CVE-2021-31200 - Common Utilities Remote Code Execution Vulnerability.CVE-2021-31207 - Microsoft Exchange Server Security Feature Bypass Vulnerability.

NET and Visual Studio Elevation of Privilege Vulnerability

These are the three vulnerabilities Microsoft said were publicly disclosed but not exploited in the wild before the May 2021 security updates were released: 'There might be a slight delay as it propagates to all servers in all regions.'ĭuring this month's Patch Tuesday, Microsoft fixed 55 vulnerabilities, four classified as Critical, 50 as Important, and one as Moderate, as well as three zero-day vulnerabilities publicly disclosed but not known to be used in attacks. 'If you initiate a synchronization cycle and are still not being offered the updates, please check again soon,' Microsoft added. Microsoft has resolved the known issue on the service-side, and the updates should start rolling out to affected devices in managed environments. Security updates might be delayed in some regions The list of Windows cumulative updates blocked by this known issue includes: The known issue impacted both client and server platforms, from Windows 7 SP1 and Windows Server 2008 SP2 up to the latest versions, Windows 10 20H2 and Windows Server 20H2.

'This might also affect Security Only and Internet Explorer Cumulative Rollups, on platforms that receive these types of updates.' 'When checking for updates within Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager and managed devices that connect to these servers,' this month's security updates 'might not be available or offered,' as Microsoft explained on the Windows Health Dashboard. Microsoft has resolved a known issue preventing managed devices from receiving the May 2021 Patch Tuesday Windows security updates.

Windows update rollup may 2019