106 vulnerabilities were discovered in February during Patch Tuesday

by Teodor Nechita

Software Managing Editor

February 9, 2021

Affiliate Disclosure

---

Now that Patch Tuesday has finally arrived, so have the CVE reports where users can finally see which Microsoft and Adobe features and apps were targeted by common vulnerabilities and malware attacks.

Last month started off the year 2021 with 91 CVEs, but fortunately enough, very few were actually identified as being serious, with all of them being fixed as soon as they were found.

Well, CVEs were identified this month as well, and we will be listing a brief rundown of how they behave, and what services they affected.

The February CVE report includes 106 identified CVEs

Vulnerabilities found in Adobe products

This month was quite abundant in terms of Adobe-related CVEs, as 50 were discovered with affecting Adobe Dreamweaver, Illustrator, Animate, Photoshop, Magento, and Reader.

Adobe Reader alone was the target of 23 CVEs, 17 of which were rated as Critical.

Magento came second place in terms of sheer CVE numbers, with 18 vulnerabilities discovered, although they were of lesser severity.

Vulnerabilities found in Microsoft products

As always, Microsoft products hold the lead in terms of total CVEs discovered, although not by such a large margin this month, with only 6 more compared to Adobe, totaling 56.

These CVEs covered Microsoft Windows components, .NET Framework, Azure IoT, Azure Kubernetes Service, Microsoft Edge for Android, Exchange Server, Office and Office Services and Web Apps, Skype for Business and Lync, and Windows Defender.

Of the 56, 43 were rated as Important

Which were some of the most severe CVEs?

• CVE-2021-1732
  • Windows Win32k Elevation of Privilege Vulnerability
• CVE-2021-24078
  • Windows DNS Server Remote Code Execution Vulnerability
• CVE-2021-24074
  • Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2021-26701
  • .NET Core and Visual Studio Remote Code Execution Vulnerability

All other identified CVEs are listed in the table below:

While January started off with quite a large number of CVE, February seems to have topped it off by quite a bit, and it seems that there is a chance that 2021 may have more CVEs compared to 2020.

Keep in mind that if you happen to use any of the affected products mentioned above, you may have exposed yourself to such vulnerabilities, so make sure you take the appropriate measures.

One first step in doing so is making sure that you get the latest updates that comes with patch Tuesday, since their main focus is improving security.

You can download the latest Patch Tuesday cumulative updates from this detailed article where we’ve also listed the complete changelog for each of them.

Were you expecting fewer or more CVEs this month? Let us know what you think by leaving us a message in the comments section below.