Microsoft Server security updates, September 2021 (Patch Tuesday 2021-09-14)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in September 2021, including the Patch Tuesday release on 2021-09-14 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 33
Critical: 1
High: 22
In CISA KEV: 4
CVEs: 33

Microsoft server CVEs, September 2021

Sep 15, 2021
Critical [CVE-2021-38647] Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Critical9.8ExploitedCISA KEV
Sep 15, 2021
High [CVE-2021-40444] Microsoft MSHTML Remote Code Execution Vulnerability
High8.8ExploitedCISA KEV
Sep 15, 2021
High [CVE-2021-40447] Windows Print Spooler Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-38652] Microsoft SharePoint Server Spoofing Vulnerability
High7.6
Sep 15, 2021
High [CVE-2021-38651] Microsoft SharePoint Server Spoofing Vulnerability
High7.6
Sep 15, 2021
High [CVE-2021-38649] Open Management Infrastructure Elevation of Privilege Vulnerability
High7.0ExploitedCISA KEV
Sep 15, 2021
High [CVE-2021-38639] Win32k Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-38638] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-38634] Microsoft Windows Update Client Elevation of Privilege Vulnerability
High7.1
Sep 15, 2021
High [CVE-2021-38633] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-38630] Windows Event Tracing Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-38626] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36975] Win32k Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36974] Windows SMB Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36973] Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36968] Windows DNS Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36966] Windows Subsystem for Linux Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36967] Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
High8.0
Sep 15, 2021
High [CVE-2021-36965] Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
High8.8
Sep 15, 2021
High [CVE-2021-36964] Windows Event Tracing Elevation of Privilege Vulnerability
High7.8
Sep 15, 2021
High [CVE-2021-36960] Windows SMB Information Disclosure Vulnerability
High7.5
Sep 15, 2021
High [CVE-2021-36954] Windows Bind Filter Driver Elevation of Privilege Vulnerability
High8.8
Sep 15, 2021
High [CVE-2021-26435] Windows Scripting Engine Memory Corruption Vulnerability
High8.1
Sep 15, 2021
Medium [CVE-2021-38637] Windows Storage Information Disclosure Vulnerability
Medium5.5
Sep 15, 2021
Medium [CVE-2021-38636] Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Medium5.5
Sep 15, 2021
Medium [CVE-2021-38632] Windows BitLocker Security Feature Bypass Vulnerability
Medium5.7
Sep 15, 2021
Medium [CVE-2021-38629] Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Medium6.5
Sep 15, 2021
Medium [CVE-2021-38624] Windows Key Storage Provider Security Feature Bypass Vulnerability
Medium6.5
Sep 15, 2021
Medium [CVE-2021-36972] Windows SMB Information Disclosure Vulnerability
Medium5.5
Sep 15, 2021
Medium [CVE-2021-36969] Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Medium5.5
Sep 15, 2021
Medium [CVE-2021-36962] Windows Installer Information Disclosure Vulnerability
Medium5.5
Sep 15, 2021
Medium [CVE-2021-36961] Windows Installer Denial of Service Vulnerability
Medium5.5
Sep 15, 2021
Medium [CVE-2021-36959] Windows Authenticode Spoofing Vulnerability
Medium5.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.