Zero Day - CVE-2021-41379 Public Exploit

[Glenn_Bolton]

Hello Manju
We are running ENS 10.7 with ATP (September 2021 update.) In regards to the recent Zero Day exploit that was posted as a way to bypass the recent Microsoft patch that was released in November, will McAfee Labs be able to release an update that can be applied until Microsoft releases an updated patch?

Thank you.

[rfranci · Accepted solution]

Hi @Glenn_Bolton ,

Thankyou for reaching us on community !

Microsoft has not yet publicly announced the POC on this vulnerability as of today  :
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-41379

 Going by the article published by Bleeping computers , The POC mentioned in the github page, are being detected by McAfee GTI and McAfee ATP.

McAfee labs are working on this issue further. 

To stay on top of any important updates and announcements from McAfee, i would recommend subscribing to McAfee SNS notification : https://sns.mcafee.com/l/890323/2021-01-08/2qkp

McAfee SNS FAQ : https://kc.mcafee.com/corporate/index?page=content&id=KB67828

-Rohit Francis 
Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!  

[Glenn_Bolton]

Thank you very much for your quick response.

Much appreciated.

[Wil]

Hi, 

I have seen ther is an snort rule commented in another blog. Is there any available from McAfee?

Regards, 

Wil