Microsoft · Security update · March 9, 2021

KB5000844: March 2021 security update

KB5000844, released March 9, 2021, fixes 21 CVEs across 6 products. One of them is being exploited (CVE-2021-26411); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
21
2 rated Critical
Exploited
1
CVE-2021-26411
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8167
99th percentile

Priority of the 21 CVEs

Patch now 1 Urgent 2 High 17 Routine 1

Applies to

Product
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-26411 Internet Explorer Remote Code Execution 8.8 0.8167 KEVRansomwareDisclosedExploited
Urgent CVE-2021-26877 Role: DNS Server Remote Code Execution 9.8 0.1729 More likely
Urgent CVE-2021-26897 Role: DNS Server Remote Code Execution 9.8 0.1164 More likely
High CVE-2021-26896 Role: DNS Server Denial of Service 7.5 0.0785 Exploitation Less Likely
High CVE-2021-26894 Role: DNS Server Remote Code Execution 9.8 0.0776 Exploitation Less Likely
High CVE-2021-26895 Role: DNS Server Remote Code Execution 9.8 0.0776 Exploitation Less Likely
High CVE-2021-26893 Role: DNS Server Remote Code Execution 9.8 0.0702 Exploitation Less Likely
High CVE-2021-27063 Role: DNS Server Denial of Service 7.5 0.0673 Exploitation Less Likely
High CVE-2021-26861 Microsoft Graphics Component Remote Code Execution 7.8 0.0289 Exploitation Less Likely
High CVE-2021-26882 Windows Remote Access API Elevation of Privilege 7.8 0.0211 Exploitation Less Likely
High CVE-2021-27077 Microsoft Graphics Component Elevation of Privilege 7.8 0.0144 DisclosedExploitation Less Likely
High CVE-2021-26862 Windows Installer Elevation of Privilege 7.0 0.0125 Exploitation Less Likely
High CVE-2021-26873 Windows User Profile Service Elevation of Privilege 7.0 0.0115 Exploitation Less Likely
High CVE-2021-26899 Windows UPnP Device Host Elevation of Privilege 7.8 0.0097 Exploitation Less Likely
High CVE-2021-1640 Windows Print Spooler Components Elevation of Privilege 7.8 0.0095 Exploitation Less Likely
High CVE-2021-26898 Windows Event Tracing Elevation of Privilege 7.8 0.0087 Exploitation Less Likely
High CVE-2021-26875 Microsoft Graphics Component Elevation of Privilege 7.8 0.0087 Exploitation Less Likely
High CVE-2021-26878 Windows Print Spooler Components Elevation of Privilege 7.8 0.0085 Exploitation Less Likely
High CVE-2021-26901 Windows Event Tracing Elevation of Privilege 7.8 0.0082 Exploitation Less Likely
High CVE-2021-26872 Windows Event Tracing Elevation of Privilege 7.8 0.0075 Exploitation Less Likely
Routine CVE-2021-24107 Windows Event Tracing Information Disclosure 5.5 0.0103 Exploitation Less Likely
Showing 1 to 21 of 21 1