-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
**************************************************************************************
Title: Microsoft Security Update Releases
Issued: September 17, 2021
**************************************************************************************
Summary
=======
The following CVEs have undergone a major revision increment:
* CVE-2021-38647
- Open Management Infrastructure Remote Code Execution Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647
- Version 3.0
- Reason for Revision: The following revisions
have been made: 1) In the Security Updates table, additional affected products have
been added. 2) Additional Guidance Regarding OMI Vulnerabilities within Azure VM
Management Extensions
has been updated with further information about identifying VMs that are affected
by this vulnerability.
- Originally posted: September 14, 2021
- Updated: September 17, 2021
* CVE-2021-38645
* CVE-2021-38648
* CVE-2021-36849
- Open Management Infrastructure Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38645
- Open Management Infrastructure Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38648
- Open Management Infrastructure Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38649
Revision information
===========================
- Version 3.0
- Reason for Revision: The following revisions
have been made: 1) In the Security Updates table, additional affected products have
been added. 2) Additional Guidance Regarding OMI Vulnerabilities within Azure VM
Management Extensions
has been updated with further information about identifying VMs that are affected
by this vulnerability.
- Originally posted: September 14, 2021
- Updated: September 17, 2021
**************************************************************************************
Other Information
=================
Recognize and avoid fraudulent email to Microsoft customers:
======================================================================================
If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites.
Microsoft does not distribute security updates via email.
