Microsoft · Security update · March 10, 2021
KB5000871: March 2021 security update
KB5000871, released March 10, 2021, fixes 7 CVEs across 25 products. 4 of them are being exploited (CVE-2021-26855); 4 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now4 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
7
4 rated Critical
Exploited
4
CVE-2021-26855
Exploitation more likely
0
Vendor assessment
Highest EPSS
1.0000
99th percentile
Priority of the 7 CVEs
Patch now 4
Urgent 1
High 1
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-26855 | Microsoft Exchange Server | Remote Code Execution | 9.1 | 1.0000 | KEVRansomwareExploited |
| Patch now | CVE-2021-27065 | Microsoft Exchange Server | Remote Code Execution | 7.8 | 0.9988 | KEVRansomwareExploited |
| Patch now | CVE-2021-26857 | Microsoft Exchange Server | Remote Code Execution | 7.8 | 0.9576 | KEVRansomwareExploited |
| Patch now | CVE-2021-26858 | Microsoft Exchange Server | Remote Code Execution | 7.8 | 0.9365 | KEVRansomwareExploited |
| Urgent | CVE-2021-26412 | Microsoft Exchange Server | Remote Code Execution | 9.1 | 0.3376 | Exploitation Less Likely |
| High | CVE-2021-27078 | Microsoft Exchange Server | Remote Code Execution | 9.1 | 0.2159 | Exploitation Less Likely |
| Routine | CVE-2021-26854 | Microsoft Exchange Server | Remote Code Execution | 6.6 | 0.2474 | Exploitation Less Likely |
Showing 1 to 7 of 7
1