The zero-day vulnerability used to spread Emotet malware has been fixed

The zero-day vulnerability that allowed the Emotet malware to spread so aggressively has been fixed. This will allow Microsoft and other anti-virus software providers to track down infected computers, while also preventing a new wave of infections in the future.

The “cve-2021-40444 exploit” is a zero-day vulnerability that was used to spread the Emotet malware. The vulnerability has been fixed by Microsoft in the latest update of Windows 10.

Madalina has been a Windows user since she initially installed Windows XP on her computer. She is fascinated by all things technological, particularly new technologies such as artificial intelligence and DNA computing.

14th of December, 2021

Originally published in December 2018

Yes, it’s that time of the month again, and there’s a lot to consider in terms of software release now that the December 2021 Patch Tuesday updates are out.

Microsoft has issued a total of 67 software security solutions, including seven serious problems and a zero-day bug that is being actively exploited by unscrupulous third parties.

Microsoft has addressed several critical issues in this month’s patch, which is normally released on the second Tuesday of each month.

Remote code execution (RCE) problems, privilege escalation security flaws, spoofing bugs, and denial-of-service faults are among them.

Another noteworthy feature of this month’s distribution is that Windows 10 version 2004 has hit end-of-life status and will no longer get security updates.

Microsoft also had a lot of work to do in December.

Office, PowerShell, the Chromium-based Edge browser, the Windows Kernel, Print Spooler, and Remote Desktop Client are among the programs targeted by Microsoft’s December security update. 

There are a total of six zero-day vulnerabilities fixed in this release, albeit only one is known to be actively exploited in the wild, as follows:

Microsoft has corrected a total of 887 CVE-assigned vulnerabilities this year, which, although high, is a 29 percent drop from 2020. (not including Chromium-based Edge). 

One of the most significant achievements is that this patch corrects a Windows-related problem in the AppX installation.

The weakness has been spotted in malware from the Emotet/Trickbot/Bazaloader family, according to Redmond authorities, and an attacker would need to create a malicious file to employ in phishing attacks.

Because code execution seems to occur at the level of the logged-on user, attackers are likely to combine this with another flaw to gain control of a machine.

Another flaw in the Internet Storage Name Service (iSNS) server has been fixed, which might enable remote code execution if an attacker submits a specially crafted request to an affected server.

To refresh your memory, iSNS is an automated discovery and administration protocol for iSCSI devices on a TCP/IP storage network.

So, if your company has a SAN, you either have an iSNS server or you setup each of the logical interfaces separately.

This is one of three CVSS 9.8 problems that have been resolved in the last month. Prioritize testing and deployment of this patch if you have a SAN. 

Remember that Microsoft isn’t the only firm that publishes updates and repair patches around this time of the month, so look into:

What are your views on the new release this month? Please let us know what you think in the comments area below.

Was this page of assistance to you?

Thank you very much!

There are insufficient details It’s difficult to comprehend Other Speak with a Professional

Start a discussion.

Watch This Video-

The “microsoft patch tuesday october 2021” is a zero-day vulnerability used to spread the Emotet malware. Microsoft has released patches for Windows and MacOS, which will fix the issue.

Related Tags

• microsoft zero-day exploit
• microsoft zero-day vulnerability 2021
• patch tuesday september 2021 issues
• mshtml zero-day
• zero-day patch september 2021