This month brought patches for 55 CVEs in Microsoft Windows, Microsoft Office, .NET Core and Visual Studio, Internet Explorer, SharePoint Server, Hyper-V, Skype for Business and Microsoft Lync, Open Source Software, and Exchange Server. Fifty of these vulnerabilities are classified as Important in severity, one as Moderate. One concerning CVE to prioritize is CVE-2021-31166, a critical remote code execution flaw in the HTTP protocol stack with a CVSS score of 9.8. An attack using this would be low in complexity and require no privileges or user interaction, Microsoft says in its disclosure. To exploit this, an attacker would need to send a specially crafted packet to a vulnerable server using the HTTP protocol stack to process packets. This makes the bug wormable, a danger Microsoft points out. And as Dustin Childs of Trend Micro's ZDI writes in a blog post, Windows 10 can be configured as a server, meaning it's also affected.