NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-26443

CVSS 3.1: 9.0 critical
EPSS: 2%p76
Published: Nov 10, 2021 · Nov 10, 2021
Modified: Aug 19, 2026

Analyze CVE-2021-26443 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows 10, windows 11, windows server 2016, windows server 2019, windows server 2022

Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

3 stories

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0

The Hacker NewsNov 10, 06:24 UTC · Nov 10, 2021VulnerabilityExploitedCVE-2021-42321 CVE-2021-42292 CVE-2021-43208+164

60

Microsoft Patch Tuesday for Nov. 2021 — Snort rules and prominent vulnerabilities

Cisco TalosNov 9, 20:26 UTC · Nov 9, 2021VulnerabilityExploitedCVE-2021-42292 CVE-2021-38666 CVE-2021-42298+12 · 1 read

60

Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)

Help Net SecurityNov 9, 00:00 UTC · Nov 9, 2021Exploit / PoCExploitedCVE-2021-42321 CVE-2021-42292 CVE-2021-38666+24 · 1 read

60