Microsoft October 2021 Patch Tuesday fixes 4 zero-days, 71 flaws

Label CVE ID CVE Title Gravity .NET Core and Visual Studio CVE-2021-41355 .NET Core and Visual Studio Information Disclosure Vulnerability Important Active Directory Federation Services CVE-2021-41361 Active Directory Federation server spoofing vulnerability Important Console window host CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability Important HTTP.sys CVE-2021-26442 Windows HTTP.sys elevation of privilege vulnerability Important Microsoft DWM Core Library CVE-2021-41339 Microsoft DWM Master Library Elevation of Privilege Vulnerability Important Microsoft Dynamics CVE-2021-40457 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability Important Microsoft Dynamics CVE-2021-41353 Microsoft Dynamics 365 (on-premises) spoofing vulnerability Important Microsoft Dynamics CVE-2021-41354 Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability Important Microsoft Edge (Chrome based) CVE-2021-37978 Chrome: CVE-2021-37978 Heap buffer overflow in Blink Unknown Microsoft Edge (Chrome based) CVE-2021-37979 Chrome: CVE-2021-37979 Buffer overflow in WebRTC Unknown Microsoft Edge (Chrome based) CVE-2021-37980 Chrome: CVE-2021-37980 Inappropriate implementation in Sandbox Unknown Microsoft Edge (Chrome based) CVE-2021-37977 Chrome: CVE-2021-37977 Use after free in garbage collection Unknown Microsoft Edge (Chrome based) CVE-2021-37974 Chrome: CVE-2021-37974 Free to use in Safe Browsing Unknown Microsoft Edge (Chrome based) CVE-2021-37975 Chrome: CVE-2021-37975 Use after free in V8 Unknown Microsoft Edge (Chrome based) CVE-2021-37976 Chromium: CVE-2021-37976 Information leak in the kernel Unknown Microsoft Exchange Server CVE-2021-26427 Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Exchange Server CVE-2021-34453 Microsoft Exchange Server Denial of Service Vulnerability Important Microsoft Exchange Server CVE-2021-41348 Microsoft Exchange Server Elevation of Privilege Vulnerability Important Microsoft Exchange Server CVE-2021-41350 Microsoft Exchange Server spoofing vulnerability Important Microsoft Graphics Component CVE-2021-41340 Remote Code Execution Vulnerability in Windows Graphical Component Important Microsoft Intune CVE-2021-41363 Intune Management Extension Security Feature Bypass Vulnerability Important Microsoft Office Excel CVE-2021-40473 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2021-40472 Microsoft Excel Information Disclosure Vulnerability Important Microsoft Office Excel CVE-2021-40471 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2021-40474 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2021-40485 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2021-40479 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office SharePoint CVE-2021-40487 Microsoft SharePoint Server Remote Code Execution Vulnerability Important Microsoft Office SharePoint CVE-2021-40483 Microsoft SharePoint Server spoofing vulnerability Moo Microsoft Office SharePoint CVE-2021-40484 Microsoft SharePoint Server spoofing vulnerability Important Microsoft Office SharePoint CVE-2021-40482 Microsoft SharePoint Server Information Disclosure Vulnerability Important Microsoft Office SharePoint CVE-2021-41344 Microsoft SharePoint Server Remote Code Execution Vulnerability Important Microsoft Office Visio CVE-2021-40480 Remote Code Execution Vulnerability in Microsoft Office Visio Important Microsoft Office Visio CVE-2021-40481 Remote Code Execution Vulnerability in Microsoft Office Visio Important Microsoft Office Word CVE-2021-40486 Microsoft Word Remote Code Execution Vulnerability Critical Microsoft Windows Codec Library CVE-2021-40462 Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability Important Microsoft Windows Codec Library CVE-2021-41330 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Important Microsoft Windows Codec Library CVE-2021-41331 Windows Media Audio Decoder Remote Code Execution Vulnerability Important Rich text editing control CVE-2021-40454 Rich Text Editing Control Information Disclosure Vulnerability Important Role: DNS Server CVE-2021-40469 Windows DNS Server Remote Code Execution Vulnerability Important Role: Windows Active Directory Server CVE-2021-41337 Active Directory Security Feature Bypass Vulnerability Important Role: Windows AD FS Server CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability Important Role: Windows Hyper-V CVE-2021-40461 Windows Hyper-V remote code execution vulnerability Critical Role: Windows Hyper-V CVE-2021-38672 Windows Hyper-V remote code execution vulnerability Critical System Center CVE-2021-41352 SCOM Information Disclosure Vulnerability Important Visual studio CVE-2020-1971 OpenSSL: CVE-2020-1971 EDIPARTYNAME NULL pointer dereference Important Visual studio CVE-2021-3450 OpenSSL: Bypass CA Certificate CVE-2021-3450 with X509_V_FLAG_X509_STRICT Important Visual studio CVE-2021-3449 OpenSSL: CVE-2021-3449 NULL pointer deref in signature_algorithms processing Important Windows AppContainer CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability Important Windows AppContainer CVE-2021-40476 Windows AppContainer elevation of privilege vulnerability Important Windows AppX Deployment Service CVE-2021-41347 Windows AppX Deployment Service Elevation of Privilege Vulnerability Important Windows Link Filter Driver CVE-2021-40468 Windows Link Filter Driver Information Disclosure Vulnerability Important Windows Cloud Files Mini-Filter Driver CVE-2021-40475 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability Important Windows Common Log File System Driver CVE-2021-40443 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important Windows Common Log File System Driver CVE-2021-40467 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important Windows Common Log File System Driver CVE-2021-40466 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important Windows Desktop Bridge CVE-2021-41334 Windows Desktop Bridge elevation of privilege vulnerability Important Windows DirectX CVE-2021-40470 DirectX Graphics Kernel Elevation of Privilege Vulnerability Important Windows Event Tracking CVE-2021-40477 Windows Event Tracing Elevation of Privilege Vulnerability Important Windows exFAT file system CVE-2021-38663 Windows exFAT File System Information Disclosure Vulnerability Important Windows Fastfat Driver CVE-2021-41343 Windows Fast FAT File System Driver Information Disclosure Vulnerability Important Windows Fastfat Driver CVE-2021-38662 Windows Fast FAT File System Driver Information Disclosure Vulnerability Important Windows Installer CVE-2021-40455 Windows Installer spoofing vulnerability Important Windows kernel CVE-2021-41336 Windows Kernel Information Disclosure Vulnerability Important Windows kernel CVE-2021-41335 Windows Kernel Elevation of Privilege Vulnerability Important Windows platform MSHTML CVE-2021-41342 Windows MSHTML Platform Remote Code Execution Vulnerability Important Windows Share near me CVE-2021-40464 Sharing close to Windows elevation of privilege vulnerability Important Windows Network Address Translation (NAT) CVE-2021-40463 Windows NAT denial of service vulnerability Important Windows Print Spooler Components CVE-2021-41332 Windows Print Spooler Information Disclosure Vulnerability Important Windows Print Spooler Components CVE-2021-36970 Windows Print Spooler Spoofing Vulnerability Important Windows remote procedure call execution CVE-2021-40460 Windows Remote Procedure Call Execution Security Feature Bypass Vulnerability Important Windows Storage Controller CVE-2021-40489 Storage space controller elevation of privilege vulnerability Important Windows Storage Controller CVE-2021-41345 Storage space controller elevation of privilege vulnerability Important Windows Storage Controller CVE-2021-26441 Storage space controller elevation of privilege vulnerability Important Windows Storage Controller CVE-2021-40478 Storage space controller elevation of privilege vulnerability Important Windows Storage Controller CVE-2021-40488 Storage space controller elevation of privilege vulnerability Important Windows TCP / IP CVE-2021-36953 Windows TCP / IP Denial of Service vulnerability Important Windows text formatting CVE-2021-40465 Remote Code Execution Vulnerability in Windows Text Formatting Important Windows Win32K CVE-2021-40449 Win32k elevation of privilege vulnerability Important Windows Win32K CVE-2021-41357 Win32k elevation of privilege vulnerability Important Windows Win32K CVE-2021-40450 Win32k elevation of privilege vulnerability Important