CVE-2026-21536

—

CVSS 3.1

9.8 critical

EPSS

2%p74

Published

Mar 5, 2026 (Mar 5, 2026)

Modified

Jun 17, 2026

Description

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

Vendors: microsoft
Products: devices pricing program
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news3 stories

Microsoft Patch Tuesday, March 2026 Edition

Krebs on SecurityMar 11, 12:51 UTC · Mar 11, 2026Vulnerability CVE-2026-21262 CVE-2026-26127 CVE-2026-26113+6 CVEs

60

Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero

The Hacker NewsMar 11, 09:15 UTC · Mar 11, 2026Vulnerability CVE-2026-26127 CVE-2026-21262 CVE-2026-21536+3 CVEs

60

Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs

Security AffairsMar 10, 23:29 UTC · Mar 10, 2026Vulnerability in the wildCVE-2026-26127 CVE-2026-21262 CVE-2026-21536+1 CVEs1

60