Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability: Important: Windows Storage Spaces Controller: CVE-2021-34536: Storage Spaces Controller Elevation of Privilege. The Storage Spaces Driver service is a kernel mode driver. If Storage Spaces Driver fails to load or initialize, the error is logged and the computer attempts to restart, using the Last Known Good configuration. If the Last Known Good configuration fails, Windows 10 startup also fails, and the boot process halts with a Stop error. If you disable this service, Windows 10 will fail to start. Name Microsoft Storage Spaces Controller. Manufacturer Microsoft. PNP Device ID ROOT SPACEPORT 0000. Driver c: windows system32 drivers spaceport.sys (10.0.17763.1, 637.80 KB (653,112 bytes), 17:58) Name Samsung NVMe Controller. Manufacturer Samsung Electronics Co., Ltd. Just curious about something. I noticed in device manager that my hard drives are all using Microsoft drivers. I do have the latest firmware installed for them. The manufacturer's website does not have any drivers listed for the drives. Maybe this is just how it is, but I was curious, so I thought I would ask. Samsung SSD 840 PRO Series. Go to your computer or storage device to find and load an available RAID driver. After the device diver has been loaded, Windows 10 installing will successfully detect the hard disk. Then, follow the onscreen instructions to install Windows. Check the Hard Drive in BIOS.

Today is Microsoft's August 2021 Patch Tuesday, and with it comes fixes for three zero-day vulnerabilities and a total of 44 flaws, so please be nice to your Windows admins as they scramble to installed patches.

Microsoft Storage Spaces Controller Driver Windows 10

Microsoft has fixed 44 vulnerabilities (51 including Microsoft Edge) with today's update, with seven classified as Critical and 37 as Important.

Of the 44 vulnerabilities, 13 are remote code execution, eight are information disclosure, two are denial of service, and four are spoofing vulnerabilities.

For information about the non-security Windows updates, you can read about today's Windows 10 KB5005033 & KB5005031 cumulative updates.

Microsoft fixes PrintNightmare and PetitPotam attacks

Microsoft has released security updates for two eagerly anticipated zero-day vulnerabilities that were discovered over the past month.

One of the security updates fixes the PrintNightmare vulnerabilities that allow threat actors to gain SYSTEM level privileges simply by connecting to a remote print server under their control.

Microsoft has fixed this vulnerability by requiring users have administrative privileges to install printer drivers using the Point and Print Windows feature.

You can find more detailed information about the PrintNightmare vulnerability and the Point and Print mitigations in a dedicated article published today.

Microsoft also fixed the PetitPotam NTLM relay attack vector that uses the MS-EFSRPC API to force a device to negotiate with a remote relay server under an attacker's control.

Microsoft Storage Spaces Controller Driver Windows 10 Activation

A threat actor with low privileges could use this attack to take over a domain controller and thus the entire Windows domain.

Three zero-days fixed, with one actively exploited

August's Patch Tuesday includes three zero-day vulnerabilities, with one actively exploited in the wild.

Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official security updates or released.

Microsoft Storage Spaces Controller Driver Windows 10 Downloads

The two publicly disclosed, but not actively exploited, zero-day vulnerabilities are:

Microsoft Storage Spaces Controller Driver Windows 10 32-bit

• CVE-2021-36936 - Windows Print Spooler Remote Code Execution Vulnerability
• CVE-2021-36942 - Windows LSA Spoofing Vulnerability

The CVE-2021-36942 vulnerability is associated with the PetitPotam NTLM relay attack vector that allows the take over of domain controllers.

Finally, one actively exploited elevation of privileges vulnerability was discovered by the Microsoft Security Response Center (MSRC) and Microsoft Threat Intelligence Center (MSTIC).

• CVE-2021-36948 - Windows Update Medic Service Elevation of Privilege Vulnerability

It is unknown how threat actors used this vulnerability in attacks at this time.

Recent updates from other companies

Other vendors who released updates in July include:

• Adobereleased security updates for two products.
• Android's August security updates were released last week.
• Ciscoreleased security updates for numerous products this month.
• SAPreleased its August 2021 security updates.
• VMware released security updates for VMware Workspace ONE

The August 2021 Patch Tuesday Security Updates

Microsoft Storage Spaces Controller Driver Windows 10 Download

Below is the complete list of resolved vulnerabilities and released advisories in the August 2021 Patch Tuesday updates. To access the full description of each vulnerability and the systems that it affects, you can view the full report here.