【漏洞情报】微软2021年04月补丁情报

【漏洞详情】

微软于本周发布了2021年04月安全补丁，微软共发布了114个漏洞的补丁程序，其中Azure Sphere、Microsoft Exchange Server、Remote Procedure Call Runtime、Windows Media Video Decoder等产品中的19个漏洞被微软官方标记为Critical，Critical漏洞清单如下：

序号	CVE 编号	CVE 标题	严重程度
1	CVE-2021-28460	Azure Sphere Unsigned Code Execution Vulnerability	Critical
2	CVE-2021-28480	Microsoft Exchange Server Remote Code Execution Vulnerability	Critical
3	CVE-2021-28481	Microsoft Exchange Server Remote Code Execution Vulnerability	Critical
4	CVE-2021-28482	Microsoft Exchange Server Remote Code Execution Vulnerability	Critical
5	CVE-2021-28483	Microsoft Exchange Server Remote Code Execution Vulnerability	Critical
6	CVE-2021-28329	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
7	CVE-2021-28330	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
8	CVE-2021-28331	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
9	CVE-2021-28332	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
10	CVE-2021-28333	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
11	CVE-2021-28334	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
12	CVE-2021-28335	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
13	CVE-2021-28336	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
14	CVE-2021-28337	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
15	CVE-2021-28338	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
16	CVE-2021-28339	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
17	CVE-2021-28343	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
18	CVE-2021-27095	Windows Media Video Decoder Remote Code Execution Vulnerability	Critical
19	CVE-2021-28315	Windows Media Video Decoder Remote Code Execution Vulnerability	Critical

【风险评级】

高危

【影响范围】

l Windows系统及相关产品

【修复建议】

建议受影响的用户结合实际业务评估漏洞风险影响，可通过如下方案避免安全风险：

修复方法：打开 Windows Update 更新功能，点击“检查更新”按钮，依据业务需求下载安装相关安全补丁，安装完毕后重启系统，并检查系统运行情况。

【参考链接】

https://msrc.microsoft.com/update-guide/releaseNote/2021-April

特别提醒：修复漏洞前请进行充分测试，并务必做好数据备份和快照，防止出现意外。

平安云

2021年4月15日

平安云公告

【漏洞情报】微软2021年04月补丁情报