Don't miss a single vulnerability this Patch Tuesday. The latest patches and updates from Microsoft and multiple third-party applications can be found in June's Patch Tuesday Index below.
Microsoft addressed 49 vulnerabilities in this month’s Patch Tuesday update. While the number of vulnerabilities in June was only 5 fewer than May, it represents 33% fewer vulnerabilities on average for each month so far this year. Of those vulnerabilities, 5 were rated as critical, the same as last month, and 52% lower on average. Unfortunately, 6 vulnerabilities are being actively exploited in the wild, equaling the highest number seen so far this year.
Earlier in the month, Mozilla released updates for Thunderbird, Firefox, Firefox ESR, and Firefox for iOS. Of the four security bulletins, only the Firefox 89 advisory was rated High.
Adobe released security updates for 10 products. Each bulletin received Adobe Priority Rating 3, except for the bulletins relating to Acrobat & Reader and Experience Manager which were raised to Priority Rating 2.
Automox Patch Tuesday expert Eric Feldman breaks down all of June's Patch Tuesday in our Automating Patch Tuesday: June 2021 webinar.
Updated Live. Last Update 12:49 PM EST June 8, 2021.
 Mozilla Firefox |
|||
| Product |
Title
|
Identifier
|
Severity
|
| Firefox | 9 security vulnerabilities fixed in Firefox 89 | MFSA 2021-23 | High |
| Thunderbird | 2 security vulnerabilities fixed in Thunderbird 78.11 | MFSA 2021-26 | Medium |
| Firefox for iOS | 1 security vulnerability fixed in Firefox for iOS 34 | MFSA 2021-25 | Medium |
| Firefox ESR | 2 security vulnerabilities fixed in Firefox ESR 78.11 | MFSA 2021-24 | Medium |
 Adobe |
|||
| Product |
Title
|
Identifier
|
Severity
|
| Adobe Acrobat and Reader | 2 Security vulnerabilities fixed in Adobe Acrobat and Reader | APSB21-37 | Adobe Priority 2 |
| Adobe Experience Manager | 1 Security vulnerability fixed in Adobe Experience Manager | APSB21-39 | Adobe Priority 2 |
| Adobe Connect | 1 Security vulnerability fixed in Adobe Connect | APSB21-36 | Adobe Priority 3 |
| Adobe Photoshop | 2 Security vulnerabilities fixed in Adobe Photoshop | APSB21-38 | Adobe Priority 3 |
| Adobe Creative Cloud | 2 Security vulnerabilities fixed in Adobe Creative Cloud Desktop Application | APSB21-41 | Adobe Priority 3 |
| Adobe RoboHelp Server | 1 Security vulnerability fixed in Adobe RoboHelp Server | APSB21-44 | Adobe Priority 3 |
| Adobe Photoshop Elements | 1 Security vulnerability fixed in Adobe Photoshop Elements | APSB21-46 | Adobe Priority 3 |
| Adobe Premiere Elements | 1 Security vulnerability fixed in Adobe Premiere Elements | APSB21-47 | Adobe Priority 3 |
| Adobe After Effects | 7 Security vulnerabilities fixed in Adobe After Effects | APSB21-49 | Adobe Priority 3 |
| Adobe Animate | 6 Security vulnerabilities fixed in Adobe Animate | APSB21-50 | Adobe Priority 3 |
 Microsoft |
|||
| Product |
Title
|
Identifier
|
Severity
|
| Microsoft Scripting Engine | Scripting Engine Memory Corruption Vulnerability | CVE-2021-31959 | Critical |
| Microsoft Office SharePoint | Microsoft SharePoint Server Remote Code Execution Vulnerability | CVE-2021-31963 | Critical |
| Microsoft Windows Codecs Library | VP9 Video Extensions Remote Code Execution Vulnerability | CVE-2021-31967 | Critical |
| Windows Defender | Microsoft Defender Remote Code Execution Vulnerability | CVE-2021-31985 | Critical |
| Windows MSHTML Platform | Windows MSHTML Platform Remote Code Execution Vulnerability | CVE-2021-33742 | Critical |
| Windows Cryptographic Services | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | CVE-2021-31199 | High |
| Windows Cryptographic Services | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | CVE-2021-31201 | High |
| Windows Kernel | Windows Kernel Information Disclosure Vulnerability | CVE-2021-31955 | High |
| Windows NTFS | Windows NTFS Elevation of Privilege Vulnerability | CVE-2021-31956 | High |
| Microsoft DWM Core Library | Microsoft DWM Core Library Elevation of Privilege Vulnerability | CVE-2021-33739 | High |
