Microsoft Patches Actively Exploited Vulnerability with Windows Updates (2021)

 Microsoft released security patches on Tuesday to address 44 security problems impacting its software products and services, one of which it claims is a live zero-day attack.

The update fixes seven critical and 37 important problems in Windows,.NET Core and Visual Studio, Azure, Microsoft Graphics Component, Microsoft Office, Microsoft Scripting Engine, Microsoft Windows Codecs Library, and Remote Desktop Client, among other things. This is in addition to the seven security issues it fixed on August 5 in the Microsoft Edge browser. CVE-2021-36948 (CVSS score: 7.8) is a critical elevation of privilege problem affecting the Windows Update Medic Service – a service that allows for the repair and protection of Windows Update components — that may be exploited to launch malicious applications with elevated rights.