1.漏洞公告

近日，微软官方发布了6月安全更新公告，包含了微软家族多个软件的安全更新补丁，包括：Windows操作系统、.Net  Core、Office、Visual Studio、Microsoft Office、Hyper-V。其中严重漏洞5个，高危漏洞45个。请相关用户及时更新对应补丁修复漏洞。相关链接参考：https://msrc.microsoft.com/update-guide/releaseNote/2021-Jun。

根据公告，此次更新中修复的MSHTML平台远程代码执行漏洞和多个权限提升漏洞已发现在野利用，风险较大，建议尽快安装安全更新补丁或采取临时缓解措施加固系统。

2. 影响范围

CVE-2021-33742 Windows MSHTML 平台远程代码执行漏洞:

影响范围：

Windows 10 for 32-bit  Systems

Windows 10 for x64-based  Systems

Windows 10 Version 1607 for 32-bit  Systems

Windows 10 Version 1607 for x64-based  Systems

Windows 10 Version 1809 for 32-bit  Systems

Windows 10 Version 1809 for ARM64-based  Systems

Windows 10 Version 1809 for x64-based  Systems

Windows 10 Version 1909 for 32-bit  Systems

Windows 10 Version 1909 for ARM64-based  Systems

Windows 10 Version 1909 for x64-based  Systems

Windows 10 Version 2004 for 32-bit  Systems

Windows 10 Version 2004 for ARM64-based  Systems

Windows 10 Version 2004 for x64-based  Systems

Windows 10 Version 20H2 for 32-bit  Systems

Windows 10 Version 20H2 for ARM64-based  Systems

Windows 10 Version 20H2 for x64-based  Systems

Windows 10 Version 21H1 for 32-bit  Systems

Windows 10 Version 21H1 for ARM64-based  Systems

Windows 10 Version 21H1 for x64-based  Systems

Windows 7 for 32-bit Systems Service  Pack 1

Windows 7 for x64-based Systems Service  Pack 1

Windows 8.1 for 32-bit  systems

Windows 8.1 for x64-based  systems

Windows RT 8.1

Windows Server 2008 for 32-bit Systems  Service Pack 2

Windows Server 2008 for x64-based  Systems Service Pack 2

Windows Server 2008 R2 for x64-based  Systems Service Pack 1

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

CVE-2021-33739 Microsoft DWM  核心库权限提升漏洞:

影响范围：

Microsoft Malware Protection  Engine

CVE-2021-31956 Windows NTFS  特权提升漏洞:

影响范围：

Windows 10 for 32-bit  Systems

Windows 10 for x64-based  Systems

Windows 10 Version 1607 for 32-bit  Systems

Windows 10 Version 1607 for x64-based  Systems

Windows 10 Version 1809 for 32-bit  Systems

Windows 10 Version 1809 for ARM64-based  Systems

Windows 10 Version 1809 for x64-based  Systems

Windows 10 Version 1909 for 32-bit  Systems

Windows 10 Version 1909 for ARM64-based  Systems

Windows 10 Version 1909 for x64-based  Systems

Windows 10 Version 2004 for 32-bit  Systems

Windows 10 Version 2004 for ARM64-based  Systems

Windows 10 Version 2004 for x64-based  Systems

Windows 10 Version 20H2 for 32-bit  Systems

Windows 10 Version 20H2 for ARM64-based  Systems

Windows 10 Version 20H2 for x64-based  Systems

Windows 10 Version 21H1 for 32-bit  Systems

Windows 10 Version 21H1 for ARM64-based  Systems

Windows 10 Version 21H1 for x64-based  Systems

Windows 7 for 32-bit Systems Service  Pack 1

Windows 7 for x64-based Systems Service  Pack 1

Windows 8.1 for 32-bit  systems

Windows 8.1 for x64-based  systems

Windows RT 8.1

Windows Server 2008 for 32-bit Systems  Service Pack 2

Windows Server 2008 for 32-bit Systems  Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based  Systems Service Pack 2

Windows Server 2008 for x64-based  Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based  Systems Service Pack 1

Windows Server 2008 R2 for x64-based  Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core  installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core  installation)

Windows Server 2016

Windows Server 2016  (Server Core  installation)

Windows Server 2019

Windows Server 2019  (Server Core  installation)

Windows Server, version 2004 (Server  Core installation)

Windows Server, version 20H2 (Server  Core Installation)

CVE-2021-31955 Windows  内核信息泄露漏洞:

