Microsoft Patch Tuesday — March 2021

Tuesday, 9 March 2021

Vulnerabilities: 81
Critical: 7
High: 64
Zero-days: 0
Public exploit: 4

Exploited 3

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2021-26411 Exploited Public exploit Internet Explorer Memory Corruption Vulnerability
EPSS 82%
High 8.8
CVE-2021-27085 Exploited Internet Explorer Remote Code Execution Vulnerability
EPSS 5.4%
High 7.6
CVE-2021-27059 Exploited Microsoft Office Remote Code Execution Vulnerability
EPSS 6.1%

Critical 7

Critical 9.9
CVE-2021-26867 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 2.9%
Critical 9.8
CVE-2021-26877 Windows DNS Server Remote Code Execution Vulnerability
EPSS 17%
Critical 9.8
CVE-2021-26893 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7%
Critical 9.8
CVE-2021-26894 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7.8%
Critical 9.8
CVE-2021-26895 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7.8%
Critical 9.8
CVE-2021-26897 Windows DNS Server Remote Code Execution Vulnerability
EPSS 12%
Critical 9.3
CVE-2021-27080 Azure Sphere Unsigned Code Execution Vulnerability
EPSS 1.3%

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2021-26868 Public exploit Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 3.1%
High 7.8
CVE-2021-26871 Public exploit Windows WalletService Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2021-26882 Public exploit Remote Access API Elevation of Privilege Vulnerability
EPSS 2.1%

All vulnerabilities 81

Critical7 Show

Critical 9.9
CVE-2021-26867 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 2.9%
Critical 9.8
CVE-2021-26877 Windows DNS Server Remote Code Execution Vulnerability
EPSS 17%
Critical 9.8
CVE-2021-26893 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7%
Critical 9.8
CVE-2021-26894 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7.8%
Critical 9.8
CVE-2021-26895 Windows DNS Server Remote Code Execution Vulnerability
EPSS 7.8%
Critical 9.8
CVE-2021-26897 Windows DNS Server Remote Code Execution Vulnerability
EPSS 12%
Critical 9.3
CVE-2021-27080 Azure Sphere Unsigned Code Execution Vulnerability
EPSS 1.3%

