106 vulnerabilities were discovered in February during Patch Tuesday

Teodor Nechita
by Teodor Nechita
Software Managing Editor
Eager to help those in need, Teodor writes articles daily on subjects regarding Windows, Xbox, and all things tech-related. When not working, you may usually find him either at the gym or taking a... Read more
Affiliate Disclosure
  • 106 different CVEs were identified according to the reports that came with this Patch Tuesday.
  • 56 affected Microsoft products, while 50 affected Adobe products.
  • These CVEs range in terms of severity from Moderate to Critical, but they were dealt with.
  • Don't forget to get the latest Patch Tuesday updates to further protect yourself from common vulnerabilities.
Patch Tuesday February CVE report

Now that Patch Tuesday has finally arrived, so have the CVE reports where users can finally see which Microsoft and Adobe features and apps were targeted by common vulnerabilities and malware attacks.

Last month started off the year 2021 with 91 CVEs, but fortunately enough, very few were actually identified as being serious, with all of them being fixed as soon as they were found.

Well, CVEs were identified this month as well, and we will be listing a brief rundown of how they behave, and what services they affected.


The February CVE report includes 106 identified CVEs

Vulnerabilities found in Adobe products

This month was quite abundant in terms of Adobe-related CVEs, as 50 were discovered with affecting Adobe Dreamweaver, Illustrator, Animate, Photoshop, Magento, and Reader.

Adobe Reader alone was the target of 23 CVEs, 17 of which were rated as Critical.

Magento came second place in terms of sheer CVE numbers, with 18 vulnerabilities discovered, although they were of lesser severity.


Vulnerabilities found in Microsoft products

As always, Microsoft products hold the lead in terms of total CVEs discovered, although not by such a large margin this month, with only 6 more compared to Adobe, totaling 56.

These CVEs covered Microsoft Windows components, .NET Framework, Azure IoT, Azure Kubernetes Service, Microsoft Edge for Android, Exchange Server, Office and Office Services and Web Apps, Skype for Business and Lync, and Windows Defender.

Of the 56, 43 were rated as Important


Which were some of the most severe CVEs?

  • CVE-2021-1732
    • Windows Win32k Elevation of Privilege Vulnerability
  • CVE-2021-24078
    • Windows DNS Server Remote Code Execution Vulnerability
  • CVE-2021-24074
    • Windows TCP/IP Remote Code Execution Vulnerability
  • CVE-2021-26701
    • .NET Core and Visual Studio Remote Code Execution Vulnerability

All other identified CVEs are listed in the table below:

