-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
**************************************************************************************
Title: Microsoft Security Update Releases
Issued: June 8, 2021
**************************************************************************************
Summary
=======
The following CVEs have undergone a major revision increment:
* CVE-2020-0835
* CVE-2021-28455
CVE-2020-0835
- Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0835
- Version 2.0
- Reason for Revision: Microsoft has released updates for the Windows Defender
antimalware platform installed on supported editions of Windows 8.1 and Windows 10,
version 1507 as these versions are affected by this vulnerability. Please see the
FAQ for the version numbers that contain the update. In addition information has
been added to the FAQ to indicate that systems that have disabled Microsoft Defender
are not exploitable by this vulnerability.
- Originally posted: April 14, 2020
- Updated: June 8, 2021
CVE-2021-28455
- Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code
Execution Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28455
- Version 2.0
- Reason for Revision: CVE updated to document that this vulnerability also affects
Microsoft Access 2013 and Microsoft Access 2016. Customers using those products
should apply the security updates released on June 8, 2021.
- Originally posted: May 11, 2021
- Updated: June 8, 2021
**************************************************************************************
Other Information
=================
Recognize and avoid fraudulent email to Microsoft customers:
======================================================================================
If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites.
Microsoft does not distribute security updates via email.