Patch Tuesday August 2021 - Hyper-V, RDP Clients, Windows Update Medic

CVE-2021-26424 - It's probably because I've been watching too many Olympic events lately, but I'm pretty impressed with a 9.9 score. According to Microsoft, this vulnerability is triggerable by a malicious Hyper-V guest sending an ipv6 ping to the Hyper-V host.

CVE-2021-34535 - Next up on our list of highlights is a vulnerability affecting remote desktop. Something to keep in mind is that this affects RDP clients and no RDP servers.

CVE-2021-36948 - This is currently the only CVE being actively exploited of the bunch. A bug in the Windows Update Medic Service could allow local privilege escalation if exploited.

Another #pdq #patchTuesday

Can't get enough PDQ? Subscribe and enable notifications!
- Twitter - General info: @admarsenal
- All things PDQ Deploy: @pdqdeploy
- All things PDQ Inventory: @pdqinventory
- Package Library updates: @packagelibrary
Instagram: @pdqlife