Microsoft Jet Database Engine vulnerabilities could lead to remote attacks on Microsoft Internet Information Services and Microsoft SQL Server. Palo Alto Networks’ Unit 42 team demonstrated the exploits at the recent Black Hat Asia 2021 event. Microsoft says it recently patched the flaws, but most Jet vulnerabilities are still not patched. Remote database access allows attackers to replace a legitimate database with a malformed one, the researchers say. Microsoft has assigned the flaws the designation CVE-2021-28455 and released a patch for the flaws.”]
Source: https://www.govinfosecurity.com/microsoft-database-engine-vulnerabilities-patched-a-17213