8月11日,亚信安(ān)全应急响应中(zhōng)心(CERT)监测发现,微软发布的8月份安(ān)全更新(xīn)修复了44个漏洞,涉及Windows TCP/IP、Remote Desktop Client、Windows MSHTML Platform、Windows Services for NFS ONCRPC XDR Driver、Windows Graphics Component、Microsoft Scripting Engine、Windows Print Spooler Controller等产(chǎn)品。经亚信安(ān)全CERT研判发现,其中(zhōng)共有(yǒu)7个漏洞危害较大,建议客户及时进行修复。
目前微软官方已发布相关安(ān)全更新(xīn),经亚信安(ān)全CERT研判,需重点关注以下漏洞:
此次安(ān)全更新(xīn)发布的漏洞影响以下组件:
NET Core & Visual Studio
ASP .NET
Azure
Azure Sphere
Microsoft Azure Active Directory Connect
Microsoft Dynamics
Microsoft Graphics Component
Microsoft Office
Microsoft Office SharePoint
Microsoft Office Word
Microsoft Scripting Engine
Microsoft Windows Codecs Library
Remote Desktop Client
Windows Bluetooth Service
Windows Cryptographic Services
Windows Defender
Windows Event Tracing
Windows Media
Windows MSHTML Platform
Windows NTLM
Windows Print Spooler Components
Windows Services for NFS ONCRPC XDR Driver
Windows Storage Spaces Controller
Windows TCP/IP
Windows Update
Windows Update Assistant
Windows User Profile Service
通过Windows安(ān)全更新(xīn)自动安(ān)装(zhuāng)补丁或手动“检查更新(xīn)”。
对于不能(néng)自动更新(xīn)的系统版本,可(kě)下载对应版本的补丁进行安(ān)装(zhuāng):
https://msrc.microsoft.com/update-guide/releaseNote/2021-Aug
https://msrc.microsoft.com/update-guide/releaseNote/2021-Aug