-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
**************************************************************************************
Title: Microsoft Security Update Releases
Issued: September 20, 2021
**************************************************************************************
Summary
=======
The following CVEs have undergone a major revision increment:
* CVE-2021-38647
- Open Management Infrastructure Remote Code Execution Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647
- Version 4.0
- Reason for Revision: The following revisions have been made in the Security Updates
table: 1) Updated version number of Azure Diagnostics (LAD) 2) Added information
for new updates available for Azure Stack Hub.
- Originally posted: September 14, 2021
- Updated: September 20, 2021
* CVE-2021-38645
* CVE-2021-38648
* CVE-2021-36849
- Open Management Infrastructure Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38645
- Open Management Infrastructure Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38648
- Open Management Infrastructure Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38649
Revision information
===========================
- Version 4.0
- Reason for Revision: The following revisions have been made in the Security Updates
table: 1) Updated version number of Azure Diagnostics (LAD) 2) Added information
for new updates available for Azure Stack Hub.
- Originally posted: September 14, 2021
- Updated: September 20, 2021
**************************************************************************************
Other Information
=================
Recognize and avoid fraudulent email to Microsoft customers:
======================================================================================
If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites.
Microsoft does not distribute security updates via email.
