Microsoft · Security update · March 9, 2021

KB5000822: March 2021 cumulative update for Windows 10 1809

KB5000822, released March 9, 2021, fixes 46 CVEs across 13 products. 2 of them are being exploited (CVE-2021-26411); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use2 publicly disclosed
CVEs closed
46
3 rated Critical
Exploited
2
CVE-2021-26411
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.8167
99th percentile

Priority of the 46 CVEs

Patch now 2 Urgent 6 High 32 Routine 6

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems17763.1817
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems17763.1817
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems17763.1817
Internet Explorer 11 on Windows Server 201917763.1817
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems17763.1817
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems17763.1817
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems17763.1817
Microsoft Edge (EdgeHTML-based) on Windows Server 201917763.1817
Windows 10 Version 1809 for 32-bit Systems17763.1817
Windows 10 Version 1809 for ARM64-based Systems17763.1817
Windows 10 Version 1809 for x64-based Systems17763.1817
Windows Server 201917763.1817
Windows Server 2019 (Server Core installation)17763.1817

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-26411 Internet Explorer Remote Code Execution 8.8 0.8167 KEVRansomwareDisclosedExploited
Patch now CVE-2021-27085 Internet Explorer Remote Code Execution 8.8 0.0545 KEVExploited
Urgent CVE-2021-26877 Role: DNS Server Remote Code Execution 9.8 0.1729 More likely
Urgent CVE-2021-26863 Microsoft Graphics Component Elevation of Privilege 7.0 0.1194 More likely
Urgent CVE-2021-26897 Role: DNS Server Remote Code Execution 9.8 0.1164 More likely
Urgent CVE-2021-26868 Microsoft Graphics Component Elevation of Privilege 7.8 0.0308 More likely
Urgent CVE-2021-26876 Microsoft Graphics Component Remote Code Execution 8.8 0.0292 Exploitation Less Likely
Urgent CVE-2021-24095 Windows DirectX Elevation of Privilege 7.0 0.0081 More likely
High CVE-2021-26896 Role: DNS Server Denial of Service 7.5 0.0785 Exploitation Less Likely
High CVE-2021-26894 Role: DNS Server Remote Code Execution 9.8 0.0776 Exploitation Less Likely
High CVE-2021-26895 Role: DNS Server Remote Code Execution 9.8 0.0776 Exploitation Less Likely
High CVE-2021-26893 Role: DNS Server Remote Code Execution 9.8 0.0702 Exploitation Less Likely
High CVE-2021-27063 Role: DNS Server Denial of Service 7.5 0.0673 Exploitation Less Likely
High CVE-2021-26879 Role: Windows Hyper-V Denial of Service 7.5 0.0387 Exploitation Less Likely
High CVE-2021-26885 Windows WalletService Elevation of Privilege 7.8 0.0349 Exploitation Less Likely
High CVE-2021-26861 Microsoft Graphics Component Remote Code Execution 7.8 0.0289 Exploitation Less Likely
High CVE-2021-26881 Windows Media Remote Code Execution 7.5 0.0283 Exploitation Less Likely
High CVE-2021-26882 Windows Remote Access API Elevation of Privilege 7.8 0.0211 Exploitation Less Likely
High CVE-2021-27077 Microsoft Graphics Component Elevation of Privilege 7.8 0.0144 DisclosedExploitation Less Likely
High CVE-2021-26871 Windows WalletService Elevation of Privilege 7.8 0.0143 Exploitation Less Likely
High CVE-2021-26862 Windows Installer Elevation of Privilege 7.0 0.0125 Exploitation Less Likely
High CVE-2021-26889 Windows Update Stack Elevation of Privilege 7.8 0.0117 Exploitation Less Likely
High CVE-2021-26866 Windows Update Stack Elevation of Privilege 7.1 0.0116 Exploitation Less Likely
High CVE-2021-26873 Windows User Profile Service Elevation of Privilege 7.0 0.0115 Exploitation Less Likely
High CVE-2021-26865 Windows Container Execution Agent Elevation of Privilege 8.8 0.0108 Exploitation Less Likely
Showing 1 to 25 of 46 1Next