Microsoft · Security update · March 9, 2021

KB5000847: March 2021 security update

KB5000847, released March 9, 2021, fixes 28 CVEs across 3 products. One of them is being exploited (CVE-2021-26411); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use2 publicly disclosed
CVEs closed
28
2 rated Critical
Exploited
1
CVE-2021-26411
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.8167
99th percentile

Priority of the 28 CVEs

Patch now 1 Urgent 3 High 19 Routine 5

Applies to

Product
Internet Explorer 11 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-26411 Internet Explorer Remote Code Execution 8.8 0.8167 KEVRansomwareDisclosedExploited
Urgent CVE-2021-26877 Role: DNS Server Remote Code Execution 9.8 0.1729 More likely
Urgent CVE-2021-26897 Role: DNS Server Remote Code Execution 9.8 0.1164 More likely
Urgent CVE-2021-26868 Microsoft Graphics Component Elevation of Privilege 7.8 0.0308 More likely
High CVE-2021-26896 Role: DNS Server Denial of Service 7.5 0.0785 Exploitation Less Likely
High CVE-2021-26894 Role: DNS Server Remote Code Execution 9.8 0.0776 Exploitation Less Likely
High CVE-2021-26895 Role: DNS Server Remote Code Execution 9.8 0.0776 Exploitation Less Likely
High CVE-2021-26893 Role: DNS Server Remote Code Execution 9.8 0.0702 Exploitation Less Likely
High CVE-2021-27063 Role: DNS Server Denial of Service 7.5 0.0673 Exploitation Less Likely
High CVE-2021-26861 Microsoft Graphics Component Remote Code Execution 7.8 0.0289 Exploitation Less Likely
High CVE-2021-26881 Windows Media Remote Code Execution 7.5 0.0283 Exploitation Less Likely
High CVE-2021-26882 Windows Remote Access API Elevation of Privilege 7.8 0.0211 Exploitation Less Likely
High CVE-2021-27077 Microsoft Graphics Component Elevation of Privilege 7.8 0.0144 DisclosedExploitation Less Likely
High CVE-2021-26862 Windows Installer Elevation of Privilege 7.0 0.0125 Exploitation Less Likely
High CVE-2021-26873 Windows User Profile Service Elevation of Privilege 7.0 0.0115 Exploitation Less Likely
High CVE-2021-26887 Windows Folder Redirection Elevation of Privilege 7.8 0.0107 Exploitation Less Likely
High CVE-2021-26899 Windows UPnP Device Host Elevation of Privilege 7.8 0.0097 Exploitation Less Likely
High CVE-2021-1640 Windows Print Spooler Components Elevation of Privilege 7.8 0.0095 Exploitation Less Likely
High CVE-2021-26898 Windows Event Tracing Elevation of Privilege 7.8 0.0087 Exploitation Less Likely
High CVE-2021-26875 Microsoft Graphics Component Elevation of Privilege 7.8 0.0087 Exploitation Less Likely
High CVE-2021-26878 Windows Print Spooler Components Elevation of Privilege 7.8 0.0085 Exploitation Less Likely
High CVE-2021-26901 Windows Event Tracing Elevation of Privilege 7.8 0.0082 Exploitation Less Likely
High CVE-2021-26872 Windows Event Tracing Elevation of Privilege 7.8 0.0075 Exploitation Less Likely
Routine CVE-2020-16996 Microsoft Windows Security Feature Bypass 6.5 0.0237 Exploitation Less Likely
Routine CVE-2021-26886 Windows User Profile Service Denial of Service 6.1 0.0113 Exploitation Less Likely
Showing 1 to 25 of 28 1Next