NVD disclosure day

Published threat advisories for July 16, 2021

CVE-2021-34458

Windows Kernel Remote Code Execution Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A critical vulnerability exists in the Windows Kernel allowing an attacker with limited access to execute remote code. This could lead to unauthorized control over affected systems and impact data confidentiality. The organization should confirm the relevance and exposure of this issue to understand potential risks.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2021-34448

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A vulnerability in the Windows Scripting Engine could allow attackers to corrupt memory, potentially leading to code execution. This impacts organizations by risking data access, modification, or service disruption. Attackers could exploit this through user interaction with malicious content. Business risk involves una

NVD modified: NVD date unavailable • CISA KEV