CVE-2021-26443

—

CVSS 3.1

9.0 critical

EPSS

2%p76

Published

Nov 10, 2021 (Nov 10, 2021)

Modified

Aug 19, 2026

Description

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10, windows 11, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news3 stories

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0

The Hacker NewsNov 10, 06:24 UTC · Nov 10, 2021Vulnerability in the wildCVE-2021-42321 CVE-2021-42292 CVE-2021-43208+16 CVEs

60

Microsoft Patch Tuesday for Nov. 2021 — Snort rules and prominent vulnerabilities

Cisco TalosNov 9, 20:26 UTC · Nov 9, 2021Vulnerability in the wildCVE-2021-42292 CVE-2021-38666 CVE-2021-42298+1 CVEs

60

Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)

Help Net SecurityNov 9, 00:00 UTC · Nov 9, 2021Exploit / PoC in the wildCVE-2021-42321 CVE-2021-42292 CVE-2021-38666+2 CVEs

60