CVE-2021-26894

—

CVSS 3.1

9.8 critical

EPSS

7%p94

Published

Mar 11, 2021 (Mar 11, 2021)

Modified

Aug 19, 2026

Description

Windows DNS Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.3%)

In the news2 stories

Microsoft Expands Coverage for Exchange Server Bugs

Infosecurity MagazineMar 10, 09:38 UTC · Mar 10, 2021Exploit / PoC in the wildCVE-2021-26411 CVE-2021-27077 CVE-2020-0792+4 CVEs

60

Microsoft Patch Tuesday for March 2021 — Snort rules and prominent vulnerabilities

Cisco TalosMar 9, 18:20 UTC · Mar 9, 2021Vulnerability in the wildCVE-2021-26411 CVE-2021-27085 CVE-2021-21300+7 CVEs

60