On 11th May 2021, Microsoft released another patch that is capable to fix 3 Zero-Day vulnerabilities and 55 other flaws present, 4 are very critical and 1 is moderate and the other 50 are classified as important.

However, these 3 Zero-Day vulnerabilities that were fixed in the patch will not be used by the attackers, and to know in detail about these non-security Windows updates users can read about KB5003169 & KB5003173 cumulative Windows 10 updates.

Which 3 Zero-Day Vulnerabilities are Fixed?

In this updated patch, Microsoft fixed three zero-day vulnerabilities, these are publicly disclosed but not been exploited by any attackers are described below;

• CVE-2021-31204: Known as .NET and Visual Studio Elevation of Privilege Vulnerability
• CVE-2021-31207: Classified as Microsoft Exchange Server Security Feature Overlaps Bug
• CVE-2021-31200: Called as Common Utilities Remote Code Execution Vulnerability

However, the CVE-2021-31207 Microsoft Exchange Vulnerabilities are used in the 2021 Pwn2Own hacking challenge and it is still not cleared that the vulnerabilities are leaked or disclosed yet. But for now, none of the zero days are exploited.

The experts are also aware that the attackers will able to analyze these patches to create exploits these vulnerabilities and particularly on Microsoft Exchange and it also important to occupies the security updates asap.

What Other Companies are Doing?

Multiple organizations also released multiple updates that are described below;

• Apple released security updates for macOS, iOS, watchOS, and Safari are also released patched for vulnerabilities that go wild
• Vmware published a security update in May
• SAP released their security updates
• Adobe delivered security updates for Adobe Creative Cloud Desktop, Framemaker, and Connect
• Android may security updates released last week

Which type of Vulnerabilities are Patched in May 2021?

Meanwhile, the experts shared the complete list of vulnerabilities and released advisories in May 2021 Patch Tuesday update while accessing the complete description of every vulnerability that affects the system.