清静产品与计划
行业解决计划
清静服务与运营
清静研究
相助同伴
手艺支持
基础设施清静
数据清静
云盘算清静
工业互联网清静
物联网清静
信息手艺应用立异
所有产品
所有解决计划
CH
EN
清静产品与计划
行业解决计划
清静服务与运营
清静研究
相助同伴
手艺支持
2021-05-12
一. 误差概述
5月12日，微软宣布5月清静更新补丁，修复了55个清静误差，涉及Windows、Microsoft Office、Exchange Server、Visual Studio Code、Internet Explorer等普遍使用的产品，其中包括远程代码执行和权限提升等高危误差类型。
本月微软月度更新修复的误差中，严重水平为要害（Critical）的误差有4个，主要（Important）误差有50个。请相关用户尽快更新补丁举行防护。详细误差列表请参考附录。
AG公司远程清静评估系统（RSAS）已具备微软此次补丁更新中大大都误差的检测能力（包括CVE-2021-26419、CVE-2021-31166、CVE-2021-31194、CVE-2021-28476等高危误差），请相关用户关注AG公司远程清静评估系统系统插件升级包的更新，实时升级至V6.0R02F01.2301，官网链接：http://update.nsfocus.com/update/listRsasDetail/v/vulsys。
参考链接：
https://msrc.microsoft.com/update-guide/en-us/releaseNote/2021-May
二. 重点误差简述
凭证产品盛行度和误差主要性筛选出此次更新中包括影响较大的误差，请相关用户重点举行关注：
HTTP协议栈远程代码执行误差（CVE-2021-31166）：
HTTP协议栈（http.sys）保存远程代码执行误差，未经身份验证的远程攻击者可通过向目的主机发送特制数据包来使用此误差，从而在目的系统上执行恣意代码。CVSS评分为9.8，微软体现此误差可用于蠕虫式撒播。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31166
Hyper-V 远程代码执行误差（CVE-2021-28476）：
虚拟机治理程序Windows Hyper-V保存远程执行代码误差，CVSS评分为9.9 。此误差使guest VM 可以强制Hyper-V host的内核读取恣意可能无效的地点，在某些情形下乐成使用该误差的攻击者可以在 Hyper-V 的服务器上运行二进制文件或在系统上执行恣意代码。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28476
Microsoft SharePoint远程代码执行误差（CVE-2021-28474/CVE-2021-31181）：
经由身份认证的攻击者可通过会见建设SharePoint站点使用以上误差，实现在目的系统上执行恣意代码。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28474
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31181
OLE Automation 远程代码执行误差（CVE-2021-31194）：
此误差保存于Windows OLE中，攻击者搭建一个恶意的网站诱导用户会见，通过Web浏览器挪用OLE自动化使用此误差，从而实现远程代码执行。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31194
Exchange Server 清静功效绕过误差（CVE-2021-31207）：
此误差为2021 Pwn2Own 竞赛上发明的Exchange Server误差之一，现在已果真披露，攻击者乐成使用该误差可获取一定的服务器控制权限。
官方通告链接：
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31207
三. 影响规模
以下为重点关注误差的受影响产品版本，其他误差影响产品规模请参阅官方通告链接。
|
误差编号 |
受影响产品版本 |
|
CVE-2021-31166 |
Windows Server, version 20H2 (Server Core Installation) Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for x64-based Systems Windows Server, version 2004 (Server Core installation) Windows 10 Version 2004 for x64-based Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for 32-bit Systems |
|
CVE-2021-28476 |
Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows 8.1 for x64-based systems Windows 7 for x64-based Systems Service Pack 1 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 for x64-based Systems Windows Server, version 20H2 (Server Core Installation) Windows 10 Version 20H2 for x64-based Systems Windows Server, version 2004 (Server Core installation) Windows 10 Version 2004 for x64-based Systems Windows Server, version 1909 (Server Core installation) Windows 10 Version 1909 for x64-based Systems Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1803 for x64-based Systems |
|
CVE-2021-28474 CVE-2021-31181 |
Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 |
|
CVE-2021-31194 |
Windows 10 Version 2004 for x64-based Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows Server, version 1909 (Server Core installation) Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 20H2 for x64-based Systems Windows Server, version 2004 (Server Core installation) Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 Windows RT 8.1 Windows 8.1 for x64-based systems Windows 8.1 for 32-bit systems Windows 7 for x64-based Systems Service Pack 1 Windows 7 for 32-bit Systems Service Pack 1 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems Windows Server, version 20H2 (Server Core Installation) Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for 32-bit Systems |
|
CVE-2021-31207 |
Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2016 Cumulative Update 20 Microsoft Exchange Server 2019 Cumulative Update 9 Microsoft Exchange Server 2013 Cumulative Update 23 |
四. 误差防护
4.1 补丁更新
现在微软官方已针对受支持的产品版本宣布了修复以上误差的清静补丁，强烈建议受影响用户尽快装置补丁举行防护，官方下载链接：
https://msrc.microsoft.com/update-guide/en-us/releaseNote/2021-May
注：由于网络问题、盘算机情形问题等缘故原由，Windows Update的补丁更新可能泛起失败。用户在装置补丁后，应实时检查补丁是否乐成更新。
右键点击Windows图标，选择“设置(N)”，选择“更新和清静”-“Windows更新”，审查该页面上的提醒信息，也可点击“审查更新历史纪录”审查历史更新情形。
针对未乐成装置的更新，可点击更新名称跳转到微软官方下载页面，建议用户点击该页面上的链接，转到“Microsoft更新目录”网站下载自力程序包并装置。
? 2025 NSFOCUS AG公司科技 www.nsfocus.com All Rights Reserved . 京公网安备 11010802021605号 京ICP备14004349号 京ICP证110355号
AG公司云