影响范围：

Windows 10 Version 1809 for 32-bit  Systems

Windows 10 Version 1809 for ARM64-based  Systems

Windows 10 Version 1809 for x64-based  Systems

Windows 10 Version 1909 for 32-bit  Systems

Windows 10 Version 1909 for ARM64-based  Systems

Windows 10 Version 1909 for x64-based  Systems

Windows 10 Version 2004 for 32-bit  Systems

Windows 10 Version 2004 for ARM64-based  Systems

Windows 10 Version 2004 for x64-based  Systems

Windows 10 Version 20H2 for 32-bit  Systems

Windows 10 Version 20H2 for ARM64-based  Systems

Windows 10 Version 20H2 for x64-based  Systems

Windows 10 Version 21H1 for 32-bit  Systems

Windows 10 Version 21H1 for ARM64-based  Systems

Windows 10 Version 21H1 for x64-based  Systems

Windows Server 2019

Windows Server 2019  (Server Core  installation)

Windows Server, version 2004 (Server  Core installation)

Windows Server, version 20H2 (Server  Core Installation)

CVE-2021-31201 Microsoft Enhanced  Cryptographic Provider 特权提升漏洞:

影响范围：

Windows 10 for 32-bit  Systems

Windows 10 for x64-based  Systems

Windows 10 Version 1607 for 32-bit  Systems

Windows 10 Version 1607 for x64-based  Systems

Windows 10 Version 1809 for 32-bit  Systems

Windows 10 Version 1809 for ARM64-based  Systems

Windows 10 Version 1809 for x64-based  Systems

Windows 10 Version 1909 for 32-bit  Systems

Windows 10 Version 1909 for ARM64-based  Systems

Windows 10 Version 1909 for x64-based  Systems

Windows 10 Version 2004 for 32-bit  Systems

Windows 10 Version 2004 for ARM64-based  Systems

Windows 10 Version 2004 for x64-based  Systems

Windows 10 Version 20H2 for 32-bit  Systems

Windows 10 Version 20H2 for ARM64-based  Systems

Windows 10 Version 20H2 for x64-based  Systems

Windows 10 Version 21H1 for 32-bit  Systems

Windows 10 Version 21H1 for ARM64-based  Systems

Windows 10 Version 21H1 for x64-based  Systems

Windows 7 for 32-bit Systems Service  Pack 1

Windows 7 for x64-based Systems Service  Pack 1

Windows 8.1 for 32-bit  systems

Windows 8.1 for x64-based  systems

Windows RT 8.1

Windows Server 2008 for 32-bit Systems  Service Pack 2

Windows Server 2008 for 32-bit Systems  Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based  Systems Service Pack 2

Windows Server 2008 for x64-based  Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based  Systems Service Pack 1

Windows Server 2008 R2 for x64-based  Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core  installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core  installation)

Windows Server 2016

Windows Server 2016  (Server Core  installation)

Windows Server 2019

Windows Server 2019  (Server Core  installation)

Windows Server, version 2004 (Server  Core installation)

Windows Server, version 20H2 (Server  Core Installation)

CVE-2021-31199 Microsoft Enhanced  Cryptographic Provider 特权提升漏洞:

影响范围：

Windows 10 for 32-bit  Systems

Windows 10 for x64-based  Systems

Windows 10 Version 1607 for 32-bit  Systems

Windows 10 Version 1607 for x64-based  Systems

Windows 10 Version 1809 for 32-bit  Systems

Windows 10 Version 1809 for ARM64-based  Systems

Windows 10 Version 1809 for x64-based  Systems

Windows 10 Version 1909 for 32-bit  Systems

Windows 10 Version 1909 for ARM64-based  Systems

Windows 10 Version 1909 for x64-based  Systems

Windows 10 Version 2004 for 32-bit  Systems

Windows 10 Version 2004 for ARM64-based  Systems

Windows 10 Version 2004 for x64-based  Systems

Windows 10 Version 20H2 for 32-bit  Systems

Windows 10 Version 20H2 for ARM64-based  Systems

Windows 10 Version 20H2 for x64-based  Systems

Windows 10 Version 21H1 for 32-bit  Systems

Windows 10 Version 21H1 for ARM64-based  Systems

Windows 10 Version 21H1 for x64-based  Systems

Windows 7 for 32-bit Systems Service  Pack 1

Windows 7 for x64-based Systems Service  Pack 1

Windows 8.1 for 32-bit  systems

Windows 8.1 for x64-based  systems

Windows RT 8.1

Windows Server 2008 for 32-bit Systems  Service Pack 2

Windows Server 2008 for 32-bit Systems  Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based  Systems Service Pack 2

Windows Server 2008 for x64-based  Systems Service Pack 2 (Server Core installation)

Windows Server 2008 R2 for x64-based  Systems Service Pack 1

Windows Server 2008 R2 for x64-based  Systems Service Pack 1 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core  installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core  installation)

