Tripwire Patch Priority Index for June 2021 | The State of Security

Tripwire’s June 2021 Patch Priority Index (PPI) brings together important vulnerabilities from Cacti, Docker, Adobe, and Microsoft.

First on the patch priority list this month are patches for Microsoft SharePoint (CVE-2021-31181), Cacti (CVE-2020-14295), and Docker (CVE-2019-5736). Exploits for these vulnerabilities have been recently added to the Metasploit Exploit Framework. These systems should be patched as soon as possible.

Up next are patches for Adobe Reader and Acrobat that resolve five issues including out-of-bounds read and use-after-free vulnerabilities.

Next is a patch for Microsoft Scripting Engine, which resolves a memory corruption vulnerability.

Next on the patch priority list this month are patches for Microsoft Excel, Office, and Outlook. These patches resolve four remote code execution vulnerabilities.

Then there are patches that affect components of the Windows operating systems. These patches resolve over 20 vulnerabilities including elevation of privilege, information disclosure, remote code execution, security feature bypass, denial of service, and memory corruption. These vulnerabilities affect core Windows, NTLM, DCOM Server, GPSVC, Common Log file system, NFS, Kernel, DWM, Remote Desktop, Kernel-mode Driver, NTFS, and others.

This is followed by a Hyper-V patch that resolves a denial-of-service vulnerability.

Lastly, administrators should focus on server-side patches that resolve several issues including remote code execution, information disclosure, and spoofing vulnerabilities in Microsoft SharePoint.