Microsoft Server security updates, March 2021 (Patch Tuesday 2021-03-09)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in March 2021, including the Patch Tuesday release on 2021-03-09 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 44
Critical: 4
High: 33
In CISA KEV: 4
CVEs: 44

Microsoft server CVEs, March 2021

Mar 11, 2021
Critical [CVE-2021-26897] Windows DNS Server Remote Code Execution Vulnerability
Critical9.8
Mar 11, 2021
Critical [CVE-2021-26867] Windows Hyper-V Remote Code Execution Vulnerability
Critical9.9
Mar 11, 2021
High [CVE-2021-27077] Windows Win32k Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-27076] Microsoft SharePoint Server Remote Code Execution Vulnerability
High8.8
Mar 11, 2021
High [CVE-2021-27070] Windows 10 Update Assistant Elevation of Privilege Vulnerability
High7.3
Mar 11, 2021
High [CVE-2021-27063] Windows DNS Server Denial of Service Vulnerability
High7.5
Mar 11, 2021
High [CVE-2021-26901] Windows Event Tracing Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26900] Windows Win32k Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26899] Windows UPnP Device Host Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26891] Windows Container Execution Agent Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26890] Application Virtualization Remote Code Execution Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26889] Windows Update Stack Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26887] Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26882] Remote Access API Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26881] Microsoft Windows Media Foundation Remote Code Execution Vulnerability
High7.5
Mar 11, 2021
High [CVE-2021-26880] Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26879] Windows Network Address Translation (NAT) Denial of Service Vulnerability
High7.5
Mar 11, 2021
High [CVE-2021-26878] Windows Print Spooler Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26876] OpenType Font Parsing Remote Code Execution Vulnerability
High8.8
Mar 11, 2021
High [CVE-2021-26874] Windows Overlay Filter Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26873] Windows User Profile Service Elevation of Privilege Vulnerability
High7.0
Mar 11, 2021
High [CVE-2021-26870] Windows Projected File System Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26868] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26866] Windows Update Service Elevation of Privilege Vulnerability
High7.1
Mar 11, 2021
High [CVE-2021-26864] Windows Virtual Registry Provider Elevation of Privilege Vulnerability
High8.4
Mar 11, 2021
High [CVE-2021-26863] Windows Win32k Elevation of Privilege Vulnerability
High7.0
Mar 11, 2021
High [CVE-2021-26862] Windows Installer Elevation of Privilege Vulnerability
High7.0
Mar 11, 2021
High [CVE-2021-26861] Windows Graphics Component Remote Code Execution Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-26860] Windows App-V Overlay Filter Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-24095] DirectX Elevation of Privilege Vulnerability
High7.0
Mar 11, 2021
High [CVE-2021-24090] Windows Error Reporting Elevation of Privilege Vulnerability
High7.8
Mar 11, 2021
High [CVE-2021-1729] Windows Update Stack Setup Elevation of Privilege Vulnerability
High7.1
Mar 11, 2021
Medium [CVE-2021-27052] Microsoft SharePoint Server Information Disclosure Vulnerability
Medium5.3
Mar 11, 2021
Medium [CVE-2021-26892] Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
Medium6.2
Mar 11, 2021
Medium [CVE-2021-26886] User Profile Service Denial of Service Vulnerability
Medium6.1
Mar 11, 2021
Medium [CVE-2021-26884] Windows Media Photo Codec Information Disclosure Vulnerability
Medium5.5
Mar 11, 2021
Medium [CVE-2021-26869] Windows ActiveX Installer Service Information Disclosure Vulnerability
Medium5.5
Mar 11, 2021
Medium [CVE-2021-24107] Windows Event Tracing Information Disclosure Vulnerability
Medium5.5
Mar 11, 2021
Medium [CVE-2021-24104] Microsoft SharePoint Server Spoofing Vulnerability
Medium4.6
Mar 2, 2021
Critical [CVE-2021-27078] Microsoft Exchange Server Remote Code Execution Vulnerability
Critical9.1
Mar 2, 2021
Critical [CVE-2021-26855] Microsoft Exchange Server Remote Code Execution Vulnerability
Critical9.1ExploitedCISA KEV
Mar 2, 2021
High [CVE-2021-27065] Microsoft Exchange Server Remote Code Execution Vulnerability
High7.8ExploitedCISA KEV
Mar 2, 2021
High [CVE-2021-26858] Microsoft Exchange Server Remote Code Execution Vulnerability
High7.8ExploitedCISA KEV
Mar 2, 2021
High [CVE-2021-26857] Microsoft Exchange Server Remote Code Execution Vulnerability
High7.8ExploitedCISA KEV

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.