CVE

Title

Severity

CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Important
CVE-2021-26701 .NET Core and Visual Studio Remote Code Execution Vulnerability Critical
CVE-2021-1721 .NET Core and Visual Studio Denial of Service Vulnerability Important
CVE-2021-1733 Sysinternals PsExec Elevation of Privilege Vulnerability Important
CVE-2021-24098 Windows Console Driver Denial of Service Vulnerability Important
CVE-2021-24106 Windows DirectX Information Disclosure Vulnerability Important
CVE-2021-1727 Windows Installer Elevation of Privilege Vulnerability Important
CVE-2021-24112 .NET Core for Linux Remote Code Execution Vulnerability Critical
CVE-2021-24081 Microsoft Windows Codecs Library Remote Code Execution Vulnerability Critical
CVE-2021-24091 Windows Camera Codec Pack Remote Code Execution Vulnerability Critical
CVE-2021-24078 Windows DNS Server Remote Code Execution Vulnerability Critical
CVE-2021-1722 Windows Fax Service Remote Code Execution Vulnerability Critical
CVE-2021-24077 Windows Fax Service Remote Code Execution Vulnerability Critical
CVE-2021-24093 Windows Graphics Component Remote Code Execution Vulnerability Critical
CVE-2021-24088 Windows Local Spooler Remote Code Execution Vulnerability Critical
CVE-2021-24074 Windows TCP/IP Remote Code Execution Vulnerability Critical
CVE-2021-24094 Windows TCP/IP Remote Code Execution Vulnerability Critical
CVE-2021-24111 .NET Framework Denial of Service Vulnerability Important
CVE-2021-24087 Azure IoT CLI extension Elevation of Privilege Vulnerability Important
CVE-2021-24101 Microsoft Dataverse Information Disclosure Vulnerability Important
CVE-2021-24092 Microsoft Defender Elevation of Privilege Vulnerability Important
CVE-2021-1724 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability Important
CVE-2021-24100 Microsoft Edge for Android Information Disclosure Vulnerability Important
CVE-2021-24067 Microsoft Excel Remote Code Execution Vulnerability Important
CVE-2021-24068 Microsoft Excel Remote Code Execution Vulnerability Important
CVE-2021-24069 Microsoft Excel Remote Code Execution Vulnerability Important
CVE-2021-24070 Microsoft Excel Remote Code Execution Vulnerability Important
CVE-2021-1730 Microsoft Exchange Server Spoofing Vulnerability Important
CVE-2021-24085 Microsoft Exchange Server Spoofing Vulnerability Important
CVE-2021-24071 Microsoft SharePoint Information Disclosure Vulnerability Important
CVE-2021-24066 Microsoft SharePoint Remote Code Execution Vulnerability Important
CVE-2021-24072 Microsoft SharePoint Server Remote Code Execution Vulnerability Important
CVE-2021-1726 Microsoft SharePoint Spoofing Vulnerability Important
CVE-2021-24114 Microsoft Teams iOS Information Disclosure Vulnerability Important
CVE-2021-24076 Microsoft Windows VMSwitch Information Disclosure Vulnerability Important
CVE-2021-24082 Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability Important
CVE-2021-24105 Package Managers Configurations Remote Code Execution Vulnerability Important
CVE-2021-1731 PFX Encryption Security Feature Bypass Vulnerability Important
CVE-2021-24099 Skype for Business and Lync Denial of Service Vulnerability Important
CVE-2021-24073 Skype for Business and Lync Spoofing Vulnerability Important
CVE-2021-1728 System Center Operations Manager Elevation of Privilege Vulnerability Important
CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability Important
CVE-2021-1639 Visual Studio Code Remote Code Execution Vulnerability Important
CVE-2021-24083 Windows Address Book Remote Code Execution Vulnerability Important
CVE-2021-24079 Windows Backup Engine Information Disclosure Vulnerability Important
CVE-2021-24102 Windows Event Tracing Elevation of Privilege Vulnerability Important
CVE-2021-24103 Windows Event Tracing Elevation of Privilege Vulnerability Important
CVE-2021-24096 Windows Kernel Elevation of Privilege Vulnerability Important
CVE-2021-24084 Windows Mobile Device Management Information Disclosure Vulnerability Important
CVE-2021-24075 Windows Network File System Denial of Service Vulnerability Important
CVE-2021-25195 Windows PKU2U Elevation of Privilege Vulnerability Important
CVE-2021-1734 Windows Remote Procedure Call Information Disclosure Vulnerability Important
CVE-2021-24086 Windows TCP/IP Denial of Service Vulnerability Important
CVE-2021-1698 Windows Win32k Elevation of Privilege Vulnerability Important
CVE-2021-24109 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability Moderate
CVE-2021-24080 Windows Trust Verification API Denial of Service Vulnerability Moderate

While January started off with quite a large number of CVE, February seems to have topped it off by quite a bit, and it seems that there is a chance that 2021 may have more CVEs compared to 2020.

Keep in mind that if you happen to use any of the affected products mentioned above, you may have exposed yourself to such vulnerabilities, so make sure you take the appropriate measures.

One first step in doing so is making sure that you get the latest updates that comes with patch Tuesday, since their main focus is improving security.

You can download the latest Patch Tuesday cumulative updates from this detailed article where we’ve also listed the complete changelog for each of them.

Were you expecting fewer or more CVEs this month? Let us know what you think by leaving us a message in the comments section below.

This article covers:Topics: