??????????????? ????? ?????? ??? ?????[?]? ?????? ?? ????? ?? ???? ?????? ??? ??????????? ???? ???? ???????.

???????? ??? ????????? CVE-2021-31166 ???[?]? ?? ?????????? ????? ?? ?? ??? ??? wormable ?? stack ?????? HTTP. ???????? ?? ???????? ?? ?? ????? ??????? ????? ????? ?? ???? ???? ????????? ?? ?? ???? ???? ??? ?? ??? ? ????? ?????? ??? ?? ?????? ?? ?????? ?? ????? CVSS ???.

??? ???? ?? ?????????????? ????????? ??? ?? ????? ?? ?? ??? ??? ?? Hyper-V ?? ??? CVE-2021-28476 ???[?] ?? ?????? ?? ?????? ??? ?? ?????CVSS  ???????? ??? ?? ?? ???? ???? ??????? ????????? ?? ??? ??? ??? ??????[?].

?????????? ?? ????? ??? ?????????? ???: “??? ????? ?? ?? ????? ????? ????? ????? ?????? ?? ???? ?????? Hyper-V ?? ????? ??? ?? ?? ???? ?????? ? ?????? ??????? ??????. ??????? ???? ?????????? ?? ????? ????? ????? ??????????. ?? ????? ?????? ?? ???? ?????? ???? ???? ????? ?????? Hyper-V (???? ?????) ???? ?? ?? ?????? DoS ??????.”

?????? ?????? ???????? ???: “??????? ?? ?? ??????? map ????? ??????? ?????? ????? ?? ?? ?????? ?????????? ???? ?? ?????? Hyper-V ????? ?? ???? ??? ???? ????? ????? ????? ??? ?????? ?????????? ??? ?? ???????? ????? ?????? Hyper-V ?? ?? ??? ???????.”

????? ?? ???? ??? ?????????????? ?? ??? ???? ????? ????? ??????? ?? ??????? ???????? (CVE-2021-26419) ? ???? ???????? ?? Microsoft Exchange Server ?? ????? ???????[?]? ??? ????? ??? ?????? ??? ?? ?????????? ?? ???? ???? ????????????? ProxyLogon ???? ??? ????? ???????? ????? ???? ??? [?].

• CVE-2021-31207(CVSS score: 6.6) – Security Feature Bypass Vulnerability (publicly known)
• CVE-2021-31195(CVSS score: 6.5) – Remote Code Execution Vulnerability
• CVE-2021-31198(CVSS score: 7.8) – Remote Code Execution Vulnerability
• CVE-2021-31209(CVSS score: 6.5) – Spoofing Vulnerability

????????? CVE-2021-31207 ? CVE-2021-31209 ?? ?????? Pwn2Own 2021 ????? ????[?]? Orange Tsai ?? DEVCORE? ?? ?????????? ProxyLogon Exchange Server ?? ??? ???? ?????? ????? CVE-2021-31195 ?? ?????? ???.

?? ??? ????? ?????????????? ?? ?????? ????? ?????? ?? Windows Manager Container Manager? ?????????? ????? ??????? ?? ???? ?????? ?????? ? ????? ??? ?? ????? ?? ?? ??? ??? ?? ?????????? ?????Microsoft SharePoint Server ? Skype for Business?Lync ? Visual Studio ?Windows Media Foundation Core ?? ????? ?????.

???? ??? ??? ????? ??????????????? ??????? ??????? ?????? ????????? ?? ???? ??? ?????? ????.

Start > Settings > Update & Security > Windows Update

?????

[?] https://msrc.microsoft.com/update-guide/releaseNote/2021-May

[?] https://thehackernews.com/2021/04/nsa-discovers-new-vulnerabilities.html

[?] https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31166

[?] https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28476

[?] https://scorecounter.com

[?] https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26419

[?] https://thehackernews.com/2021/03/microsoft-issues-security-patches-for.html

[?] https://thehackernews.com/2021/04/windows-ubuntu-zoom-safari-ms-exchange.html

[?] https://thehackernews.com/2021/05/latest-microsoft-windows-updates-patch.html

??????? :

???? ??????

پویش #دو_درجه_کمتر