Windows HTML Platforms Security Feature Bypass Vulnerability

The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A memory corruption error exists in the scripting engine. An unauthenticated, remote attacker can exploit     this to execute arbitrary commands. (CVE-2021-31959)

  - A security bypass vulnerability exists in the HTML platforms component. An unauthenticated, remote attacker     can exploit this to bypass security in order to gain full access to the system. (CVE-2021-31971)

The remote Windows host is missing security update 5003646. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003637. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003635. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003694. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003638. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003697. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003695. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003681. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5003687. It is, therefore, affected by multiple vulnerabilities

ID	Name	Product	Family	Severity
152587	Security Updates for Internet Explorer (June 2021)	Nessus	Windows : Microsoft Bulletins	high
150374	KB5003646: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150370	KB5003637: Windows 10 version 2004 / Windows 10 version 20H2 / Windows 10 version 21H1 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150369	KB5003635: Windows 10 version 1909 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150368	KB5003694: Windows 7 and Windows Server 2008 R2 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150367	KB5003638: Windows 10 version 1607 / Windows Server 2016 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150363	KB5003697: Windows Server 2012 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150357	KB5003695: Windows Server 2008 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150354	KB5003681: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical
150353	KB5003687: Windows 10 version 1507 LTS Security Update (June 2021)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2021-31971

high

Tenable Plugins

high

critical

critical

critical

critical

critical

critical

critical

critical

critical