Windows Server 2016

Windows Server 2016  (Server Core  installation)

Windows Server 2019

Windows Server 2019  (Server Core  installation)

Windows Server, version 2004 (Server  Core installation)

Windows Server, version 20H2 (Server  Core Installation)

6月安全公告列表，包含的其他漏洞（非全部）快速阅读指引：

https://msrc.microsoft.com/update-guide/releaseNote/2021-Jun

CVE-2021-26414|Windows DCOM  服务器安全功能绕过

CVE-2021-31199|Microsoft Enhanced  Cryptographic Provider 特权提升漏洞

CVE-2021-31201|Microsoft Enhanced  Cryptographic Provider 特权提升漏洞

CVE-2021-31938|Microsoft VsCode  Kubernetes 工具扩展特权提升漏洞

CVE-2021-31939|Microsoft Excel  远程执行代码漏洞

CVE-2021-31940|Microsoft Office  图形远程执行代码漏洞

CVE-2021-31941|Microsoft Office  图形远程执行代码漏洞

CVE-2021-31942|3D  Viewer 远程执行代码漏洞

CVE-2021-31943|3D  Viewer 远程执行代码漏洞

CVE-2021-31944|3D  Viewer信息泄露漏洞

CVE-2021-31945|Paint  3D 远程执行代码漏洞

CVE-2021-31946|Paint  3D 远程执行代码漏洞

CVE-2021-31949|Microsoft Outlook  远程代码执行漏洞

CVE-2021-31955|Windows  内核信息泄露漏洞

CVE-2021-31956|Windows NTFS  特权提升漏洞

CVE-2021-31958|Windows NTLM  特权提升漏洞

CVE-2021-31959|脚本引擎内存损坏漏洞

CVE-2021-31960|Windows  绑定筛选器驱动程序信息泄露漏洞

CVE-2021-31962|Kerberos AppContainer  安全功能绕过漏洞

CVE-2021-31965|Microsoft SharePoint  Server 信息泄露漏洞

CVE-2021-31967|VP9  Video 扩展程序远程执行代码漏洞

CVE-2021-31971|Windows HTML  平台安全功能绕过漏洞

CVE-2021-31972|Windows  事件跟踪信息泄露漏洞

CVE-2021-31975|NFS  服务器信息泄露漏洞

CVE-2021-31976|NFS  服务器信息泄露漏洞

CVE-2021-31977|Windows Hyper-V  拒绝服务漏洞

CVE-2021-31978|Microsoft Defender  拒绝服务漏洞

CVE-2021-31980|Microsoft Intune  管理扩展远程执行代码漏洞

CVE-2021-31983|Paint  3D 远程执行代码漏洞

CVE-2021-31985|Microsoft Defender  远程代码执行漏洞

CVE-2021-33739|Microsoft DWM  核心库权限提升漏洞

CVE-2021-33741|基于  Chromium 的 Microsoft Edge 特权提升漏洞

CVE-2021-33742|Windows  MSHTML平台远程代码执行漏洞

3. 漏洞描述

CVE-2021-33742：Windows  MSHTML平台远程代码执行漏洞，该漏洞影响所有受支持的 Microsoft Windows 版本，攻击者可通过构造恶意的网页诱使用户访问，当受害者访问恶意页面时可触发该漏洞，成功利用该漏洞可导致攻击者控制受害者主机。

CVE-2021-33739：Microsoft DWM  核心库提权漏洞，攻击者通过构造恶意的程序诱使用户执行，利用该漏洞攻击者可绕过Defender的防护策略，成功利用可导致用户主机被攻击者控制。

CVE-2021-31956：Windows NTFS  提权漏洞，攻击者可利用该漏洞实现本地权限提升。

CVE-2021-31955：Windows  内核信息泄露漏洞，攻击者利用该漏洞可从用户模式进程读取内核内存的内容，在一定条件下可导致内心信息泄漏。

CVE-2021-31201、CVE-2021-31199：Microsoft  Enhanced Cryptographic Provider 特权提升漏洞，攻击者利用该漏洞可实现本地权限提升，可于Adobe Reader CVE-2021-28550漏洞组合进行远程利用。

4. 缓解措施

高危：目前部分漏洞细节虽未公开，但是恶意攻击者可以通过补丁对比方式分析出漏洞触发点，并进一步开发漏洞利用代码，建议及时测试安全更新补丁并应用安装和完善威胁识别、漏洞缓解措施。

目前微软针对支持的产品已发布升级补丁修复了上述漏洞，请用户参考官方通告及时下载更新补丁。

补丁获取：https://msrc.microsoft.com/update-guide/vulnerability。