| Windows Remote Desktop | Windows Remote Desktop Services Denial of Service Vulnerability | CVE-2021-31968 | High |
| Windows Print Spooler Components | Windows Print Spooler Elevation of Privilege Vulnerability | CVE-2021-1675 | High |
| Windows DCOM Server | Windows DCOM Server Security Feature Bypass | CVE-2021-26414 | High |
| Microsoft Office SharePoint | Microsoft SharePoint Server Remote Code Execution Vulnerability | CVE-2021-26420 | High |
| Visual Studio Code - Kubernetes Tools | Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability | CVE-2021-31938 | High |
| Microsoft Office Excel | Microsoft Excel Remote Code Execution Vulnerability | CVE-2021-31939 | High |
| Microsoft Office | Microsoft Office Graphics Remote Code Execution Vulnerability | CVE-2021-31940 | High |
| Microsoft Office | Microsoft Office Graphics Remote Code Execution Vulnerability | CVE-2021-31941 | High |
| 3D Viewer | 3D Viewer Remote Code Execution Vulnerability | CVE-2021-31942 | High |
| 3D Viewer | 3D Viewer Remote Code Execution Vulnerability | CVE-2021-31943 | High |
| 3D Viewer | 3D Viewer Information Disclosure Vulnerability | CVE-2021-31944 | High |
| Paint 3D | Paint 3D Remote Code Execution Vulnerability | CVE-2021-31945 | High |
| Paint 3D | Paint 3D Remote Code Execution Vulnerability | CVE-2021-31946 | High |
| Microsoft Office SharePoint | Microsoft SharePoint Server Spoofing Vulnerability | CVE-2021-31948 | High |
| Microsoft Office Outlook | Microsoft Outlook Remote Code Execution Vulnerability | CVE-2021-31949 | High |
| Microsoft Office SharePoint | Microsoft SharePoint Server Spoofing Vulnerability | CVE-2021-31950 | High |
| Windows Kernel | Windows Kernel Elevation of Privilege Vulnerability | CVE-2021-31951 | High |
| Windows Kernel-Mode Drivers | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | CVE-2021-31952 | High |
| Windows Filter Manager | Windows Filter Manager Elevation of Privilege Vulnerability | CVE-2021-31953 | High |
| Windows Common Log File System Driver | Windows Common Log File System Driver Elevation of Privilege Vulnerability | CVE-2021-31954 | High |
| .NET Core & Visual Studio | .NET Core and Visual Studio Denial of Service Vulnerability | CVE-2021-31957 | High |
| Windows NTLM | Windows NTLM Elevation of Privilege Vulnerability | CVE-2021-31958 | High |
| Windows Bind Filter Driver | Windows Bind Filter Driver Information Disclosure Vulnerability | CVE-2021-31960 | High |
| Windows Kerberos | Kerberos AppContainer Security Feature Bypass Vulnerability | CVE-2021-31962 | High |
| Microsoft Office SharePoint | Microsoft SharePoint Server Spoofing Vulnerability | CVE-2021-31964 | High |
| Microsoft Office SharePoint | Microsoft SharePoint Server Information Disclosure Vulnerability | CVE-2021-31965 | High |
| Microsoft Office SharePoint | Microsoft SharePoint Server Remote Code Execution Vulnerability | CVE-2021-31966 | High |
| Windows Drivers | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | CVE-2021-31969 | High |
| Windows TCP/IP | Windows TCP/IP Driver Security Feature Bypass Vulnerability | CVE-2021-31970 | High |
| Windows HTML Platform | Windows HTML Platform Security Feature Bypass Vulnerability | CVE-2021-31971 | High |
| Windows Event Logging Service | Windows Event Logging Service Information Disclosure Vulnerability | CVE-2021-31972 | High |
| Windows Installer | Windows GPSVC Elevation of Privilege Vulnerability | CVE-2021-31973 | High |
| Windows Network File System | Server for NFS Denial of Service Vulnerability | CVE-2021-31974 | High |
| Windows Network File System | Server for NFS Information Disclosure Vulnerability | CVE-2021-31975 | High |
| Windows Network File System | Server for NFS Information Disclosure Vulnerability | CVE-2021-31976 | High |
| Role: Hyper-V | Windows Hyper-V Denial of Service Vulnerability | CVE-2021-31977 | High |
| Windows Defender | Microsoft Defender Denial of Service Vulnerability | CVE-2021-31978 | High |
| Microsoft Intune | Microsoft Intune Management Extension Remote Code Execution Vulnerability | CVE-2021-31980 | High |
| Paint 3D | Paint 3D Remote Code Execution Vulnerability | CVE-2021-31983 | High |