High64 Show

High 8.8
CVE-2021-26411 Exploited Public exploit Internet Explorer Memory Corruption Vulnerability
EPSS 82%
High 8.8
CVE-2021-27085 Exploited Internet Explorer Remote Code Execution Vulnerability
EPSS 5.4%
High 7.6
CVE-2021-27059 Exploited Microsoft Office Remote Code Execution Vulnerability
EPSS 6.1%
High 8.8
CVE-2021-26865 Windows Container Execution Agent Elevation of Privilege Vulnerability
EPSS 1.1%
High 8.8
CVE-2021-26876 OpenType Font Parsing Remote Code Execution Vulnerability
EPSS 2.9%
High 8.8
CVE-2021-27076 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 15%
High 8.4
CVE-2021-26864 Windows Virtual Registry Provider Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26868 Public exploit Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 3.1%
High 7.8
CVE-2021-26871 Public exploit Windows WalletService Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2021-26882 Public exploit Remote Access API Elevation of Privilege Vulnerability
EPSS 2.1%
High 7.8
CVE-2021-1640 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2021-24089 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 4.7%
High 7.8
CVE-2021-24090 Windows Error Reporting Elevation of Privilege Vulnerability
EPSS 3.5%
High 7.8
CVE-2021-24108 Microsoft Office Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-24110 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-26860 Windows App-V Overlay Filter Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26861 Windows Graphics Component Remote Code Execution Vulnerability
EPSS 2.9%
High 7.8
CVE-2021-26870 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26872 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26874 Windows Overlay Filter Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26875 Windows Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26878 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26880 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26885 Windows WalletService Elevation of Privilege Vulnerability
EPSS 3.5%
High 7.8
CVE-2021-26887 Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2021-26889 Windows Update Stack Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2021-26890 Application Virtualization Remote Code Execution Vulnerability
High 7.8
CVE-2021-26891 Windows Container Execution Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26898 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26899 Windows UPnP Device Host Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26900 Windows Win32k Elevation of Privilege Vulnerability
EPSS 2.4%
High 7.8
CVE-2021-26901 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2021-26902 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 5.9%
High 7.8
CVE-2021-27047 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.9%
High 7.8
CVE-2021-27048 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-27049 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-27050 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-27051 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-27053 Microsoft Excel Remote Code Execution Vulnerability
EPSS 4.6%
High 7.8
CVE-2021-27054 Microsoft Excel Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2021-27056 Microsoft PowerPoint Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2021-27057 Microsoft Office Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2021-27058 Microsoft Office ClickToRun Remote Code Execution Vulnerability
EPSS 3.5%
High 7.8
CVE-2021-27060 Visual Studio Code Remote Code Execution Vulnerability
EPSS 3.2%
High 7.8
CVE-2021-27061 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 4.6%
High 7.8
CVE-2021-27062 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2021-27077 Windows Win32k Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2021-27081 Visual Studio Code ESLint Extension Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2021-27082 Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability
EPSS 4%
High 7.8
CVE-2021-27083 Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
EPSS 62%
High 7.8
CVE-2021-27084 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
EPSS 62%
High 7.7
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
EPSS 3.4%
High 7.5
CVE-2021-26879 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 3.9%
High 7.5
CVE-2021-26881 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
EPSS 2.8%
High 7.5
CVE-2021-26896 Windows DNS Server Denial of Service Vulnerability
EPSS 7.8%
High 7.5
CVE-2021-27063 Windows DNS Server Denial of Service Vulnerability
EPSS 6.7%
High 7.3
CVE-2021-27070 Windows 10 Update Assistant Elevation of Privilege Vulnerability
EPSS 4.1%
High 7.1
CVE-2021-1729 Windows Update Stack Setup Elevation of Privilege Vulnerability
High 7.1
CVE-2021-26866 Windows Update Service Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.0
CVE-2021-24095 DirectX Elevation of Privilege Vulnerability
High 7.0
CVE-2021-26862 Windows Installer Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.0
CVE-2021-26863 Windows Win32k Elevation of Privilege Vulnerability
EPSS 12%
High 7.0
CVE-2021-26873 Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.0
CVE-2021-27055 Microsoft Visio Security Feature Bypass Vulnerability
EPSS 2.5%

Medium10 Show

Medium 6.8
CVE-2021-27075 Azure Virtual Machine Information Disclosure Vulnerability
EPSS 1.4%
Medium 6.2
CVE-2021-26892 Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
EPSS 1.3%
Medium 6.2
CVE-2021-27074 Azure Sphere Unsigned Code Execution Vulnerability
EPSS 1.3%
Medium 6.1
CVE-2021-26886 User Profile Service Denial of Service Vulnerability
EPSS 1.1%
Medium 5.5
CVE-2021-24107 Windows Event Tracing Information Disclosure Vulnerability
EPSS 1%
Medium 5.5
CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability
EPSS 1%
Medium 5.5
CVE-2021-26884 Windows Media Photo Codec Information Disclosure Vulnerability
EPSS 1%
Medium 5.3
CVE-2021-27052 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 3.1%
Medium 4.6
CVE-2021-24104 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.5%
Medium 4.3
CVE-2021-27066 Windows Admin Center Security Feature Bypass Vulnerability
EPSS 3%

Most affected products

Windows Server version 20H2 46 · 6 crit.
Windows Server version 2004 46 · 6 crit.
Windows Server, version 1909 (Server Core installation) 45 · 6 crit.
Windows Server 2019 42 · 5 crit.
Windows Server 2019 (Server Core installation) 42 · 5 crit.
Windows 10 Version 2004 41 · 1 crit.
Windows 10 Version 1909 40 · 1 crit.
Windows 10 Version 20H2 39
Windows 10 Version 1809 37
Windows Server 2016 33 · 5 crit.
Windows Server 2016 (Server Core installation) 33 · 5 crit.
Windows 10 Version 1803 31

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (9 Mar). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →