NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-21536

CVSS 3.1: 9.8 critical
EPSS: 2%p74
Published: Mar 5, 2026 · Mar 5, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-21536 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

Vendors: microsoft

Products: devices pricing program

Weakness: CWE-434

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news

3 stories

Microsoft Patch Tuesday, March 2026 Edition

Krebs on SecurityMar 11, 12:51 UTC · Mar 11, 2026VulnerabilityCVE-2026-21262 CVE-2026-26127 CVE-2026-26113+61 · 1 read

60

Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero

The Hacker NewsMar 11, 09:15 UTC · Mar 11, 2026VulnerabilityCVE-2026-26127 CVE-2026-21262 CVE-2026-21536+34 · 2 reads

60

Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs

Security AffairsMar 10, 23:29 UTC · Mar 10, 2026VulnerabilityExploitedCVE-2026-26127 CVE-2026-21262 CVE-2026-21536+14 · 1 read

60